This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa File: 1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa (raw, json) Hash identifier: hsF+G1dhCeg586yOMZ474eEhWymKrXasiGX5xQqIW0g= Subject key identifier: 76:FD:BF:5A:60:72:56:53:B3:1E:AF:8A:F1:7F:B0:DE:18:46:3D:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D184579F3106AD2D9E7160 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:84:57:9f:31:06:ad:2d:9e:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=8b147f42-0f28-477a-a764-4b5e857ea928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:5f:2b:ac:15:be:83:89:cf:7a:b3:d3:78: 3d:22:cf:3e:c4:34:70:8e:19:04:45:6f:6e:7a:25: a3:77:bf:92:5f:2d:75:c0:06:03:b9:b2:5c:5c:3a: 14:a2:e6:70:5f:a8:58:32:17:08:8e:8b:ca:37:1e: ed:4a:3b:d5:71:7a:b6:a4:c8:9b:ab:c3:df:9d:82: 18:b1:ce:78:bc:7f:a9:b6:c8:84:e3:90:14:fe:a1: fd:a4:6a:ed:42:e4:2d:b4:d7:28:63:6b:35:74:0e: d5:f7:95:fb:ee:08:cd:eb:6d:d9:76:8b:ac:56:cd: 52:4b:69:13:c4:e5:7a:82:13:77:34:aa:ee:e1:2c: 5f:40:19:14:f1:fc:24:81:70:fc:08:cb:7f:ea:f2: 90:e1:3d:7a:6f:c7:8f:4b:f4:5e:c7:da:60:03:94: 7f:8c:89:67:9d:f2:e9:0e:24:42:2d:c6:78:9e:7e: b7:07:65:cf:b4:fe:01:79:f9:31:c3:54:48:72:78: 2b:41:52:73:9a:9e:21:a9:55:73:27:e6:dc:4b:2a: 12:38:ef:18:a7:a2:f1:9d:1f:d7:1c:29:37:40:78: 55:1b:a7:fb:e0:8e:27:ce:f6:dd:73:3c:4a:12:0f: cc:a9:ff:36:04:dd:63:76:05:43:d7:bd:d1:7c:5f: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:BF:5A:60:72:56:53:B3:1E:AF:8A:F1:7F:B0:DE:18:46:3D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:63:80:88:24:fb:6f:77:21:cf:87:f0:c1:82:0d:25:5d:27: a2:d8:3d:07:24:84:4d:cd:bf:c4:74:70:25:5e:ea:ec:e8:3c: 67:c2:63:37:8d:32:19:fe:9a:f3:64:29:82:e5:67:24:e8:e8: b2:b0:71:87:5b:7b:80:80:b2:5a:29:4a:14:e8:4e:e2:47:0f: e7:8c:29:c1:22:aa:28:f5:8a:a9:2e:16:f4:d7:77:54:e9:69: 43:d3:bf:6a:53:82:d5:82:29:aa:29:dc:41:42:a5:71:9d:05: 15:20:6a:15:25:27:e7:3e:26:13:33:2d:71:f8:6d:84:6b:28: 0f:0f:c9:a4:ed:e8:65:91:0b:c6:fc:8b:cf:ee:fc:9f:a0:6f: 69:68:94:1d:f1:6f:2e:46:50:32:27:5a:b8:eb:c0:e0:94:c0: 83:ae:ec:1a:7e:a3:cd:ea:7b:ef:60:d4:5f:2a:c5:01:cc:60: 7c:47:f4:0a:ce:97:d0:e8:92:b2:f8:4d:51:e4:32:dc:ed:1e: 99:8d:30:5d:62:40:cc:b3:9e:2e:42:d9:ea:ca:8f:e9:da:cf: 56:06:8d:dc:f5:14:98:51:99:63:13:71:25:f1:a9:a1:8c:ad: 7e:8f:15:ac:f9:9d:36:72:1a:07:ad:ef:5e:4b:42:43:86:3b: 57:b6:2a:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0YRXnzEGrS2ecWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OGIxNDdmNDItMGYyOC00NzdhLWE3NjQtNGI1ZTg1N2VhOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVdfK6wVvoOJz3qz03g9Is8+xDRwjhkERW9u eiWjd7+SXy11wAYDubJcXDoUouZwX6hYMhcIjovKNx7tSjvVcXq2pMibq8PfnYIY sc54vH+ptsiE45AU/qH9pGrtQuQttNcoY2s1dA7V95X77gjN623ZdousVs1SS2kT xOV6ghN3NKru4SxfQBkU8fwkgXD8CMt/6vKQ4T16b8ePS/Rex9pgA5R/jIlnnfLp DiRCLcZ4nn63B2XPtP4Befkxw1RIcngrQVJzmp4hqVVzJ+bcSyoSOO8Yp6LxnR/X HCk3QHhVG6f74I4nzvbdczxKEg/Mqf82BN1jdgVD173RfF+/JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHb9v1pgclZTsx6vivF/sN4YRj2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEzOGQ2NzUtNTNhYS0z Y2VkLThhNWUtY2E0ZGUxZTM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGJjgIgk+293Ic+H8MGCDSVdJ6LYPQckhE3Nv8R0cCVe6uzoPGfC YzeNMhn+mvNkKYLlZyTo6LKwcYdbe4CAslopShToTuJHD+eMKcEiqij1iqkuFvTX d1TpaUPTv2pTgtWCKaop3EFCpXGdBRUgahUlJ+c+JhMzLXH4bYRrKA8PyaTt6GWR C8b8i8/u/J+gb2lolB3xby5GUDInWrjrwOCUwIOu7Bp+o83qe+9g1F8qxQHMYHxH 9ArOl9DokrL4TVHkMtztHpmNMF1iQMyzni5C2erKj+naz1YGjdz1FJhRmWMTcSXx qaGMrX6PFaz5nTZyGget715LQkOGO1e2Kn8= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:48 2026 by rpki-client