This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa File: 5589d041-bab0-368b-bc49-a67b761842dc.roa (raw, json) Hash identifier: HBWvalXTSn1/3o62QtskE1dyD7c33btwMokrSO+7W8s= Subject key identifier: A5:3E:52:EF:C9:90:4E:CC:66:56:F6:59:5C:E5:5A:C8:CD:02:52:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1865E6CA2E2C2B2178D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:86:5e:6c:a2:e2:c2:b2:17:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=e597455f-3d48-404d-b3eb-d1178122f27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:a5:5c:be:bb:e4:67:94:b0:ae:17:08:b3: fd:1b:30:95:2e:59:cc:fc:ee:6a:c9:ff:48:51:1e: 9e:20:cc:e4:fa:9f:18:d3:b9:f1:16:d2:f9:e2:c6: 32:ec:52:1c:c3:9d:08:a6:a4:18:a6:ef:af:0e:1c: 7e:46:9f:b1:b3:a2:34:58:5b:26:26:d2:6e:66:9f: c0:19:14:56:d6:d1:e6:53:26:ca:98:6c:11:67:73: 51:1e:32:05:cd:a2:d9:6c:3c:ea:f8:f1:08:79:07: a0:55:8f:8c:3b:e7:5e:97:4d:7e:96:88:25:78:6f: df:aa:b6:df:22:9b:0c:13:45:5e:99:e9:32:a4:e5: 02:f3:53:b2:9b:90:e2:0c:a5:13:62:4c:8f:9e:2a: 9d:4d:93:b5:ea:ef:b4:72:2a:95:46:62:50:24:32: 3f:b6:db:3b:d5:c1:e5:56:26:db:d9:e4:d9:d2:d3: ea:e7:ee:27:2f:e5:86:ce:77:2a:1e:19:44:c7:f1: 73:ab:a9:dc:c7:fd:05:93:ad:c0:ed:12:06:85:df: 3b:b7:f8:0b:ac:13:43:d2:cd:e5:9b:3f:ff:ec:7a: c4:dd:8c:b5:a4:d6:54:a3:ac:d6:3e:15:98:be:85: a0:93:47:63:07:15:14:b0:81:6b:c5:24:4a:7b:b7: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:52:EF:C9:90:4E:CC:66:56:F6:59:5C:E5:5A:C8:CD:02:52:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:92:d0:7c:12:cc:16:03:1c:69:ea:0b:19:ff:40:b8:49:32: ed:9e:32:c6:19:63:73:31:d3:b3:62:3a:d9:f6:78:d9:3a:f3: ea:e8:c2:1f:8e:69:e8:5f:db:e8:c9:24:ba:cb:79:2b:cd:9d: 4d:fa:f4:e6:bb:08:22:18:be:ed:dc:ac:c6:93:db:2d:2e:06: e1:09:9b:17:29:c3:6f:91:25:ed:09:ef:fb:7d:c3:76:d2:e1: 15:06:07:38:fe:71:ab:77:5c:8c:d7:62:06:5b:b3:1d:00:e8: ff:bb:80:91:c9:b0:d3:36:60:be:11:21:f0:75:dc:e7:23:14: ac:24:2e:ee:24:98:1a:2c:c4:b3:06:51:58:2b:02:f7:c9:4b: ac:4c:75:00:c7:a1:de:11:a3:52:95:02:2f:1d:e4:a1:5c:71: 6b:5d:54:96:0f:a6:fc:a0:2e:83:b4:0c:02:77:8c:51:c7:e5: 3b:8e:65:ed:c4:75:a2:4d:52:e6:e6:a2:a0:46:d2:e5:2a:06: fe:a3:a2:03:db:1b:4b:11:ae:bf:86:0d:e8:64:93:bc:b2:9a: 5e:ec:4b:27:a8:07:e0:ad:2d:8e:f4:b4:56:59:74:a8:e7:da: cb:c9:c3:08:37:b2:dd:58:6d:dc:2c:6d:b2:28:8e:51:59:0b: a9:43:da:e1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YZebKLiwrIXjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZTU5NzQ1NWYtM2Q0OC00MDRkLWIzZWItZDExNzgxMjJmMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ylXL675GeUsK4XCLP9GzCVLlnM/O5qyf9I UR6eIMzk+p8Y07nxFtL54sYy7FIcw50IpqQYpu+vDhx+Rp+xs6I0WFsmJtJuZp/A GRRW1tHmUybKmGwRZ3NRHjIFzaLZbDzq+PEIeQegVY+MO+del01+logleG/fqrbf IpsME0VemekypOUC81Oym5DiDKUTYkyPniqdTZO16u+0ciqVRmJQJDI/tts71cHl Vibb2eTZ0tPq5+4nL+WGzncqHhlEx/Fzq6ncx/0Fk63A7RIGhd87t/gLrBND0s3l mz//7HrE3Yy1pNZUo6zWPhWYvoWgk0djBxUUsIFrxSRKe7eaZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKU+Uu/JkE7MZlb2WVzlWsjNAlJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4OWQwNDEtYmFiMC0z NjhiLWJjNDktYTY3Yjc2MTg0MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAZLQfBLMFgMcaeoLGf9AuEky7Z4yxhljczHTs2I62fZ42Trz6ujC H45p6F/b6Mkkust5K82dTfr05rsIIhi+7dysxpPbLS4G4QmbFynDb5El7Qnv+33D dtLhFQYHOP5xq3dcjNdiBluzHQDo/7uAkcmw0zZgvhEh8HXc5yMUrCQu7iSYGizE swZRWCsC98lLrEx1AMeh3hGjUpUCLx3koVxxa11Ulg+m/KAug7QMAneMUcflO45l 7cR1ok1S5uaioEbS5SoG/qOiA9sbSxGuv4YN6GSTvLKaXuxLJ6gH4K0tjvS0Vll0 qOfay8nDCDey3Vht3CxtsiiOUVkLqUPa4Q== -----END CERTIFICATE-----Generated at Sun Jan 11 07:36:17 2026 by rpki-client