This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: G/5LhZ+fhXXDCxISTzEUBiCMiMCcESNV9JckV0edePA= Subject key identifier: 32:D2:E1:AD:3E:B4:E5:45:62:A2:86:BD:34:DE:26:11:54:B0:D4:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4CA109C49887537A43938A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:09:c4:98:87:53:7a:43:93:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=6a19094d-720d-4405-8239-ab910068a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:04:ff:ef:bc:c3:6b:df:3a:27:6a:8e:9c:b9: f5:09:93:c7:9d:73:8d:47:43:5b:7a:58:6b:4b:e4: 01:33:92:68:bd:d5:b9:7d:76:16:44:9a:a9:00:a8: 61:3e:c8:51:74:77:51:a0:2c:b2:36:e5:5d:5a:f5: 12:4c:a4:ae:b5:10:79:a1:6b:47:53:1d:d6:3c:a3: 43:90:4f:e8:f9:d7:5e:ee:00:c4:61:30:b1:8c:d1: 7c:f9:a7:04:97:df:53:79:e6:6b:46:8b:75:a9:24: de:ec:ee:e8:35:c5:7a:ea:20:da:2a:10:d5:62:7a: e2:c7:0b:4c:be:cd:f0:89:42:29:0e:0d:4f:76:e2: 33:a5:44:26:4b:b1:13:77:5d:7a:2a:17:14:75:3d: 50:33:3f:ed:11:2d:e2:73:8b:81:4d:4c:ae:06:53: 7c:a3:1a:c8:a8:7f:83:19:93:dd:75:ab:79:49:f1: 9f:f4:67:ce:f5:b5:f3:71:5a:ef:78:61:4e:b2:d4: 68:f9:a9:95:b0:ac:6a:4e:59:d8:65:b4:23:43:b1: d3:b0:4f:0e:2d:2a:85:80:5e:c0:27:ca:5e:ac:9f: af:3c:39:39:c1:ac:bc:fe:4e:19:fe:66:20:35:73: 46:d1:42:48:46:02:ab:e8:65:4f:fd:3f:d9:7d:ad: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:E1:AD:3E:B4:E5:45:62:A2:86:BD:34:DE:26:11:54:B0:D4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:20:78:e3:53:49:80:8b:4e:d1:a2:e4:a7:bb:32:63:c5:11: 7d:09:fb:49:ac:00:cd:63:d3:3f:3d:2f:f6:0a:86:47:a8:83: 47:f5:2c:a7:d8:26:26:87:68:ae:e1:6a:7b:50:32:c8:6f:7f: 6b:e0:f2:e0:8f:b6:79:79:82:bc:5e:8d:78:bb:a9:12:c4:75: 40:69:5f:b5:a6:41:8c:04:d7:a5:c9:4c:3a:7b:5c:1c:e8:b8: ae:20:0b:96:69:2f:cf:a1:e9:cd:5a:29:7f:88:66:b3:be:69: 2a:6a:3d:be:47:03:fa:5f:17:e5:57:dc:e3:ef:ef:ec:04:ba: 2c:6f:05:1f:7c:67:d2:6a:16:77:5f:b3:6e:a7:ba:75:99:de: 58:e1:9d:a0:3a:a2:5b:59:0a:f8:bb:59:a2:49:ef:ac:a8:fb: d4:79:60:a4:4f:82:f8:9a:83:92:c0:f2:7a:22:09:d9:b4:57: 09:e7:18:ab:98:bb:ae:e8:63:37:dd:54:7a:af:45:fc:b8:52: 92:5e:18:33:a7:65:73:ba:1b:4f:74:ca:69:59:5e:bc:ad:e5: 87:38:30:52:64:42:11:f9:2e:fe:5b:64:cf:ad:5d:84:12:73: b6:ef:4b:f5:96:25:f8:14:74:a7:43:31:e0:b5:20:2e:ed:b4: b9:51:4d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoQnEmIdTekOTioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmExOTA5NGQtNzIwZC00NDA1LTgyMzktYWI5MTAwNjhhOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQT/77zDa986J2qOnLn1CZPHnXONR0Nbelhr S+QBM5JovdW5fXYWRJqpAKhhPshRdHdRoCyyNuVdWvUSTKSutRB5oWtHUx3WPKND kE/o+dde7gDEYTCxjNF8+acEl99TeeZrRot1qSTe7O7oNcV66iDaKhDVYnrixwtM vs3wiUIpDg1PduIzpUQmS7ETd116KhcUdT1QMz/tES3ic4uBTUyuBlN8oxrIqH+D GZPddat5SfGf9GfO9bXzcVrveGFOstRo+amVsKxqTlnYZbQjQ7HTsE8OLSqFgF7A J8perJ+vPDk5way8/k4Z/mYgNXNG0UJIRgKr6GVP/T/Zfa3BBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLS4a0+tOVFYqKGvTTeJhFUsNSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8geONTSYCLTtGi5Ke7MmPFEX0J+0msAM1j0z89L/YKhkeog0f1LKfY JiaHaK7hantQMshvf2vg8uCPtnl5grxejXi7qRLEdUBpX7WmQYwE16XJTDp7XBzo uK4gC5ZpL8+h6c1aKX+IZrO+aSpqPb5HA/pfF+VX3OPv7+wEuixvBR98Z9JqFndf s26nunWZ3ljhnaA6oltZCvi7WaJJ76yo+9R5YKRPgviag5LA8noiCdm0VwnnGKuY u67oYzfdVHqvRfy4UpJeGDOnZXO6G090ymlZXryt5Yc4MFJkQhH5Lv5bZM+tXYQS c7bvS/WWJfgUdKdDMeC1IC7ttLlRTSU= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:38 2026 by rpki-client