This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa File: 2f666b21-6a8f-3cad-9fc0-f60d06304712.roa (raw, json) Hash identifier: Qrir5DXM1S2pgaLkLcW6YQvio8x2KG8IIsusOBNvRfY= Subject key identifier: 6F:B9:28:18:45:92:2B:8B:D0:58:D7:AD:D0:DE:A0:E7:72:D1:09:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D185A8CEE87A41B9D1B540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:85:a8:ce:e8:7a:41:b9:d1:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=8240d9ef-784a-4a99-8ee4-1504a4360ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:33:a8:77:3d:37:80:87:e3:9e:42:12:c5:19: 67:0b:11:d9:44:2b:73:44:92:9e:06:63:5f:e2:b0: 8e:6c:ff:93:13:65:86:62:f3:12:2b:a4:c8:16:ec: bc:7d:9f:ff:4f:92:e6:1e:ad:9a:36:e4:ac:13:03: e7:1c:10:14:c7:4b:d9:cc:a4:7a:93:62:03:9e:be: 72:9c:cb:c9:1c:5d:91:1c:e9:f6:9f:c2:5c:68:e4: ff:a8:74:28:08:34:3b:ee:15:a8:31:e8:50:8f:a2: 4a:0e:e9:36:4f:6e:49:39:9d:f1:9a:12:fe:54:36: d5:d3:89:43:04:e2:26:d9:0d:d2:2d:7c:3d:b6:02: 8b:20:38:f5:a8:c0:80:41:c8:b6:11:7b:81:58:1a: e1:0b:d1:e5:b7:a8:33:c3:09:f3:ff:a8:a5:64:a5: a7:8a:07:08:d8:26:07:1f:2a:34:1b:d9:ca:e8:93: 98:b2:5b:09:54:fd:a2:11:6c:93:29:0f:66:f8:df: 8c:29:b1:d6:52:6e:a8:17:ec:ef:b9:68:32:b7:7e: e0:95:b0:ac:2b:97:66:28:ff:6f:18:70:ee:29:9b: 1f:de:c4:46:be:61:2a:6b:05:94:5d:88:91:80:75: f4:5a:2e:6a:5d:8b:1e:f2:0d:1f:68:45:59:73:18: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B9:28:18:45:92:2B:8B:D0:58:D7:AD:D0:DE:A0:E7:72:D1:09:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c2:7a:e5:74:d1:54:bc:be:6d:07:cd:40:7e:e8:73:af:44: 58:db:39:92:f0:b5:f2:25:32:75:51:3c:01:8d:3c:6c:e2:df: a1:c4:c7:92:54:07:ff:cb:4f:d5:a4:dd:4f:27:34:f6:23:03: d3:c7:62:d9:a4:64:20:72:f0:4d:75:07:01:f6:27:e8:d7:23: 76:bb:0a:c6:69:ae:de:62:16:81:ee:91:92:02:1b:db:9c:42: c5:2e:f4:c3:cb:5d:46:8c:46:e7:a8:11:5f:ad:3d:f1:85:0c: 2b:35:ee:85:58:a4:7e:33:b5:b4:23:13:f9:42:6d:24:40:bf: 5e:4e:d9:9b:de:27:0d:f1:65:b0:31:ad:d0:f2:3e:b7:87:bb: 67:65:d5:a7:5e:73:47:26:56:dd:d1:62:bc:e0:97:4c:06:b8: c6:2e:e3:48:08:0b:19:7c:74:d4:0b:49:d3:3b:3b:b4:58:fe: 9f:b7:bd:86:3e:d7:ff:61:c2:f3:44:3d:7d:c1:62:a0:23:1c: 7c:be:cf:07:49:d4:6b:79:70:d3:ff:22:16:2f:c2:5a:49:bc: 5d:8e:a0:db:7b:71:68:ec:3f:35:d8:c8:34:b4:5a:d9:e0:6b: ef:f4:d4:f3:a2:dd:67:28:96:71:a9:b4:a0:e2:a1:8e:ee:69: b7:2f:24:3a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YWozuh6QbnRtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODI0MGQ5ZWYtNzg0YS00YTk5LThlZTQtMTUwNGE0MzYwZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDOodz03gIfjnkISxRlnCxHZRCtzRJKeBmNf 4rCObP+TE2WGYvMSK6TIFuy8fZ//T5LmHq2aNuSsEwPnHBAUx0vZzKR6k2IDnr5y nMvJHF2RHOn2n8JcaOT/qHQoCDQ77hWoMehQj6JKDuk2T25JOZ3xmhL+VDbV04lD BOIm2Q3SLXw9tgKLIDj1qMCAQci2EXuBWBrhC9Hlt6gzwwnz/6ilZKWnigcI2CYH Hyo0G9nK6JOYslsJVP2iEWyTKQ9m+N+MKbHWUm6oF+zvuWgyt37glbCsK5dmKP9v GHDuKZsf3sRGvmEqawWUXYiRgHX0Wi5qXYse8g0faEVZcxgB3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG+5KBhFkiuL0FjXrdDeoOdy0QlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY2NjZiMjEtNmE4Zi0z Y2FkLTlmYzAtZjYwZDA2MzA0NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg8J65XTRVLy+bQfNQH7oc69EWNs5kvC18iUydVE8AY08bOLfocTH klQH/8tP1aTdTyc09iMD08di2aRkIHLwTXUHAfYn6NcjdrsKxmmu3mIWge6RkgIb 25xCxS70w8tdRoxG56gRX6098YUMKzXuhVikfjO1tCMT+UJtJEC/Xk7Zm94nDfFl sDGt0PI+t4e7Z2XVp15zRyZW3dFivOCXTAa4xi7jSAgLGXx01AtJ0zs7tFj+n7e9 hj7X/2HC80Q9fcFioCMcfL7PB0nUa3lw0/8iFi/CWkm8XY6g23txaOw/NdjINLRa 2eBr7/TU86LdZyiWcam0oOKhju5pty8kOg== -----END CERTIFICATE-----Generated at Sun Jan 18 09:01:00 2026 by rpki-client