This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa File: 37ba3cd5-c664-374e-a449-0a19748669f1.roa (raw, json) Hash identifier: y8ZdX+NWNZOI+1fI9VpTu54LjYFAdBqrHIQAftkOqBk= Subject key identifier: 5B:68:49:F3:70:B2:3C:5C:78:82:43:0D:86:BE:49:F7:72:44:03:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068ED887AF9422E4CCB600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8e:d8:87:af:94:22:e4:cc:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=c35b898f-d62c-4323-a9cc-3621a84f8483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:48:92:4a:94:88:89:ce:c9:53:75:b3:e2: 5e:15:ed:95:80:2d:01:fd:7f:ed:db:0d:6d:96:11: 91:28:7a:db:19:c2:c0:ee:b9:1d:c4:90:b2:25:d7: 79:05:50:76:0a:98:f0:f2:ad:50:28:08:a6:28:1d: 3c:ef:c9:ea:a3:ff:be:36:81:53:4d:88:e3:ac:1f: 2e:58:03:49:fd:c5:28:9d:8b:b6:c7:40:b8:22:f3: b4:11:3d:3f:d3:2b:a6:1e:ad:93:07:dc:4e:8f:7c: e5:41:6b:be:b6:6b:5b:18:cd:f5:8b:3e:4a:5a:af: 2d:b2:bb:8b:f4:f6:5d:e4:a3:5a:a6:d5:61:6f:95: 47:87:29:57:82:17:d8:52:5b:29:76:00:70:3a:1d: 2e:9a:2e:6e:05:22:8b:9b:57:54:c3:e4:bd:fc:35: 3a:30:87:95:7f:9c:b9:e4:c3:74:28:66:80:07:db: c6:62:19:7c:0f:72:bd:47:32:b6:b5:42:12:f5:25: 6b:4b:e4:7b:5f:5d:7d:73:02:95:2e:48:e0:79:ac: 13:07:55:99:3f:d0:ed:0c:ec:be:d8:c2:30:92:a5: ba:f0:f6:43:1c:9f:38:3c:ee:d2:9f:a2:23:fe:5d: df:08:a9:14:fe:38:78:71:5e:15:1c:18:d2:70:9e: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:49:F3:70:B2:3C:5C:78:82:43:0D:86:BE:49:F7:72:44:03:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:52:48:98:bb:1d:d4:3c:02:58:53:dd:48:4e:54:5c:92:a1: ae:58:59:ae:b4:61:80:10:ff:45:4f:ad:3c:41:08:5a:65:c2: e5:b3:57:58:04:97:de:79:68:87:f6:49:46:b9:98:d1:ce:5c: e3:36:86:da:9e:b8:48:dc:dc:d6:05:a3:15:83:fa:ed:b2:10: a0:0c:13:00:56:21:99:1e:a2:8f:18:2d:4c:26:d7:81:3c:83: 1f:94:67:cd:00:c4:e6:12:98:89:82:97:8d:e3:1e:9a:9c:de: b7:4a:02:51:14:2c:8d:74:82:45:01:c6:35:94:79:5d:ef:42: 83:2c:44:4d:8e:94:7c:84:3c:a2:22:ad:0f:15:bf:37:46:4e: 3a:d3:46:97:f7:43:29:f2:38:df:7c:0e:0b:d6:3a:a9:83:3d: a2:62:fc:85:aa:ce:8f:3b:4f:06:e3:e9:ca:61:94:fd:87:62: 9d:c9:31:ae:4b:4a:30:46:cf:8b:91:db:93:86:2d:43:fd:d1: 11:58:46:0f:05:c4:71:94:18:e0:17:b6:5e:48:d7:cb:4a:8e: 05:26:41:59:b9:ef:b9:ba:60:42:91:1e:8d:70:c3:05:2c:71: bd:8f:43:cd:5b:4d:d0:19:0b:a2:72:cc:1d:bd:cb:8b:1e:46: cf:48:b1:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo7Yh6+UIuTMtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk YzM1Yjg5OGYtZDYyYy00MzIzLWE5Y2MtMzYyMWE4NGY4NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2RIkkqUiInOyVN1s+JeFe2VgC0B/X/t2w1t lhGRKHrbGcLA7rkdxJCyJdd5BVB2Cpjw8q1QKAimKB0878nqo/++NoFTTYjjrB8u WANJ/cUonYu2x0C4IvO0ET0/0yumHq2TB9xOj3zlQWu+tmtbGM31iz5KWq8tsruL 9PZd5KNaptVhb5VHhylXghfYUlspdgBwOh0umi5uBSKLm1dUw+S9/DU6MIeVf5y5 5MN0KGaAB9vGYhl8D3K9RzK2tUIS9SVrS+R7X119cwKVLkjgeawTB1WZP9DtDOy+ 2MIwkqW68PZDHJ84PO7Sn6Ij/l3fCKkU/jh4cV4VHBjScJ7m/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtoSfNwsjxceIJDDYa+SfdyRAPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiYTNjZDUtYzY2NC0z NzRlLWE0NDktMGExOTc0ODY2OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpSSJi7HdQ8AlhT3UhOVFySoa5YWa60YYAQ/0VPrTxBCFplwuWzV1gE l955aIf2SUa5mNHOXOM2htqeuEjc3NYFoxWD+u2yEKAMEwBWIZkeoo8YLUwm14E8 gx+UZ80AxOYSmImCl43jHpqc3rdKAlEULI10gkUBxjWUeV3vQoMsRE2OlHyEPKIi rQ8VvzdGTjrTRpf3QynyON98DgvWOqmDPaJi/IWqzo87Twbj6cphlP2HYp3JMa5L SjBGz4uR25OGLUP90RFYRg8FxHGUGOAXtl5I18tKjgUmQVm577m6YEKRHo1wwwUs cb2PQ81bTdAZC6JyzB29y4seRs9IsfI= -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:03 2026 by rpki-client