This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa File: 3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa (raw, json) Hash identifier: sifieLpxVRD6WLFGxdUTGfcX90uErhGqCZQNy/bRTt8= Subject key identifier: 74:1A:FB:C3:A3:56:DD:B9:C2:B2:18:56:A2:CD:E2:6F:77:46:5F:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1571A2CD5B9C80DE92A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:57:1a:2c:d5:b9:c8:0d:e9:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=026b0a14-d206-4f12-930f-a315d71de41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:f2:f5:fc:22:1f:9b:24:32:6c:db:c1:9c: b5:89:7a:89:2a:39:db:48:e5:89:9a:1d:a6:f2:56: d7:81:41:47:dc:56:ef:26:90:ab:81:df:d8:6e:5b: 2c:84:ac:18:83:f9:b3:3e:6b:0d:80:46:84:65:4a: 1b:eb:04:77:0e:f6:70:b1:ba:a5:76:78:12:dd:00: 8f:34:2b:75:53:66:a3:96:e9:fd:18:48:3f:23:8d: 2b:da:39:d5:0e:6c:da:c1:b2:f2:fc:53:f2:73:ff: 3d:65:b9:6f:80:7b:1f:96:ba:0d:85:02:04:2c:8a: 70:98:25:d3:bf:8a:28:64:5b:42:45:5f:2e:cf:99: 1d:51:47:b1:15:2e:f4:78:6e:c3:e7:45:d1:38:66: a9:0d:4e:f1:21:d7:4f:22:e2:44:f2:e9:be:1b:b3: 04:03:2e:6c:0a:e4:01:a0:1d:59:22:69:35:01:7a: b4:7f:0b:5e:c5:29:32:ba:d0:fa:14:e1:47:d5:1b: da:33:72:5a:e7:e8:9c:f3:6f:2d:d9:fa:43:cf:51: 04:13:5f:3a:fc:92:37:8c:d6:14:a9:e8:34:c4:e3: cf:01:14:42:74:8b:57:7a:95:22:14:95:b8:b6:39: 5b:6e:bf:95:e9:b6:d5:b3:36:50:35:0e:07:69:91: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:FB:C3:A3:56:DD:B9:C2:B2:18:56:A2:CD:E2:6F:77:46:5F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c4:47:af:58:da:bb:4d:50:06:55:d9:11:a1:68:33:bf:eb: 65:e3:07:d2:a1:5a:19:c8:0d:6a:ed:6a:46:b3:86:ca:8a:91: 02:8f:c2:26:bd:12:74:0f:fa:ce:30:89:17:01:b0:64:3e:3b: 89:b0:2e:fb:da:68:1e:34:9b:e4:84:3f:8e:c5:67:48:59:25: f3:48:99:d9:43:3c:23:9b:4d:8f:66:fd:bc:09:a7:00:22:ae: 79:b7:65:e7:df:d3:ab:b5:90:e0:ed:39:84:ba:f7:3d:ff:68: 33:31:48:40:fd:2c:87:19:5f:77:ea:bd:4b:3d:7b:8b:eb:43: d8:9a:4d:be:1a:43:7c:d3:c4:0e:ac:c6:f2:71:76:ab:d5:87: 04:38:7c:c0:90:13:7b:26:54:b6:84:95:ae:bb:4b:ef:39:54: b7:80:15:c1:c5:1c:4f:60:29:6b:90:24:77:4a:e7:98:47:cb: b6:c7:80:7c:13:8c:6f:65:10:74:c6:c6:19:6f:2a:d8:65:56: 0a:fb:2e:ef:cb:e6:ad:7a:12:8a:0d:d3:7b:d0:b5:79:96:ad: 3d:72:d0:61:60:21:29:6e:44:96:c0:a7:5e:58:7c:be:69:da: 8b:00:40:67:1b:c8:27:60:4a:11:6b:df:88:af:a7:3e:1d:a9: a7:c0:0c:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0VcaLNW5yA3pKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDI2YjBhMTQtZDIwNi00ZjEyLTkzMGYtYTMxNWQ3MWRlNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlHy9fwiH5skMmzbwZy1iXqJKjnbSOWJmh2m 8lbXgUFH3FbvJpCrgd/YblsshKwYg/mzPmsNgEaEZUob6wR3DvZwsbqldngS3QCP NCt1U2ajlun9GEg/I40r2jnVDmzawbLy/FPyc/89ZblvgHsflroNhQIELIpwmCXT v4ooZFtCRV8uz5kdUUexFS70eG7D50XROGapDU7xIddPIuJE8um+G7MEAy5sCuQB oB1ZImk1AXq0fwtexSkyutD6FOFH1RvaM3Ja5+ic828t2fpDz1EEE186/JI3jNYU qeg0xOPPARRCdItXepUiFJW4tjlbbr+V6bbVszZQNQ4HaZEYpQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHQa+8OjVt25wrIYVqLN4m93Rl8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ZjNjg1ODktNmNiOC0z NTEyLTlkMzgtNWM5MzI0YzQxYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl8RHr1jau01QBlXZEaFoM7/rZeMH0qFaGcgNau1qRrOGyoqRAo/C Jr0SdA/6zjCJFwGwZD47ibAu+9poHjSb5IQ/jsVnSFkl80iZ2UM8I5tNj2b9vAmn ACKuebdl59/Tq7WQ4O05hLr3Pf9oMzFIQP0shxlfd+q9Sz17i+tD2JpNvhpDfNPE DqzG8nF2q9WHBDh8wJATeyZUtoSVrrtL7zlUt4AVwcUcT2Apa5Akd0rnmEfLtseA fBOMb2UQdMbGGW8q2GVWCvsu78vmrXoSig3Te9C1eZatPXLQYWAhKW5ElsCnXlh8 vmnaiwBAZxvIJ2BKEWvfiK+nPh2pp8AMIw== -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:56 2026 by rpki-client