This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: PJVFG+fy19NkrO726phhuhkE+4KR0d5dLHZSIIxPpaU= Subject key identifier: CB:2F:58:97:FA:5C:24:98:72:08:59:45:58:EB:DE:28:F2:97:8D:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D17F7AF4BEF6A661312020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:7f:7a:f4:be:f6:a6:61:31:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=4b436ff8-05f6-4fe1-90b2-f14cf3395d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:0a:3f:cb:63:51:a9:cc:fc:17:ce:b1:b0: d8:e0:b2:40:6b:84:3d:45:39:47:0a:dc:cb:1b:ef: d7:25:37:8e:76:d6:c9:ea:74:77:f7:f5:6b:19:68: 0b:5e:15:98:87:16:8d:91:78:94:f2:6d:2c:b6:da: 18:be:00:ce:a5:d0:ca:69:e6:ef:44:b0:c1:da:ed: 02:32:46:60:8a:e2:66:9d:a8:3f:58:0d:bb:45:1d: 1e:13:7f:20:b3:91:0c:52:b5:37:79:23:50:7f:27: 50:98:b9:1d:43:8e:52:30:11:22:c9:ab:ba:9c:32: 93:3f:39:0a:cc:57:3c:38:c2:45:34:0e:ad:97:ea: 14:23:b8:4d:35:99:dc:8e:5b:ae:c4:65:79:27:fc: a9:5d:5d:89:8f:14:a5:80:cf:82:3a:86:cc:f9:66: 48:98:5a:26:f0:de:62:28:a2:86:29:15:ed:ab:1b: d7:8e:ff:0f:ec:fc:30:bd:52:58:b5:24:eb:de:32: 4c:eb:e0:48:e8:85:09:23:8f:b9:08:31:7e:da:dc: 8b:f0:52:73:32:5c:54:a5:a6:cb:83:88:e9:30:5d: d7:c7:8e:d6:e6:36:45:29:22:30:ff:6f:c9:a5:51: f0:31:d7:0f:c7:9f:52:f2:9d:24:be:b4:4f:42:f5: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:58:97:FA:5C:24:98:72:08:59:45:58:EB:DE:28:F2:97:8D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:0d:92:bd:43:fc:f6:b1:ca:f9:dc:7f:1a:7d:f1:7e:a4: 08:69:f5:5a:95:36:3e:d5:9e:f3:44:69:b2:bf:db:f1:93:c5: 9e:cd:af:99:bc:8a:10:cf:94:d0:2d:0a:cc:d0:e7:27:74:9a: ac:71:85:13:81:84:ef:2a:84:73:14:8a:a0:62:99:af:ae:ad: 20:ec:73:98:49:2c:e5:4a:0c:21:be:44:d6:16:33:3f:bf:e6: 26:36:b4:90:e6:dd:73:f5:05:7e:14:5b:ba:ed:23:6b:d2:b2: b4:51:34:7d:f3:cf:cd:85:94:c7:62:16:b7:36:8a:13:94:66: d8:0d:1c:c5:8e:ac:e0:b2:21:12:f6:77:95:8f:bc:53:68:30: a7:6c:bd:57:a0:a2:d3:f0:48:3c:ce:0b:2e:aa:12:9c:b0:7b: f0:58:01:78:9b:aa:06:f2:34:b1:12:69:79:06:27:2c:d7:aa: ff:22:cd:05:df:70:d1:5f:ea:49:ae:14:3b:d2:b7:cb:4c:bb: bc:42:2e:b4:a6:9b:e4:c6:2a:db:6b:ba:d5:bd:3f:49:1c:2a: 05:2a:34:c1:6e:c7:19:1f:b2:46:0b:c9:8c:7a:9b:c2:eb:49: d3:91:ff:b0:35:3b:73:ee:16:1b:d0:e3:58:b7:cd:ba:d6:3d: cb:34:c8:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExQ0X969L72pmExICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NGI0MzZmZjgtMDVmNi00ZmUxLTkwYjItZjE0Y2YzMzk1ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGwKP8tjUanM/BfOsbDY4LJAa4Q9RTlHCtzL G+/XJTeOdtbJ6nR39/VrGWgLXhWYhxaNkXiU8m0sttoYvgDOpdDKaebvRLDB2u0C MkZgiuJmnag/WA27RR0eE38gs5EMUrU3eSNQfydQmLkdQ45SMBEiyau6nDKTPzkK zFc8OMJFNA6tl+oUI7hNNZncjluuxGV5J/ypXV2JjxSlgM+COobM+WZImFom8N5i KKKGKRXtqxvXjv8P7PwwvVJYtSTr3jJM6+BI6IUJI4+5CDF+2tyL8FJzMlxUpabL g4jpMF3Xx47W5jZFKSIw/2/JpVHwMdcPx59S8p0kvrRPQvVkTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMsvWJf6XCSYcghZRVjr3ijyl43UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPeQ2SvUP89rHK+dx/Gn3xfqQIafValTY+1Z7zRGmyv9vxk8Weza+Z vIoQz5TQLQrM0OcndJqscYUTgYTvKoRzFIqgYpmvrq0g7HOYSSzlSgwhvkTWFjM/ v+YmNrSQ5t1z9QV+FFu67SNr0rK0UTR988/NhZTHYha3NooTlGbYDRzFjqzgsiES 9neVj7xTaDCnbL1XoKLT8Eg8zgsuqhKcsHvwWAF4m6oG8jSxEml5Bics16r/Is0F 33DRX+pJrhQ70rfLTLu8Qi60ppvkxirba7rVvT9JHCoFKjTBbscZH7JGC8mMepvC 60nTkf+wNTtz7hYb0ONYt8261j3LNMiZ -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:42 2026 by rpki-client