This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa File: 38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa (raw, json) Hash identifier: Pm8beo6pR0EQ8TFCr0lgs/o7yorWlPgZF5z9icBx60Y= Subject key identifier: DA:7C:62:F9:D1:CF:BD:EE:BE:41:F5:8A:AF:10:61:BC:83:A5:C7:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D152A84C1CD9E5CFB8C450 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 216.119.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:52:a8:4c:1c:d9:e5:cf:b8:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=5697dabe-8900-462e-82b3-ed714eccbc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:20:3f:cf:d5:2d:c7:fa:6e:b4:ab:72:4b: b8:e4:e1:8f:71:f2:20:1e:78:4f:f7:bc:3a:03:11: 0a:68:45:01:e0:14:eb:9e:67:2b:1e:f3:12:ad:fb: a9:f2:62:f4:96:73:67:25:c6:d1:f3:cf:ad:80:d4: fa:fa:eb:31:af:bb:28:32:19:77:12:be:fd:bc:da: 48:7c:28:2b:a2:ac:10:32:01:83:97:e4:a7:1c:55: f7:b5:75:64:6c:7d:9c:3a:f9:e1:2f:95:61:31:92: e8:8e:44:ea:98:77:82:49:34:29:75:c4:e7:ae:b6: 37:39:55:d9:c0:5e:66:e4:c7:c9:bb:62:f5:53:13: e7:01:c1:83:ee:f3:f8:31:13:be:fa:34:35:a4:c3: 44:fd:55:1a:4c:60:80:b3:50:be:20:03:3c:47:5a: 57:97:45:53:d1:f4:b9:a0:32:9c:25:68:2b:2d:39: 39:3b:df:24:f3:12:02:46:27:05:cb:a9:a3:fe:76: 40:61:cc:10:54:b5:30:34:e5:b4:24:9f:cb:98:1c: fc:e5:ad:fb:71:0e:8d:4b:a3:81:bf:05:04:78:b1: 14:82:85:37:15:ab:5b:a3:f7:fb:a5:f4:5a:e0:2d: e7:22:fa:44:c4:98:7d:6d:cd:2b:d4:5d:50:b7:78: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7C:62:F9:D1:CF:BD:EE:BE:41:F5:8A:AF:10:61:BC:83:A5:C7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.119.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:03:75:52:8a:65:fc:a4:d2:5d:af:b0:b3:52:5f:ea:50:cb: 22:71:46:8f:5b:d3:22:4d:a4:61:ef:7c:a3:05:dd:c2:39:ab: 43:57:03:2f:de:5b:ce:5c:2d:c7:f2:c1:e2:2c:6a:22:63:79: 2c:9e:c0:26:d3:fb:91:78:67:7e:04:d5:fc:f7:64:d9:b6:bf: a6:c9:8b:a9:dc:2c:01:14:73:ca:cc:81:29:bc:00:fa:03:d5: 7e:61:9a:74:f3:75:65:6f:e1:4a:b5:db:8f:92:d0:54:da:37: 8f:e9:c0:69:4f:f1:2c:1c:ec:84:a1:b1:f7:94:f5:77:92:ee: b8:79:56:11:fe:9c:1c:b9:e3:41:50:08:a9:c3:8e:e2:7e:f1: 9c:69:d4:ce:02:b1:b7:dc:eb:b3:96:bb:37:45:22:20:55:ad: 1f:de:cd:c0:7e:e2:77:4a:1b:d1:f7:0a:06:3d:78:da:22:c2: d4:52:40:e2:9c:78:f2:9e:59:a6:f0:1e:d6:0a:13:2f:58:80: b6:23:1a:c8:7c:76:4f:5e:79:26:54:54:a3:d5:d1:1c:0f:85: dd:da:3d:05:6f:4a:67:ae:b0:ee:a2:43:41:90:ec:5f:5c:ec: 8f:4d:17:19:2f:5c:13:21:0e:b7:6f:81:92:24:8c:bc:62:c7: 2f:a8:7b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VKoTBzZ5c+4xFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NTY5N2RhYmUtODkwMC00NjJlLTgyYjMtZWQ3MTRlY2NiYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovwgP8/VLcf6brSrcku45OGPcfIgHnhP97w6 AxEKaEUB4BTrnmcrHvMSrfup8mL0lnNnJcbR88+tgNT6+usxr7soMhl3Er79vNpI fCgroqwQMgGDl+SnHFX3tXVkbH2cOvnhL5VhMZLojkTqmHeCSTQpdcTnrrY3OVXZ wF5m5MfJu2L1UxPnAcGD7vP4MRO++jQ1pMNE/VUaTGCAs1C+IAM8R1pXl0VT0fS5 oDKcJWgrLTk5O98k8xICRicFy6mj/nZAYcwQVLUwNOW0JJ/LmBz85a37cQ6NS6OB vwUEeLEUgoU3Fatbo/f7pfRa4C3nIvpExJh9bc0r1F1Qt3hMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp8YvnRz73uvkH1iq8QYbyDpccFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhjM2RlM2QtOTdmNC0z Y2E3LTkyODQtYzdhMmUzYTliZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEDdVKKZfyk0l2vsLNSX+pQyyJxRo9b0yJNpGHvfKMF3cI5q0NXAy/e W85cLcfyweIsaiJjeSyewCbT+5F4Z34E1fz3ZNm2v6bJi6ncLAEUc8rMgSm8APoD 1X5hmnTzdWVv4Uq124+S0FTaN4/pwGlP8Swc7IShsfeU9XeS7rh5VhH+nBy540FQ CKnDjuJ+8Zxp1M4Csbfc67OWuzdFIiBVrR/ezcB+4ndKG9H3CgY9eNoiwtRSQOKc ePKeWabwHtYKEy9YgLYjGsh8dk9eeSZUVKPV0RwPhd3aPQVvSmeusO6iQ0GQ7F9c 7I9NFxkvXBMhDrdvgZIkjLxixy+oeyk= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:27 2026 by rpki-client