This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa File: 57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa (raw, json) Hash identifier: g2Fx+gFh8U4XBtLtvL8xpJFgAtdMST6rXEBGFTbPAEs= Subject key identifier: B3:09:8E:09:14:74:17:9A:D6:A0:29:0F:7C:C3:F0:D2:20:7E:6C:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14A10FDBA98903F32F390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 66.29.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4a:10:fd:ba:98:90:3f:32:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=9df3ac55-9ef7-4cd7-b6ee-148dcab46953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:ed:c7:f3:06:dc:16:46:53:9d:93:b8:72: b5:d5:c5:e6:0c:48:63:9c:db:06:c0:44:e7:1e:56: 53:ac:54:8b:77:e8:ed:8c:1b:ae:94:d1:f8:0c:ec: 04:da:7e:c0:8c:58:40:70:a8:84:dc:23:01:f5:b0: e0:9a:38:56:3b:9d:71:c0:80:00:5a:80:1a:b6:b0: 95:26:4f:56:2b:43:2d:a4:c9:59:78:14:16:d4:ef: 9c:98:ba:4e:17:0a:7d:dd:83:28:53:bd:e7:ef:0c: 5e:4c:92:bd:9c:54:4e:2a:dc:17:a5:fb:37:80:12: 80:ef:93:74:b0:1c:84:32:1c:c7:a9:b1:63:a7:35: 46:45:e7:ed:dc:c0:a6:4a:c7:21:2c:d4:68:c9:59: d4:2f:7c:27:48:50:e8:91:5c:04:76:b7:13:22:40: cb:31:42:9d:3f:56:2e:3e:cd:90:56:5c:a8:b1:0a: 12:82:28:e8:1b:e1:93:a3:80:f6:e2:ca:1e:d5:d7: d8:72:f1:68:3d:be:1b:70:6a:82:79:bb:69:2e:bb: 02:06:20:0a:09:50:39:09:fc:40:ba:0c:cb:6c:a4: 8b:d1:f8:ac:c3:51:4e:38:29:c4:64:07:17:89:da: 14:fc:2c:72:6e:f3:b3:3f:1e:a4:54:a1:82:31:9d: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:09:8E:09:14:74:17:9A:D6:A0:29:0F:7C:C3:F0:D2:20:7E:6C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:47:3d:06:73:2f:98:22:97:b5:28:05:dd:e6:0f:1f:bf:8e: d3:84:e7:a2:f4:99:d4:c7:f4:be:11:b8:f2:b7:96:cf:bf:b0: 6a:e4:12:fe:9f:e5:d7:27:1e:2e:b5:6b:7d:46:aa:89:fd:25: b8:78:5b:93:8f:b1:06:99:cb:76:cb:77:96:ff:07:3e:43:b1: c4:ff:c2:d0:cb:11:10:30:bf:4b:a4:5b:05:df:e3:07:52:79: b7:9f:36:24:ce:3e:1a:2c:85:5b:d9:c3:74:ba:44:b6:cf:bd: b0:46:26:c3:e9:9d:16:8d:b3:1f:34:94:e8:ca:ab:60:2c:4c: a4:e7:bf:75:fd:91:2b:05:eb:59:5c:79:53:ff:58:55:03:2a: 06:9f:33:08:25:72:94:37:f0:1d:62:d9:12:48:af:b1:c4:1b: 1c:2b:16:27:e5:f0:4a:e0:70:28:fe:cf:0a:53:2e:45:de:6e: 53:42:f3:29:2c:26:c6:ff:a2:37:25:c1:d0:79:c6:88:1a:05: 09:c3:7c:27:8f:da:7c:f2:25:45:98:fc:b1:49:25:89:21:dc: 11:12:d4:5b:cb:ab:8b:96:15:37:ee:8a:27:4e:b2:d4:29:5b: 51:cb:15:55:1c:c6:67:15:60:08:3c:80:64:16:98:61:b9:97: bf:2e:23:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0UoQ/bqYkD8y85AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OWRmM2FjNTUtOWVmNy00Y2Q3LWI2ZWUtMTQ4ZGNhYjQ2OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ntx/MG3BZGU52TuHK11cXmDEhjnNsGwETn HlZTrFSLd+jtjBuulNH4DOwE2n7AjFhAcKiE3CMB9bDgmjhWO51xwIAAWoAatrCV Jk9WK0MtpMlZeBQW1O+cmLpOFwp93YMoU73n7wxeTJK9nFROKtwXpfs3gBKA75N0 sByEMhzHqbFjpzVGReft3MCmSschLNRoyVnUL3wnSFDokVwEdrcTIkDLMUKdP1Yu Ps2QVlyosQoSgijoG+GTo4D24soe1dfYcvFoPb4bcGqCebtpLrsCBiAKCVA5CfxA ugzLbKSL0fisw1FOOCnEZAcXidoU/CxybvOzPx6kVKGCMZ1lcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMJjgkUdBea1qApD3zD8NIgfmyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTdjMWM2ZTctOGEwMC0z ZDljLWE0ZTctMWU0MGVmNzZjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNHPQZzL5gil7UoBd3mDx+/jtOE56L0mdTH9L4RuPK3ls+/sGrkEv6f 5dcnHi61a31Gqon9Jbh4W5OPsQaZy3bLd5b/Bz5DscT/wtDLERAwv0ukWwXf4wdS ebefNiTOPhoshVvZw3S6RLbPvbBGJsPpnRaNsx80lOjKq2AsTKTnv3X9kSsF61lc eVP/WFUDKgafMwglcpQ38B1i2RJIr7HEGxwrFifl8ErgcCj+zwpTLkXeblNC8yks Jsb/ojclwdB5xogaBQnDfCeP2nzyJUWY/LFJJYkh3BES1FvLq4uWFTfuiidOstQp W1HLFVUcxmcVYAg8gGQWmGG5l78uIx8= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:41 2026 by rpki-client