This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa File: 23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa (raw, json) Hash identifier: 2v/MonZG1FqVpJXlsaE76xVHrQT4As39TCbGduu0UuA= Subject key identifier: B6:88:27:92:49:2C:0D:5C:3A:37:CA:1E:7C:2A:6D:4B:5E:A8:53:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068EB5D3D9278D73885000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.185.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8e:b5:d3:d9:27:8d:73:88:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=f844c5c8-65a3-438a-8564-3f068e360cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:24:37:48:a7:aa:47:11:bc:68:fe:13:89: 62:0a:8b:e6:39:33:2b:c5:71:c5:89:37:02:39:d3: 5c:84:ca:5a:8c:fc:e2:4d:43:3c:e7:48:63:c3:85: be:a8:1d:59:5f:2b:61:0d:03:b1:bd:d9:27:63:b6: 10:3e:dc:e0:bd:e7:fc:ce:c7:e9:ac:a4:02:3d:bc: ae:69:cf:c6:e0:a0:4f:f2:42:b6:82:45:d9:be:f8: 75:b1:81:cb:bb:c9:76:6d:dc:43:f9:50:fb:56:9e: 0f:03:78:57:3c:4b:f7:9a:c3:6f:37:cc:57:5a:f6: 9c:aa:37:39:56:b0:21:87:9a:c4:d0:58:c7:f8:0c: 39:35:88:0d:91:a8:09:8c:7b:e0:f9:45:19:75:a5: b5:b4:69:51:03:03:67:a3:f3:c7:d9:eb:88:92:2b: 2b:5b:b5:9e:59:0f:8f:9d:83:5d:aa:fd:64:54:3b: 59:86:24:6e:68:4c:eb:58:d2:16:42:e7:32:52:0d: 78:3f:f9:46:39:c1:15:21:7b:df:94:ff:05:4c:c4: 2f:be:43:66:52:78:4c:29:5e:b4:5a:f6:f5:a1:f4: ee:7b:a2:27:96:1f:33:02:54:91:be:e5:16:e7:01: 0a:78:d6:67:fd:e0:b3:7e:72:57:b8:93:fa:82:91: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:88:27:92:49:2C:0D:5C:3A:37:CA:1E:7C:2A:6D:4B:5E:A8:53:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:e9:80:28:2c:af:0f:c4:e7:cd:4d:d0:c8:c5:61:b4:fa: 65:c8:c6:27:43:b0:66:11:f7:c7:93:41:25:b6:83:ca:91:c6: 59:ff:4f:40:45:03:a9:8d:c0:ef:1b:96:cb:a3:2a:d3:e1:78: 82:40:4e:78:e6:5a:96:2e:22:b7:9c:3d:c1:c4:10:fb:1e:de: 89:32:b1:5c:d7:d3:69:d6:8b:55:e4:fe:94:53:87:c6:0e:2c: 4c:2f:d9:a0:df:d3:c7:ae:29:ba:16:27:9d:96:f9:ad:ba:30: 25:a0:5d:6f:06:84:e2:45:3e:5b:72:a1:76:58:d3:f4:9b:9b: 19:4d:65:65:19:1b:fb:88:48:9a:8e:dd:d9:f6:40:3b:52:e8: 9e:d5:6e:c7:32:fd:b8:72:4c:38:dc:82:a6:7a:f4:b0:52:b2: 97:ea:2a:ff:c8:c4:30:eb:d7:d7:70:35:e3:66:e1:54:04:ad: eb:43:31:f2:10:ea:1b:8a:ae:2c:39:0c:f7:d3:04:18:dd:da: 66:68:fb:0b:2f:05:bf:a0:53:93:9f:3b:27:ef:96:7e:b8:db: 02:2d:aa:7d:3c:d8:7d:a3:74:08:c2:42:b2:be:c0:ca:91:e1: 3b:11:38:1c:7d:0d:5c:5e:9c:1b:79:02:05:f5:60:33:d7:a2: c5:20:ae:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo6109knjXOIUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk Zjg0NGM1YzgtNjVhMy00MzhhLTg1NjQtM2YwNjhlMzYwY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmUkN0inqkcRvGj+E4liCovmOTMrxXHFiTcC OdNchMpajPziTUM850hjw4W+qB1ZXythDQOxvdknY7YQPtzgvef8zsfprKQCPbyu ac/G4KBP8kK2gkXZvvh1sYHLu8l2bdxD+VD7Vp4PA3hXPEv3msNvN8xXWvacqjc5 VrAhh5rE0FjH+Aw5NYgNkagJjHvg+UUZdaW1tGlRAwNno/PH2euIkisrW7WeWQ+P nYNdqv1kVDtZhiRuaEzrWNIWQucyUg14P/lGOcEVIXvflP8FTMQvvkNmUnhMKV60 Wvb1ofTue6Inlh8zAlSRvuUW5wEKeNZn/eCzfnJXuJP6gpHLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaIJ5JJLA1cOjfKHnwqbUteqFNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhN2Y2N2UtMjBlYy0z MTZiLWE3ZjItYjE0YzhhNmIwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJt6YAoLK8PxOfNTdDIxWG0+mXIxidDsGYR98eTQSW2g8qRxln/T0BF A6mNwO8blsujKtPheIJATnjmWpYuIrecPcHEEPse3okysVzX02nWi1Xk/pRTh8YO LEwv2aDf08euKboWJ52W+a26MCWgXW8GhOJFPltyoXZY0/SbmxlNZWUZG/uISJqO 3dn2QDtS6J7Vbscy/bhyTDjcgqZ69LBSspfqKv/IxDDr19dwNeNm4VQEretDMfIQ 6huKriw5DPfTBBjd2mZo+wsvBb+gU5OfOyfvln642wItqn082H2jdAjCQrK+wMqR 4TsROBx9DVxenBt5AgX1YDPXosUgrsQ= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:25 2026 by rpki-client