This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa File: 2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa (raw, json) Hash identifier: 9N7zBEC0IX4/woL3Ue5FMplIxU5gLLFUtsjLk4U4E6c= Subject key identifier: 4A:E1:68:74:D6:5B:60:A1:7E:0C:4B:59:BD:8E:83:62:06:9F:ED:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1762790C1AAADC6901D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 63.254.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:76:27:90:c1:aa:ad:c6:90:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=c039d6ab-51f4-4a40-83b2-232dfc193c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:0d:12:8d:06:e6:31:58:64:03:ff:03:84: ae:0c:24:ab:c2:7e:d2:9f:df:16:4e:6d:2b:aa:79: 4e:73:b3:11:a0:fd:96:ed:81:3a:6a:46:f1:1f:82: e0:2a:71:09:9f:04:c7:db:32:2e:93:7a:ab:8f:84: 67:55:e1:69:66:fd:dd:0b:bb:ec:11:cf:3f:8a:1b: c0:bd:79:6c:01:f7:4e:53:92:f5:73:2d:6e:21:0e: 0c:07:91:d5:bc:a4:64:1a:d8:e8:cf:b0:c9:46:d3: 07:48:13:38:17:54:a6:36:46:f2:28:19:64:01:f7: 62:ce:c7:03:c1:57:49:31:5f:af:c5:3e:58:5e:67: 25:96:f1:d7:a4:d7:09:c1:75:cc:ef:57:7c:b4:ee: 2c:df:46:7c:f5:d8:7b:41:5a:ba:a2:55:9f:54:74: b0:d1:2b:7b:d4:3a:a5:12:45:71:e9:49:c7:da:da: 64:12:06:45:bc:b4:de:9f:32:54:57:db:74:85:e0: cd:31:48:d0:07:89:4a:39:b5:5e:ca:e9:ce:85:33: 58:c5:2b:80:01:b6:e8:aa:be:53:85:c9:6f:84:b3: 2d:19:42:e8:fa:17:3b:09:b2:01:7e:23:4e:0a:ca: 7a:0b:a8:81:3f:21:3f:c1:00:9a:86:d6:59:d2:42: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E1:68:74:D6:5B:60:A1:7E:0C:4B:59:BD:8E:83:62:06:9F:ED:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ef:66:91:a3:58:09:6c:ec:b8:aa:8c:5c:13:e6:11:b5:cd: 89:44:8c:44:ec:5a:e7:2c:10:fb:fe:02:5f:45:22:70:a1:22: 0c:e9:32:25:62:0a:49:03:94:8a:33:b8:6b:b1:38:cc:6a:4b: f3:ff:1a:0e:2c:d9:1a:5b:09:6b:2c:44:88:31:1a:6d:30:a6: 69:66:b7:5e:34:6e:c9:ba:31:51:07:cb:68:ea:6c:a4:1a:16: eb:dc:c7:df:c0:c5:fa:34:09:03:a8:bc:88:05:a2:19:49:1b: 45:74:67:14:a6:91:52:8d:c9:67:74:7a:0c:65:57:6d:3c:83: 69:9a:a3:19:6f:df:9c:28:20:0d:ae:7a:ec:2e:18:9b:1d:61: dc:c3:45:e3:fb:99:7c:3f:09:5e:4e:4b:03:c1:22:98:69:31: 76:db:6d:19:43:b7:37:e8:c5:29:8f:18:40:a8:b3:e0:c4:ce: ef:ba:70:2f:32:61:26:1d:f5:fd:f6:87:ed:db:52:0a:69:cf: f1:fe:d1:a3:2f:bc:6a:3b:76:8a:ef:31:d0:12:65:23:47:90: 8e:87:6b:15:1f:24:f0:5e:c0:60:4e:33:65:1e:8c:18:fc:b6: be:e2:4f:28:df:04:65:bc:1f:bc:39:58:1e:b3:4c:46:5c:94: d6:93:74:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0XYnkMGqrcaQHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YzAzOWQ2YWItNTFmNC00YTQwLTgzYjItMjMyZGZjMTkzYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXwNEo0G5jFYZAP/A4SuDCSrwn7Sn98WTm0r qnlOc7MRoP2W7YE6akbxH4LgKnEJnwTH2zIuk3qrj4RnVeFpZv3dC7vsEc8/ihvA vXlsAfdOU5L1cy1uIQ4MB5HVvKRkGtjoz7DJRtMHSBM4F1SmNkbyKBlkAfdizscD wVdJMV+vxT5YXmcllvHXpNcJwXXM71d8tO4s30Z89dh7QVq6olWfVHSw0St71Dql EkVx6UnH2tpkEgZFvLTenzJUV9t0heDNMUjQB4lKObVeyunOhTNYxSuAAbboqr5T hclvhLMtGULo+hc7CbIBfiNOCsp6C6iBPyE/wQCahtZZ0kKinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErhaHTWW2ChfgxLWb2Og2IGn+0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmIyYzk0NWEtZGQwZC0z ZTA5LWE3NGEtNzI4Yjg2YWU3ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGP/7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/vZpGjWAls7LiqjFwT5hG1zYlEjETsWucsEPv+Al9FInChIgzpMiVi CkkDlIozuGuxOMxqS/P/Gg4s2RpbCWssRIgxGm0wpmlmt140bsm6MVEHy2jqbKQa Fuvcx9/Axfo0CQOovIgFohlJG0V0ZxSmkVKNyWd0egxlV208g2maoxlv35woIA2u euwuGJsdYdzDReP7mXw/CV5OSwPBIphpMXbbbRlDtzfoxSmPGECos+DEzu+6cC8y YSYd9f32h+3bUgppz/H+0aMvvGo7dorvMdASZSNHkI6HaxUfJPBewGBOM2UejBj8 tr7iTyjfBGW8H7w5WB6zTEZclNaTdIk= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:22 2026 by rpki-client