This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa File: 3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json) Hash identifier: RUwlyHdC2E7dkyW/h7pKAWn9vEE6G9Y+sWr6yknxaYk= Subject key identifier: 51:09:F4:3B:8B:9D:5F:87:DD:E3:37:C8:98:BC:09:BB:56:ED:0E:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BB88D3D6FD3DB9EAE94EF6BF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 2604:cb00:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3d:6f:d3:db:9e:ae:94:ef:6b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=19859a77-56e6-4a19-92db-879a56576edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:24:2d:22:24:a3:5f:55:2b:6d:dd:44:52: 81:fe:6e:9a:c1:22:1f:5f:87:09:3f:17:5d:d3:7e: 8c:d6:24:bf:fc:1f:d7:e3:95:fa:63:9a:fb:fc:ef: f6:6d:de:96:fd:e6:fb:b6:df:66:7c:f1:08:f4:4d: 33:e7:54:da:94:0d:44:b3:05:3b:70:a6:bd:4e:fe: 0c:64:f7:18:9a:b3:98:f9:35:a2:74:a1:96:d3:66: 39:90:7c:46:f1:ac:0a:a6:7e:4e:96:c9:8f:07:98: 84:3c:77:92:5c:6e:b9:4f:50:ff:25:91:ab:08:9b: 9c:f8:86:ae:51:08:bf:f1:11:d8:ec:a4:8b:fe:77: 35:e4:e4:9d:ad:9c:ab:c7:aa:8b:a3:c3:36:ca:af: a8:ae:f7:6e:b4:a1:cf:79:4f:bf:64:a7:2d:ac:5b: c5:d0:7b:6e:91:da:12:75:b4:9d:f9:eb:ab:cc:4e: 70:43:2d:1a:5b:61:a6:cf:b2:3c:bc:63:9d:88:3c: ac:f5:fa:5f:19:7b:2b:3a:55:07:85:59:54:b7:19: 8a:2d:df:39:ac:78:58:80:10:b0:a7:34:4e:eb:b9: de:e6:3f:2f:24:36:ce:c0:bc:f5:4f:86:ac:e0:9b: 5e:28:47:ff:80:77:e3:aa:a2:5e:25:9d:3b:3b:96: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:F4:3B:8B:9D:5F:87:DD:E3:37:C8:98:BC:09:BB:56:ED:0E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:7f:5e:d0:f0:6b:74:2e:c2:3b:2a:b1:e0:7a:05:44:0c:38: cb:07:1b:11:4d:88:eb:71:91:af:23:44:ca:63:03:76:89:22: ef:a6:42:40:9c:e9:a8:23:cb:a3:89:59:3e:22:c6:54:f4:94: 90:f7:70:09:a7:91:cb:9a:4d:56:d8:77:3c:83:aa:53:e0:04: ec:88:58:65:bf:9f:dd:89:f1:51:bd:a6:40:58:a2:1e:ac:11: a7:42:a1:50:5d:b3:9f:57:01:c7:22:bc:7e:8a:34:df:93:52: 80:6a:15:eb:aa:96:b0:a4:6c:25:a9:91:ee:d4:fe:bc:be:b4: 06:77:4a:04:d1:d4:90:d1:a3:96:d4:04:57:8b:76:14:38:5d: c4:e7:df:67:9d:45:d6:fe:0b:8e:f1:e3:42:42:4d:4c:5a:d5: 93:b4:a4:d5:7b:60:c7:ed:7e:0d:9c:e8:53:6a:41:a9:02:8a: 05:d7:2f:48:b2:e1:94:86:ed:b0:03:ae:bd:1b:2f:59:13:98: 06:cc:1c:fa:c4:8c:6c:90:83:23:7b:f3:fe:e2:78:8b:20:64: 87:f6:a3:c8:19:3d:d8:53:1b:72:0b:4f:13:c3:1a:54:96:0d: e8:4b:70:b6:26:13:4a:9f:fd:43:95:de:1a:55:75:99:85:e3: c5:07:4a:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jT1v09uerpTva/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTk4NTlhNzctNTZlNi00YTE5LTkyZGItODc5YTU2NTc2ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqckLSIko19VK23dRFKB/m6awSIfX4cJPxdd 036M1iS//B/X45X6Y5r7/O/2bd6W/eb7tt9mfPEI9E0z51TalA1EswU7cKa9Tv4M ZPcYmrOY+TWidKGW02Y5kHxG8awKpn5OlsmPB5iEPHeSXG65T1D/JZGrCJuc+Iau UQi/8RHY7KSL/nc15OSdrZyrx6qLo8M2yq+orvdutKHPeU+/ZKctrFvF0HtukdoS dbSd+eurzE5wQy0aW2Gmz7I8vGOdiDys9fpfGXsrOlUHhVlUtxmKLd85rHhYgBCw pzRO67ne5j8vJDbOwLz1T4as4JteKEf/gHfjqqJeJZ07O5aekQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFEJ9DuLnV+H3eM3yJi8CbtW7Q4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I3NWQ5YzEtNTUzZi0z MTliLWJhNGEtZjE1MzY4YmFjYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJN/XtDwa3QuwjsqseB6BUQMOMsHGxFNiOtxka8jRMpjA3aJIu+m QkCc6agjy6OJWT4ixlT0lJD3cAmnkcuaTVbYdzyDqlPgBOyIWGW/n92J8VG9pkBY oh6sEadCoVBds59XAccivH6KNN+TUoBqFeuqlrCkbCWpke7U/ry+tAZ3SgTR1JDR o5bUBFeLdhQ4XcTn32edRdb+C47x40JCTUxa1ZO0pNV7YMftfg2c6FNqQakCigXX L0iy4ZSG7bADrr0bL1kTmAbMHPrEjGyQgyN78/7ieIsgZIf2o8gZPdhTG3ILTxPD GlSWDehLcLYmE0qf/UOV3hpVdZmF48UHSuk= -----END CERTIFICATE-----Generated at Tue Nov 25 09:55:13 2025 by rpki-client