This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa File: 2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa (raw, json) Hash identifier: Ds6pcf3MX0qfkQGqKoso2HWBxEZgKov7EFmD6e2/lHQ= Subject key identifier: 19:1F:B9:19:C9:D6:1B:5F:02:90:88:EF:1E:D4:92:EC:58:4D:98:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14EB0F2D8B4DED27821C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 151.213.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4e:b0:f2:d8:b4:de:d2:78:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=cd5b00a9-7899-45e3-a958-f9048c3e577d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:5e:55:30:ed:40:31:2e:ce:a2:60:b8:5a: b8:80:d3:12:fa:76:5d:ea:f5:e6:2b:16:9c:48:1e: df:fa:56:8f:97:62:24:24:88:3f:e7:2f:92:1a:32: 2d:1d:76:e8:0b:cd:bd:15:e3:06:a6:56:04:d3:bc: e7:03:79:9b:b8:f4:f6:0c:7e:b6:b8:b7:b2:2c:8d: bf:79:8e:00:17:6b:61:08:26:fb:37:66:23:b2:0d: e0:b5:79:22:99:90:ec:3d:08:48:cc:51:bc:8e:1f: 5e:6f:86:68:d5:18:4b:32:af:36:30:ba:51:1e:67: c4:7d:f6:17:bd:98:1a:71:77:da:df:c5:61:dd:4e: 72:ab:be:ab:92:87:1d:bc:47:60:d5:3b:92:ec:c0: 02:c3:f8:39:83:0e:76:9b:01:fb:fa:5e:ed:32:2e: 48:c2:e8:4d:60:d9:a5:4b:74:50:27:aa:f3:76:57: 35:0a:eb:e5:db:6c:15:aa:b7:56:95:e6:a7:d9:00: 1f:08:6c:f2:d0:32:da:71:fc:da:b4:00:8a:51:4f: 31:2a:ef:01:d3:59:7c:42:f7:4f:8a:68:3a:9d:cf: 88:67:e8:92:74:d1:12:15:c4:f0:2e:f0:0e:33:26: 48:b4:60:0c:1d:5d:d3:28:33:5c:2b:39:41:6f:e4: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:B9:19:C9:D6:1B:5F:02:90:88:EF:1E:D4:92:EC:58:4D:98:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:42:e5:f9:17:69:ee:39:31:7b:73:a8:39:89:7f:0c:ff:8f: 32:7c:49:ca:f2:10:cc:5e:58:5b:7a:d5:c4:9c:5f:1b:8d:02: 16:6d:ab:98:52:b2:f7:ec:67:69:48:43:11:21:61:cd:16:87: 14:a2:3e:fe:d4:85:82:45:7b:7a:4f:43:47:01:bf:97:07:1e: e5:0c:e5:83:4a:3d:e7:57:1f:6e:c8:be:6f:a6:2c:ff:83:42: e7:3b:91:74:85:69:84:77:fc:82:cd:a3:01:26:05:a4:99:4f: 18:4c:9b:ac:eb:c5:8d:61:e2:a2:74:bf:f7:a1:5d:52:11:18: 9f:93:f8:cd:63:1c:53:e9:e0:bf:88:9e:60:6e:6c:36:bd:97: 18:74:6c:e6:27:25:8b:d4:a5:ee:36:cd:67:76:f2:94:fc:f0: 99:c5:e1:23:77:2b:0c:60:11:d5:ad:80:38:a1:40:36:dc:de: 78:e6:57:fa:9f:90:2a:85:8f:a1:06:5d:d5:56:57:68:9f:ed: 18:06:b9:dd:f3:2a:f1:b4:80:53:d4:9a:4c:c6:31:6e:2d:95: 1e:16:02:3b:93:e8:9f:b1:90:3d:f4:52:61:01:15:11:16:d2: b7:21:cc:38:77:fa:4d:21:20:ca:a1:51:c2:81:f6:8e:28:3a: 73:39:4f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0U6w8ti03tJ4IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk Y2Q1YjAwYTktNzg5OS00NWUzLWE5NTgtZjkwNDhjM2U1NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4NeVTDtQDEuzqJguFq4gNMS+nZd6vXmKxac SB7f+laPl2IkJIg/5y+SGjItHXboC829FeMGplYE07znA3mbuPT2DH62uLeyLI2/ eY4AF2thCCb7N2Yjsg3gtXkimZDsPQhIzFG8jh9eb4Zo1RhLMq82MLpRHmfEffYX vZgacXfa38Vh3U5yq76rkocdvEdg1TuS7MACw/g5gw52mwH7+l7tMi5IwuhNYNml S3RQJ6rzdlc1Cuvl22wVqrdWlean2QAfCGzy0DLacfzatACKUU8xKu8B01l8QvdP img6nc+IZ+iSdNESFcTwLvAOMyZItGAMHV3TKDNcKzlBb+S/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkfuRnJ1htfApCI7x7UkuxYTZhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQ2YzAwNjgtMGM2Ny0z YTRhLWIzMmYtZGJlYmNjMjM3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9XeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5C5fkXae45MXtzqDmJfwz/jzJ8ScryEMxeWFt61cScXxuNAhZtq5hS svfsZ2lIQxEhYc0WhxSiPv7UhYJFe3pPQ0cBv5cHHuUM5YNKPedXH27Ivm+mLP+D Quc7kXSFaYR3/ILNowEmBaSZTxhMm6zrxY1h4qJ0v/ehXVIRGJ+T+M1jHFPp4L+I nmBubDa9lxh0bOYnJYvUpe42zWd28pT88JnF4SN3KwxgEdWtgDihQDbc3njmV/qf kCqFj6EGXdVWV2if7RgGud3zKvG0gFPUmkzGMW4tlR4WAjuT6J+xkD30UmEBFREW 0rchzDh3+k0hIMqhUcKB9o4oOnM5T9Y= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:44 2026 by rpki-client