This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa File: 45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa (raw, json) Hash identifier: pvGSMRsosmoKKXfhTd/cVwRA61yx8IOMerBgsGvhUok= Subject key identifier: BE:1E:9D:55:86:B9:61:52:50:6C:2D:C6:CB:A7:58:E1:92:96:55:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15EFA44A85E0BEAC16AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.191.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:5e:fa:44:a8:5e:0b:ea:c1:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=2ec2b906-73ee-4bb8-ba63-455cf3eded35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:07:02:8d:6c:96:63:9b:d0:d4:58:c2:13: 6d:c5:42:3a:62:e8:b3:23:5f:33:36:1f:60:c5:20: 1b:01:c1:77:9b:37:57:d2:e5:46:9f:c3:e3:ee:dd: 73:6c:cb:ea:e5:69:8d:cc:68:87:28:83:eb:47:ec: e3:d1:69:79:ba:30:25:fb:95:bb:58:c3:b2:07:62: db:46:f1:56:57:96:1a:fd:e9:87:80:50:8e:dc:cb: 31:9b:e0:53:33:71:e2:12:c6:25:a6:c3:d6:3e:51: e1:64:e6:2b:94:23:d4:05:9f:e9:a2:36:6f:bf:04: fc:40:95:a8:b6:86:a7:86:3b:c6:59:cd:24:8e:13: fa:b3:21:da:d8:60:2e:30:16:f3:8a:9a:4c:d3:ee: 50:b2:9f:fc:05:e7:c3:b7:7a:67:d1:21:9d:95:32: 48:7c:d9:fd:ae:20:64:6e:37:e4:3f:6b:16:09:ed: 2c:56:3e:1b:b0:ea:37:10:e2:f8:27:cd:d0:a3:07: b4:bb:0f:a7:3f:26:31:97:95:52:32:83:1b:e9:cd: cb:c4:9c:24:e4:4a:af:c1:14:2d:40:86:52:ab:55: 00:78:fc:2d:5b:0f:c4:98:ec:8b:c7:e7:3c:f4:4c: 44:b3:90:ef:2a:ea:c4:d9:e0:f2:0a:d8:bf:41:36: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1E:9D:55:86:B9:61:52:50:6C:2D:C6:CB:A7:58:E1:92:96:55:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ad:2b:98:df:c7:69:c2:76:1e:7b:72:0d:a8:af:02:10:a4: 41:80:20:06:60:59:c4:16:dd:b3:0b:8a:b1:d2:e1:f4:2e:6d: 3b:29:a2:63:77:e9:30:83:0e:34:91:21:4d:33:c5:66:45:bb: 51:47:d2:1b:d2:bf:eb:ee:a3:d0:d5:b4:99:51:6d:46:19:08: eb:8a:75:85:82:50:b0:9d:f6:7b:ab:c6:ca:b8:e5:e3:a5:82: fd:66:32:f7:39:9c:6f:8c:ca:9c:87:70:ea:00:43:43:6c:23: 9d:30:78:64:a5:78:db:6f:49:ac:08:0d:ce:65:f6:5d:31:f5: 15:3d:65:78:dd:82:56:e9:39:25:a9:c3:23:bd:c2:67:3f:9a: 84:c3:ba:42:1c:d7:26:a4:ca:84:31:9b:73:4f:6f:3f:ab:0b: fb:38:a7:15:68:26:06:d4:0a:f9:f4:61:cb:a1:7e:ed:de:cd: b0:38:ed:a9:59:3f:53:4e:0a:24:4a:f5:95:68:10:37:06:19: 15:8d:5e:2c:31:00:93:11:86:d9:6c:94:18:f4:63:08:63:f5: c0:ed:7d:a6:1d:a8:5c:b1:90:c9:2a:78:a6:9f:45:6f:fe:58: 3b:b9:9b:ec:4e:63:2b:da:5d:56:f6:20:17:0e:d3:6a:61:33: e7:ac:bf:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0V76RKheC+rBasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MmVjMmI5MDYtNzNlZS00YmI4LWJhNjMtNDU1Y2YzZWRlZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm8HAo1slmOb0NRYwhNtxUI6YuizI18zNh9g xSAbAcF3mzdX0uVGn8Pj7t1zbMvq5WmNzGiHKIPrR+zj0Wl5ujAl+5W7WMOyB2Lb RvFWV5Ya/emHgFCO3Msxm+BTM3HiEsYlpsPWPlHhZOYrlCPUBZ/pojZvvwT8QJWo toanhjvGWc0kjhP6syHa2GAuMBbzippM0+5Qsp/8BefDt3pn0SGdlTJIfNn9riBk bjfkP2sWCe0sVj4bsOo3EOL4J83Qowe0uw+nPyYxl5VSMoMb6c3LxJwk5EqvwRQt QIZSq1UAePwtWw/EmOyLx+c89ExEs5DvKurE2eDyCti/QTbPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4enVWGuWFSUGwtxsunWOGSllU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWZjMGYtZjllNC0z MjQzLTgzYTgtNTMwYmE0YTE4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCtK5jfx2nCdh57cg2orwIQpEGAIAZgWcQW3bMLirHS4fQubTspomN3 6TCDDjSRIU0zxWZFu1FH0hvSv+vuo9DVtJlRbUYZCOuKdYWCULCd9nurxsq45eOl gv1mMvc5nG+MypyHcOoAQ0NsI50weGSleNtvSawIDc5l9l0x9RU9ZXjdglbpOSWp wyO9wmc/moTDukIc1yakyoQxm3NPbz+rC/s4pxVoJgbUCvn0Ycuhfu3ezbA47alZ P1NOCiRK9ZVoEDcGGRWNXiwxAJMRhtlslBj0Ywhj9cDtfaYdqFyxkMkqeKafRW/+ WDu5m+xOYyvaXVb2IBcO02phM+esvw0= -----END CERTIFICATE-----Generated at Sat Jan 10 04:26:07 2026 by rpki-client