This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14feaa93-c1f9-3dfd-9bb8-4fa7ba9a18d1.roa File: 14feaa93-c1f9-3dfd-9bb8-4fa7ba9a18d1.roa (raw, json) Hash identifier: W4ms+gt+p0jAhuZ/Rb1bwMMk0jZV1IYAJhbQtCQltPg= Subject key identifier: 84:9E:C9:FC:57:9D:00:7D:9C:CC:CD:5D:0E:E2:54:19:7D:DB:A5:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4CA14251F3726496EB8DF080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14feaa93-c1f9-3dfd-9bb8-4fa7ba9a18d1.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 75.90.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:42:51:f3:72:64:96:eb:8d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=551a61bb-d15b-4a30-8ca0-61d55db594dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:fc:bf:c5:93:10:47:ab:cd:28:7a:5d:16: 7d:c7:93:04:93:42:85:9d:28:46:e0:a3:f1:7f:6d: 23:63:98:c5:6c:e4:8c:9b:98:0f:c3:20:dc:a1:30: c2:a6:a2:21:6c:0d:3c:cf:6c:23:ee:f7:1c:ed:71: 3f:ed:72:5d:cc:5d:7d:0f:a1:96:8b:b6:34:d5:1b: d3:e1:a1:1d:cf:ae:da:6c:5e:0e:9a:da:3a:1c:61: 11:ef:08:58:14:af:25:b4:f5:20:1c:9f:ef:46:e0: 2c:9c:85:18:64:70:1f:86:d3:cc:84:30:d0:32:be: 78:bf:63:c2:96:bd:c1:e1:45:e2:6d:e0:32:d8:4e: 41:f0:ee:c0:dc:fc:1e:a2:bd:81:a3:75:32:5a:e3: 6d:9b:e7:ba:f5:fa:e2:16:91:65:62:65:01:45:fc: 47:1c:99:d3:c4:c2:0f:01:ec:9d:0c:7b:38:6c:82: 27:ed:d5:69:5d:02:eb:c8:6e:e4:96:52:c3:c0:02: 0e:78:89:78:8e:0b:88:fd:90:59:76:2e:18:4e:05: 16:dd:53:fa:cb:a1:a3:2c:dc:92:c3:df:5c:3e:59: 73:dc:8f:67:bf:a9:75:aa:60:1a:2c:2c:4e:1e:45: 78:34:b3:b5:4d:4f:05:94:41:d6:c0:dd:d2:ca:13: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9E:C9:FC:57:9D:00:7D:9C:CC:CD:5D:0E:E2:54:19:7D:DB:A5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14feaa93-c1f9-3dfd-9bb8-4fa7ba9a18d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7b:06:c4:1f:b5:e4:15:59:8e:97:89:82:91:fe:8a:ea:1c: 1a:5b:de:ba:05:65:df:58:64:c8:65:63:5e:de:52:af:19:b7: 6f:71:bc:7b:e4:46:28:2e:fd:78:1e:6b:bf:de:18:84:2f:73: 2c:e0:9b:6a:07:d1:78:9c:72:11:d6:d1:cd:f5:c4:34:85:ce: 48:ca:3f:5a:09:d7:53:3a:cc:0a:69:20:3b:83:e4:26:72:a1: 58:7d:f1:eb:da:9e:c7:d5:14:f3:08:cd:d7:2e:83:c4:49:69: 24:77:fa:7c:f1:fb:a9:9e:56:52:58:95:77:33:7d:24:09:3d: f8:18:43:96:93:45:e7:f6:cf:92:c8:54:6b:24:d8:29:25:d5: f6:a7:44:81:c3:8e:61:6d:d5:fd:55:d8:7f:cf:70:35:ee:0e: 62:c1:0f:0a:58:09:16:6e:13:8a:55:88:2a:30:ea:1c:9c:c3: e6:52:9d:a6:77:4f:d8:3c:78:e6:a5:b2:69:06:3c:a4:3a:5e: f2:fb:c2:98:1e:a7:f8:d1:58:93:c9:8e:46:d9:d4:d7:d3:04: 8e:fd:7e:a0:4e:17:33:08:5c:58:c8:1f:26:0a:c0:71:63:6d: ea:01:ce:6b:ad:e1:5f:79:2c:ce:a1:5a:fa:14:83:1e:fe:ec: 21:a5:6c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoUJR83JkluuN8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTUxYTYxYmItZDE1Yi00YTMwLThjYTAtNjFkNTVkYjU5NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN78v8WTEEerzSh6XRZ9x5MEk0KFnShG4KPx f20jY5jFbOSMm5gPwyDcoTDCpqIhbA08z2wj7vcc7XE/7XJdzF19D6GWi7Y01RvT 4aEdz67abF4Omto6HGER7whYFK8ltPUgHJ/vRuAsnIUYZHAfhtPMhDDQMr54v2PC lr3B4UXibeAy2E5B8O7A3Pweor2Bo3UyWuNtm+e69friFpFlYmUBRfxHHJnTxMIP AeydDHs4bIIn7dVpXQLryG7kllLDwAIOeIl4jguI/ZBZdi4YTgUW3VP6y6GjLNyS w99cPllz3I9nv6l1qmAaLCxOHkV4NLO1TU8FlEHWwN3SyhMuVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISeyfxXnQB9nMzNXQ7iVBl926XJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTRmZWFhOTMtYzFmOS0z ZGZkLTliYjgtNGZhN2JhOWExOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF7BsQfteQVWY6XiYKR/orqHBpb3roFZd9YZMhlY17eUq8Zt29xvHvk Rigu/Xgea7/eGIQvcyzgm2oH0XicchHW0c31xDSFzkjKP1oJ11M6zAppIDuD5CZy oVh98evansfVFPMIzdcug8RJaSR3+nzx+6meVlJYlXczfSQJPfgYQ5aTRef2z5LI VGsk2Ckl1fanRIHDjmFt1f1V2H/PcDXuDmLBDwpYCRZuE4pViCow6hycw+ZSnaZ3 T9g8eOalsmkGPKQ6XvL7wpgep/jRWJPJjkbZ1NfTBI79fqBOFzMIXFjIHyYKwHFj beoBzmut4V95LM6hWvoUgx7+7CGlbCE= -----END CERTIFICATE-----Generated at Sat Jan 10 21:00:44 2026 by rpki-client