This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa File: 3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa (raw, json) Hash identifier: jIm9odv41+MgMOjX5sEN1t2+OJAoDhGZ2cIs3fjcsWE= Subject key identifier: A4:8F:C7:F6:32:76:7B:05:B0:E5:3E:F2:EF:30:7D:71:DD:34:E8:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1524F66AEC1504B154020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 216.20.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:52:4f:66:ae:c1:50:4b:15:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=a2f8c4b2-2f86-40ef-b54e-bd6ae764278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:73:26:da:93:8d:98:00:49:91:d5:35:65:cb: 8f:8b:1c:9e:f7:41:78:f9:85:64:2b:61:59:f6:e0: 14:1c:26:9b:f8:21:17:b6:a9:22:65:f3:05:84:ae: e3:a1:de:9c:06:76:0b:33:63:a5:63:4a:1c:02:55: d1:d6:b5:ec:ae:8f:63:a6:78:71:ca:fb:c7:56:01: 8b:07:ea:da:94:98:81:1c:e1:5b:e3:74:15:28:19: 11:33:62:e0:7c:f7:9d:c9:ef:7d:b1:28:79:55:38: 28:9d:5f:bf:7f:d1:cb:0d:6c:a6:24:d3:7a:be:ac: e1:ed:82:f5:49:41:83:10:d3:17:ad:49:df:1d:0b: 22:f7:d4:0a:41:a8:6d:db:0d:93:25:54:4b:cb:ff: 08:37:ab:be:9a:09:22:93:8b:d8:fb:52:f6:ef:31: 9c:b9:8d:4e:ea:5e:22:12:72:60:fd:52:e9:47:7a: 6f:82:b9:f0:8d:e6:9d:e5:e6:e0:5b:9e:e3:13:c1: 91:6c:86:a1:ac:a0:82:95:be:76:bc:52:55:7f:85: 38:c6:51:de:2f:2a:89:f2:6c:d5:ec:ba:5c:4e:ba: 82:56:73:e5:2c:3d:0e:91:0f:b0:11:e5:d2:1a:fd: c3:d5:12:5c:ce:d5:69:e7:03:ba:81:56:5e:aa:b6: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8F:C7:F6:32:76:7B:05:B0:E5:3E:F2:EF:30:7D:71:DD:34:E8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.20.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:75:ae:ee:2b:d2:5d:0d:db:2f:96:7d:b5:1c:8f:ae:78:ae: 56:b0:3a:58:3b:3b:f5:a1:00:a1:6b:59:e4:53:eb:c4:bd:15: 43:b7:44:aa:ea:9c:2e:3e:13:52:2f:eb:fa:a8:b0:41:13:d4: db:71:2c:a0:2b:03:89:15:63:04:78:0f:da:c1:b4:83:97:32: ab:42:a7:e7:6c:2c:48:95:e2:05:0f:13:98:79:5e:2d:85:7f: 05:1e:c0:36:6b:f2:c7:74:b7:49:73:50:77:68:a1:90:aa:9a: cc:a9:d3:6d:7e:74:a5:3f:ae:33:9e:df:a8:ba:1f:0b:6e:65: f2:fe:d9:3e:13:d7:db:70:70:19:95:d1:56:4e:c8:aa:eb:7a: 17:c9:a2:2f:12:86:34:db:23:bd:61:27:d4:12:6e:cc:c7:16: 96:3e:07:1b:dc:70:33:91:9c:9c:b9:e1:4d:6d:0c:f2:de:46: a7:12:3c:c1:46:e4:66:fb:2c:ff:dd:97:5d:1f:d3:f1:70:c6: 6a:c6:84:89:70:83:f1:a1:9c:86:e6:08:33:da:7a:71:ed:66: 03:bf:46:3a:c8:d2:4b:1d:20:7e:86:13:cd:c5:f8:7a:e1:a4: 9c:e3:57:b1:65:70:92:d7:37:04:b2:bd:25:cd:0f:e4:b6:42: 57:86:3e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VJPZq7BUEsVQCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YTJmOGM0YjItMmY4Ni00MGVmLWI1NGUtYmQ2YWU3NjQyNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXMm2pONmABJkdU1ZcuPixye90F4+YVkK2FZ 9uAUHCab+CEXtqkiZfMFhK7jod6cBnYLM2OlY0ocAlXR1rXsro9jpnhxyvvHVgGL B+ralJiBHOFb43QVKBkRM2LgfPedye99sSh5VTgonV+/f9HLDWymJNN6vqzh7YL1 SUGDENMXrUnfHQsi99QKQaht2w2TJVRLy/8IN6u+mgkik4vY+1L27zGcuY1O6l4i EnJg/VLpR3pvgrnwjead5ebgW57jE8GRbIahrKCClb52vFJVf4U4xlHeLyqJ8mzV 7LpcTrqCVnPlLD0OkQ+wEeXSGv3D1RJcztVp5wO6gVZeqrbQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSPx/YydnsFsOU+8u8wfXHdNOhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Y2NGEyYjAtNDFiMy0z NGNhLWEyYWEtMjBlMmYyZjA0MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF1ru4r0l0N2y+WfbUcj654rlawOlg7O/WhAKFrWeRT68S9FUO3RKrq nC4+E1Iv6/qosEET1NtxLKArA4kVYwR4D9rBtIOXMqtCp+dsLEiV4gUPE5h5Xi2F fwUewDZr8sd0t0lzUHdooZCqmsyp021+dKU/rjOe36i6HwtuZfL+2T4T19twcBmV 0VZOyKrrehfJoi8ShjTbI71hJ9QSbszHFpY+BxvccDORnJy54U1tDPLeRqcSPMFG 5Gb7LP/dl10f0/FwxmrGhIlwg/GhnIbmCDPaenHtZgO/RjrI0ksdIH6GE83F+Hrh pJzjV7FlcJLXNwSyvSXND+S2QleGPuQ= -----END CERTIFICATE-----Generated at Sat Jan 10 21:00:07 2026 by rpki-client