This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa File: 39a5344c-552c-36c7-a942-272e3d77ba5d.roa (raw, json) Hash identifier: l5qalFUhgiymT480HVmR/CaoX0p/Nd0BC9gEPgazCJQ= Subject key identifier: 3A:25:4F:CF:D6:7E:36:61:91:F1:0F:31:5F:5F:71:D0:86:4B:A5:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0693DCC0C5A1BC70FFB700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:93:dc:c0:c5:a1:bc:70:ff:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=f942c02d-2151-4235-9119-36b4808bdc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:d1:2c:dd:74:7a:39:b2:76:1c:dd:4a:36: 67:ed:b1:88:37:af:2a:f1:ee:e7:54:57:64:34:b4: 03:da:d1:69:44:1d:a5:09:03:45:07:c3:77:71:b0: 56:b1:54:c1:7b:f0:99:24:bc:ad:44:45:3a:b3:90: 0e:cf:14:3f:8c:00:4a:b6:cb:04:e2:94:b3:55:62: d8:db:7c:7b:8b:77:40:69:4e:5f:64:ff:a1:a2:27: ac:bc:a0:3b:61:ad:84:a0:38:1b:7c:7c:ce:85:9f: 73:8e:90:e7:e9:58:1b:57:c7:29:d8:e7:0a:72:3d: 98:27:81:e8:ca:bb:89:43:c9:00:81:28:9b:65:d5: 20:16:d5:fe:55:25:54:79:f0:b6:d1:eb:9d:5e:35: 61:45:1a:ff:f3:b4:ea:2e:b3:b4:42:be:3d:64:a5: f6:68:44:46:37:fe:4f:5d:af:97:56:c8:ef:a0:ad: 52:2c:bf:e4:3e:d4:ab:d5:06:26:4a:f3:50:ed:3f: 1e:26:8a:df:1e:e5:9c:60:4b:52:bf:60:67:ec:5f: 40:2e:2a:28:f7:36:13:9f:3b:bd:5d:74:9f:11:3d: 46:50:15:37:a0:c9:31:c8:33:f2:01:a1:d3:ce:67: f9:80:4f:47:18:30:c2:9e:1d:c0:ae:08:de:a1:f8: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:25:4F:CF:D6:7E:36:61:91:F1:0F:31:5F:5F:71:D0:86:4B:A5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:26:79:55:7e:9f:a1:eb:a5:e1:14:13:a1:80:24:97:24:83: b7:7f:0f:4c:8e:83:3f:50:5d:c7:aa:cb:44:c9:bb:d9:8b:4c: bb:e3:a7:49:2b:97:84:5e:7c:d7:d1:2f:72:61:cd:ef:69:ba: 0d:09:74:3c:89:61:07:80:f0:be:47:c8:f4:62:7b:11:12:92: 0f:2c:73:d0:5c:7f:28:33:75:79:ed:c2:4e:39:c2:35:4d:1d: f1:9e:18:b6:1f:82:53:3a:aa:ad:11:5f:0a:8a:0c:88:39:ac: 3a:5a:7a:1c:81:9a:fc:6b:ec:11:9d:ba:7e:90:bf:81:8c:8d: 95:2f:33:f7:9e:59:87:a1:03:b0:47:6d:00:49:f4:32:78:5e: 05:1b:ef:32:d9:ff:80:c5:9d:57:af:6a:82:fd:3e:e4:ea:7b: 17:4b:65:40:37:a0:45:0b:aa:e5:08:ec:43:11:d3:bc:23:2c: c7:b1:31:15:5d:8a:ab:c4:ea:d3:40:82:83:45:8f:42:fb:cc: 71:39:df:6f:2b:21:fa:7d:61:b7:be:a3:7f:18:ce:9a:e6:dc: d4:e6:ff:9a:c9:71:ab:5b:15:03:1b:ae:df:ad:de:15:67:f8: 20:55:c5:c4:de:81:6f:54:e9:b7:71:60:78:76:54:ca:64:06: 76:2f:1f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpPcwMWhvHD/twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk Zjk0MmMwMmQtMjE1MS00MjM1LTkxMTktMzZiNDgwOGJkYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUDRLN10ejmydhzdSjZn7bGIN68q8e7nVFdk NLQD2tFpRB2lCQNFB8N3cbBWsVTBe/CZJLytREU6s5AOzxQ/jABKtssE4pSzVWLY 23x7i3dAaU5fZP+hoiesvKA7Ya2EoDgbfHzOhZ9zjpDn6VgbV8cp2OcKcj2YJ4Ho yruJQ8kAgSibZdUgFtX+VSVUefC20eudXjVhRRr/87TqLrO0Qr49ZKX2aERGN/5P Xa+XVsjvoK1SLL/kPtSr1QYmSvNQ7T8eJorfHuWcYEtSv2Bn7F9ALioo9zYTnzu9 XXSfET1GUBU3oMkxyDPyAaHTzmf5gE9HGDDCnh3ArgjeofiYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDolT8/WfjZhkfEPMV9fcdCGS6VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhNTM0NGMtNTUyYy0z NmM3LWE5NDItMjcyZTNkNzdiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAomeVV+n6HrpeEUE6GAJJckg7d/D0yOgz9QXceqy0TJu9mLTLvjp0kr l4RefNfRL3Jhze9pug0JdDyJYQeA8L5HyPRiexESkg8sc9BcfygzdXntwk45wjVN HfGeGLYfglM6qq0RXwqKDIg5rDpaehyBmvxr7BGdun6Qv4GMjZUvM/eeWYehA7BH bQBJ9DJ4XgUb7zLZ/4DFnVevaoL9PuTqexdLZUA3oEULquUI7EMR07wjLMexMRVd iqvE6tNAgoNFj0L7zHE5328rIfp9Ybe+o38Yzprm3NTm/5rJcatbFQMbrt+t3hVn +CBVxcTegW9U6bdxYHh2VMpkBnYvH/E= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:34 2026 by rpki-client