This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: ogCrzyjb9xxSvCNVWNhk3FbIACVrT5/plMfIp0QHWvI= Subject key identifier: F7:60:08:6F:C6:2D:1A:2B:E7:37:FF:85:EE:AC:58:11:75:02:1C:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15117B6947A902418C100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:51:17:b6:94:7a:90:24:18:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=54c48c6b-bd45-4939-a614-721eeba798c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:81:73:34:50:59:c4:89:9d:00:36:c7:e4: c5:a1:01:e7:ff:32:49:7c:32:25:b4:de:8a:8a:cc: fd:be:5a:8a:69:91:8a:71:65:7e:44:9a:70:1e:93: 8d:6e:ad:55:da:9a:3b:52:dc:18:ad:6a:38:e3:be: 8c:42:a5:b4:d4:9b:68:ec:16:98:14:d9:a3:6b:35: 67:8b:3e:2b:38:7e:f0:ab:6e:c5:f3:ad:e1:18:22: 49:5e:02:cf:7e:e4:03:72:c5:74:8e:09:70:06:d8: f4:30:6d:27:14:0d:d9:7c:6c:cf:b3:f9:54:e9:91: bf:81:a9:90:17:6c:f7:3a:61:c6:31:e1:a1:be:d9: 7c:fc:f8:e8:93:a6:db:ee:57:b5:20:da:26:5a:c3: a3:e5:69:24:39:c6:b6:96:33:84:15:41:9c:3e:dc: 92:25:04:cf:14:6c:56:8d:d2:4f:bd:01:cf:82:e1: 13:59:ba:0c:ff:d2:37:06:92:ff:ba:55:96:97:2b: ae:fd:7f:3c:7d:df:99:20:02:dd:55:b6:1d:bc:a3: 64:75:d1:eb:f4:76:ec:b6:19:e9:6d:f9:62:a2:4d: d1:bc:b0:ab:43:9c:78:fa:53:22:82:9d:21:b3:e8: f2:8d:0e:a6:57:5e:fc:7a:48:bd:80:ca:0e:99:97: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:60:08:6F:C6:2D:1A:2B:E7:37:FF:85:EE:AC:58:11:75:02:1C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d0:b5:84:93:c4:2e:39:4b:25:14:ce:19:ea:f3:dc:e6:20: 13:38:fd:b3:f6:42:12:ee:59:b7:60:e9:d5:69:dd:9b:b9:63: f8:ba:7f:c7:7e:9d:95:b0:a5:5d:6c:e4:4c:81:b4:d4:b6:13: 3b:06:fb:73:f6:c9:36:a8:a6:e4:fb:ab:e0:12:7d:13:12:f6: cc:d2:ec:b9:1f:79:d2:71:a0:0f:04:2f:6c:dc:95:be:1d:fd: 50:af:b8:1d:de:ce:b7:f7:00:51:80:57:80:af:12:01:50:3a: df:9c:86:ef:b3:11:9d:2d:84:5c:19:13:f7:25:c0:41:10:de: ce:62:4b:c0:1c:b0:29:81:16:3a:6e:1b:91:99:85:b2:48:2a: 38:c0:12:e0:78:dc:33:30:18:d6:59:82:b3:a4:e1:fa:03:2a: c8:a8:eb:d1:2d:08:a9:85:e8:5f:8d:4d:07:40:36:ce:45:1d: d2:8a:59:94:95:d6:11:31:93:79:c0:fa:ce:51:38:15:36:5f: 38:1f:64:42:6c:59:7f:c9:17:63:44:ea:8f:2e:a1:5a:37:6c: 8d:38:71:59:76:4d:e7:cc:a3:9c:a8:ac:5c:b8:2c:84:32:6f: ab:83:ab:76:37:3d:7c:11:b7:7b:16:bd:a7:dd:0c:4d:9b:2c: 55:f4:a5:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VEXtpR6kCQYwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NTRjNDhjNmItYmQ0NS00OTM5LWE2MTQtNzIxZWViYTc5OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqumBczRQWcSJnQA2x+TFoQHn/zJJfDIltN6K isz9vlqKaZGKcWV+RJpwHpONbq1V2po7UtwYrWo4476MQqW01Jto7BaYFNmjazVn iz4rOH7wq27F863hGCJJXgLPfuQDcsV0jglwBtj0MG0nFA3ZfGzPs/lU6ZG/gamQ F2z3OmHGMeGhvtl8/Pjok6bb7le1INomWsOj5WkkOca2ljOEFUGcPtySJQTPFGxW jdJPvQHPguETWboM/9I3BpL/ulWWlyuu/X88fd+ZIALdVbYdvKNkddHr9Hbsthnp bfliok3RvLCrQ5x4+lMigp0hs+jyjQ6mV178eki9gMoOmZd6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdgCG/GLRor5zf/he6sWBF1AhxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfQtYSTxC45SyUUzhnq89zmIBM4/bP2QhLuWbdg6dVp3Zu5Y/i6f8d+ nZWwpV1s5EyBtNS2EzsG+3P2yTaopuT7q+ASfRMS9szS7LkfedJxoA8EL2zclb4d /VCvuB3ezrf3AFGAV4CvEgFQOt+chu+zEZ0thFwZE/clwEEQ3s5iS8AcsCmBFjpu G5GZhbJIKjjAEuB43DMwGNZZgrOk4foDKsio69EtCKmF6F+NTQdANs5FHdKKWZSV 1hExk3nA+s5ROBU2XzgfZEJsWX/JF2NE6o8uoVo3bI04cVl2TefMo5yorFy4LIQy b6uDq3Y3PXwRt3sWvafdDE2bLFX0pY0= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:43 2026 by rpki-client