This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa File: 3984502e-c09e-303c-bae0-fddf3483cb3a.roa (raw, json) Hash identifier: t+z/8QB2rQYSJ53+3gtEfk+uTr+C6ly9T8PFKDdFfB4= Subject key identifier: DB:B4:D6:BB:55:A8:F5:2D:4B:18:41:AA:05:CE:04:8B:6C:0C:B3:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15067803853A482E976B8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2001:4908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:50:67:80:38:53:a4:82:e9:76:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=da66e9fe-7b98-4ffb-98a2-39230676b9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:86:8b:c4:ab:d9:7a:1d:8b:93:52:78:05: e1:b5:d5:59:e7:9a:2f:6f:ad:68:c7:8d:3e:54:20: 87:06:f6:4d:0c:e4:81:2f:66:ba:84:25:3b:97:eb: 88:cb:f0:52:1b:be:7a:95:69:65:c2:bc:4f:ac:ca: e4:ab:6b:53:8c:61:90:4d:16:63:6d:99:9a:54:3a: 4c:e7:f0:48:bc:55:9f:63:51:58:25:3a:bf:44:91: e5:26:7f:37:cc:53:70:2e:66:9b:18:27:75:33:36: d6:8b:07:2c:30:6f:37:6f:9f:16:b3:9f:02:cf:7d: 71:da:0e:34:f2:c8:dc:89:32:19:ef:41:21:1a:2d: 8c:eb:26:51:48:88:ca:7d:e6:38:1c:48:2b:35:fd: 9c:71:3c:a0:63:4b:84:3c:6a:68:d4:07:ce:40:72: 57:f8:ec:63:98:fe:29:a3:11:6d:3d:fd:42:76:30: a7:8c:77:a6:7c:a9:55:36:81:c8:ef:08:24:20:a9: ca:9e:d6:c9:ee:e7:64:ae:9e:0c:2e:88:d1:11:75: 37:5f:3f:15:f3:ee:45:d3:57:60:13:7b:f9:21:3a: 2e:59:14:20:d6:23:ca:a2:97:2e:ad:1b:da:b1:1d: c6:ad:e5:f4:2a:f8:31:c3:33:3c:13:76:7d:8b:8f: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B4:D6:BB:55:A8:F5:2D:4B:18:41:AA:05:CE:04:8B:6C:0C:B3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4908::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:93:ec:74:10:43:0d:58:d7:5a:f8:7f:29:6f:28:b8:3b:90: d6:f0:f5:83:26:a9:f4:92:30:b9:c7:da:c3:74:5f:0d:1e:7a: ec:04:6c:46:31:27:3e:1f:bb:50:50:74:25:00:2b:05:0b:bc: bb:7c:5c:73:0a:db:77:4e:12:da:f3:d2:7f:43:ae:bc:08:5a: 35:af:9a:59:d4:bf:99:09:6c:6a:a5:80:b7:35:9c:02:22:94: 89:a6:0a:6a:cb:58:d7:01:59:a4:2c:dc:ea:b4:73:b2:d2:d7: f9:14:77:51:68:56:81:47:ce:a3:41:d4:3c:2c:27:64:92:1f: aa:99:35:af:cb:4e:6a:27:e6:ff:a0:d3:b2:da:c3:14:39:03: 11:f6:df:9d:4c:b1:14:46:9e:0e:6c:96:f4:39:ee:6e:0b:35: 33:0d:b9:65:57:fa:5b:75:6d:72:6c:40:0e:ce:a1:25:2c:c8: 0f:0a:bd:65:81:50:2f:c6:b0:99:43:b7:9e:d5:21:44:bf:44: 35:d8:77:be:f0:5f:94:8f:8e:41:0f:71:5c:72:40:61:9f:b6: 8f:97:7d:48:b7:35:69:6a:24:23:58:77:6b:6f:19:57:a1:27: f6:6a:73:b3:f7:f0:bb:ea:a2:a9:7f:ec:14:1e:9b:68:47:a4: 0f:29:a7:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExQ0VBngDhTpILpdrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZGE2NmU5ZmUtN2I5OC00ZmZiLTk4YTItMzkyMzA2NzZiOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljaGi8Sr2Xodi5NSeAXhtdVZ55ovb61ox40+ VCCHBvZNDOSBL2a6hCU7l+uIy/BSG756lWllwrxPrMrkq2tTjGGQTRZjbZmaVDpM 5/BIvFWfY1FYJTq/RJHlJn83zFNwLmabGCd1MzbWiwcsMG83b58Ws58Cz31x2g40 8sjciTIZ70EhGi2M6yZRSIjKfeY4HEgrNf2ccTygY0uEPGpo1AfOQHJX+OxjmP4p oxFtPf1CdjCnjHemfKlVNoHI7wgkIKnKntbJ7udkrp4MLojREXU3Xz8V8+5F01dg E3v5ITouWRQg1iPKopcurRvasR3GreX0KvgxwzM8E3Z9i4+vkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNu01rtVqPUtSxhBqgXOBItsDLNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzk4NDUwMmUtYzA5ZS0z MDNjLWJhZTAtZmRkZjM0ODNjYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+k+x0EEMNWNda+H8pbyi4O5DW8PWDJqn0kjC5x9rDdF8NHnrsBGxG MSc+H7tQUHQlACsFC7y7fFxzCtt3ThLa89J/Q668CFo1r5pZ1L+ZCWxqpYC3NZwC IpSJpgpqy1jXAVmkLNzqtHOy0tf5FHdRaFaBR86jQdQ8LCdkkh+qmTWvy05qJ+b/ oNOy2sMUOQMR9t+dTLEURp4ObJb0Oe5uCzUzDbllV/pbdW1ybEAOzqElLMgPCr1l gVAvxrCZQ7ee1SFEv0Q12He+8F+Uj45BD3FcckBhn7aPl31ItzVpaiQjWHdrbxlX oSf2anOz9/C76qKpf+wUHptoR6QPKafK -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:35 2026 by rpki-client