This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa File: 1e069c73-4292-3ffe-a143-d91bade4b8f5.roa (raw, json) Hash identifier: tDJ0VU5TODYh/QXbCOMmtX96BFZDnrdQc68m5MMEVrE= Subject key identifier: 88:F7:BA:4E:67:1A:71:F5:CF:CE:AA:6E:87:C6:91:FE:17:3B:C2:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D17E2A4EA0EDE8A7679E90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.211.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:7e:2a:4e:a0:ed:e8:a7:67:9e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=32f17291-04a9-45d0-8cc2-240ad64a0e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:49:e6:bd:20:8e:d6:72:9e:fb:9d:61:37: 72:20:2a:f6:14:af:ba:1e:d5:c8:8c:a3:0d:42:fc: 7c:88:61:d5:ca:82:df:e8:16:37:9d:e7:12:a7:2b: db:6f:62:e4:fe:44:a4:f9:40:00:cb:0c:ed:28:a1: f1:5e:aa:5b:34:bb:39:aa:3b:f0:5e:39:8b:e7:ca: 91:4a:d3:fc:40:25:ba:21:e3:9a:23:7b:d2:cf:f5: 20:85:a1:c8:2b:d4:3e:ae:cb:a6:9b:a2:8c:be:e9: cd:e1:9c:57:2e:db:39:24:cc:5d:de:e3:7b:a1:f3: db:aa:c8:4b:1e:ae:49:7c:c2:81:8c:d1:31:2e:8c: ca:21:2f:29:a2:9a:c4:01:8d:c2:f0:2b:e8:46:1f: 47:da:c2:b7:4e:2e:62:ee:e5:93:03:6b:d7:45:51: d6:7a:01:5a:c7:00:0a:e9:cb:8e:1c:44:2b:c0:5e: 8b:00:d7:66:1d:81:6f:c2:9f:34:45:2b:3c:6f:46: ad:81:bd:49:f6:61:24:5a:d0:3b:df:b1:f7:36:b3: 79:a2:a8:de:c5:67:c4:e0:d4:38:91:25:84:41:a6: a6:3e:81:35:31:26:bd:88:19:c5:26:89:40:cc:df: 42:29:c0:c3:33:35:bc:c8:45:42:fe:d2:4f:89:85: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:BA:4E:67:1A:71:F5:CF:CE:AA:6E:87:C6:91:FE:17:3B:C2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.211.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2f:85:b6:78:56:82:ea:02:79:87:44:18:c9:93:f4:24:bf: ab:cf:ad:9c:a2:58:ef:1d:9a:6f:df:9d:e2:7b:ca:c0:e2:83: 32:36:a0:cc:89:aa:80:fc:02:38:c3:72:c7:93:c3:81:60:b1: f1:7a:ac:a7:13:df:c5:b7:2b:72:ed:4a:b5:5c:7b:a8:e6:56: 5b:81:39:43:7d:e2:7d:9b:4f:f8:18:1f:75:11:c5:81:b5:ac: 85:ec:d6:98:41:bd:09:74:49:b3:4f:e9:d9:0c:48:da:14:52: 78:d5:f4:45:03:ea:b1:8b:c8:ac:a0:47:fa:0f:80:fc:28:10: 4c:7e:5e:fc:53:27:21:5f:a5:28:eb:22:d8:f1:c1:6c:c9:59: 50:2d:a5:dd:3a:bf:07:c1:c8:bd:d6:66:cd:a0:50:6f:18:65: f6:e2:88:77:bb:8f:71:07:2a:4a:ca:6e:d0:72:b6:0f:c2:88: ee:45:96:49:ad:e8:92:3d:7a:47:5e:b2:4a:d5:1e:ae:b8:ae: 52:d8:81:f2:f9:ca:1f:ae:3a:96:34:e7:6a:c3:7a:f2:63:59: 8a:b3:c4:42:0c:cf:4d:f0:7f:21:33:3b:79:af:36:57:81:59: 7f:1e:50:cd:64:fa:d8:0f:90:6e:3d:4f:ee:8d:23:58:a0:11: 7c:fb:e5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0X4qTqDt6KdnnpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MzJmMTcyOTEtMDRhOS00NWQwLThjYzItMjQwYWQ2NGEwZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrlJ5r0gjtZynvudYTdyICr2FK+6HtXIjKMN Qvx8iGHVyoLf6BY3necSpyvbb2Lk/kSk+UAAywztKKHxXqpbNLs5qjvwXjmL58qR StP8QCW6IeOaI3vSz/UghaHIK9Q+rsumm6KMvunN4ZxXLts5JMxd3uN7ofPbqshL Hq5JfMKBjNExLozKIS8poprEAY3C8CvoRh9H2sK3Ti5i7uWTA2vXRVHWegFaxwAK 6cuOHEQrwF6LANdmHYFvwp80RSs8b0atgb1J9mEkWtA737H3NrN5oqjexWfE4NQ4 kSWEQaamPoE1MSa9iBnFJolAzN9CKcDDMzW8yEVC/tJPiYVWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj3uk5nGnH1z86qbofGkf4XO8I7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwNjljNzMtNDI5Mi0z ZmZlLWExNDMtZDkxYmFkZTRiOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkvhbZ4VoLqAnmHRBjJk/Qkv6vPrZyiWO8dmm/fneJ7ysDigzI2oMyJ qoD8AjjDcseTw4FgsfF6rKcT38W3K3LtSrVce6jmVluBOUN94n2bT/gYH3URxYG1 rIXs1phBvQl0SbNP6dkMSNoUUnjV9EUD6rGLyKygR/oPgPwoEEx+XvxTJyFfpSjr ItjxwWzJWVAtpd06vwfByL3WZs2gUG8YZfbiiHe7j3EHKkrKbtBytg/CiO5Flkmt 6JI9ekdeskrVHq64rlLYgfL5yh+uOpY052rDevJjWYqzxEIMz03wfyEzO3mvNleB WX8eUM1k+tgPkG49T+6NI1igEXz75Tg= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:09 2026 by rpki-client