This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa File: 632d2d98-3ca8-3c01-a046-3232bd2e8457.roa (raw, json) Hash identifier: 6bp+gRLFVAP+EzfIeWEl3wVvDl8e8MLKRzOzVSeGrdE= Subject key identifier: 91:75:E6:E0:42:E8:2A:53:63:2F:68:2F:C1:D5:00:75:AA:BB:E4:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18B0E9EC19E1757B50570 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 54066 IP address blocks: 216.172.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:8b:0e:9e:c1:9e:17:57:b5:05:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=df789f6c-dad1-40da-af72-3e5c506d522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:54:ee:8b:50:3a:1a:18:24:19:19:55:f2: fb:c3:0b:a0:2b:71:6c:3e:b8:23:a2:84:b2:d2:58: 59:6b:1b:b1:ee:79:e9:c4:14:38:97:44:ad:fe:8c: eb:47:4a:19:f6:14:2d:ad:f6:67:2a:b0:62:e1:63: e2:bb:26:93:ad:2d:f8:8f:cf:06:b3:c5:48:4c:42: f4:9c:68:09:5b:0a:e7:1a:80:46:61:00:c6:e8:59: b1:4d:27:2e:6a:53:27:05:54:57:97:f3:e2:d1:17: fc:5b:83:9b:93:b6:8a:f5:91:e4:6e:08:c3:91:e2: 7b:60:b6:66:79:e0:a0:c8:51:fc:87:4e:97:f1:73: 7a:53:37:f6:64:8d:b6:16:96:f8:ca:33:9c:56:5e: 14:5b:88:2a:3b:a4:de:b0:fb:f7:ef:48:2b:fa:aa: 49:64:b4:08:cd:d4:55:d6:a6:0b:92:0f:32:63:89: 67:95:29:f7:6c:b5:bf:e3:c4:8f:54:f6:10:05:78: a6:66:c2:42:3a:70:04:e3:ef:90:41:c8:87:05:58: 6d:81:ca:6f:fd:50:a2:03:b0:06:1f:7e:9a:99:dd: db:44:ec:19:92:e5:18:c7:06:10:51:21:01:86:2c: 89:8f:c0:0c:a2:f9:45:4e:cb:46:d6:7a:15:8d:52: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:E6:E0:42:E8:2A:53:63:2F:68:2F:C1:D5:00:75:AA:BB:E4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:67:98:11:5e:5d:01:9f:ca:14:1b:9d:59:3b:4b:b1:45:39: 32:19:6d:0e:67:0b:97:a2:c0:54:95:42:3f:47:6e:9b:3f:bd: 58:ed:be:03:6a:bf:45:b4:78:ca:2e:77:f6:f2:eb:56:44:c2: 88:fb:6c:86:93:f1:4a:ed:11:94:94:20:06:c0:74:0a:18:03: 1b:90:46:bb:bb:11:9e:f6:ca:a5:de:36:e8:c7:22:c8:69:25: 48:90:b6:2c:86:c5:27:bd:a9:28:57:61:d2:dc:16:19:b4:15: 1d:39:bd:a2:08:56:88:c7:e4:c4:75:98:22:fe:73:97:12:93: 4b:18:93:02:31:89:5e:04:84:5c:6a:c6:50:20:b6:f9:cb:53: 96:d1:dd:51:eb:5b:c9:91:e7:ed:54:77:f1:e4:19:29:54:4f: 19:65:96:f8:f6:6b:7a:bf:28:d8:89:d0:1e:58:4b:14:1a:36: da:10:72:db:ec:c3:92:0e:72:7e:72:08:73:3b:40:22:2a:27: 0f:38:f3:6f:1f:8f:56:27:f0:f4:e2:35:3a:c7:bf:04:69:a2: 34:98:f9:99:2e:5b:f1:45:60:69:1c:81:ce:9c:07:98:4b:6a: a7:1b:b4:52:f9:e2:e4:c0:ef:7c:34:ac:c0:2d:dc:40:7b:3f: a9:2e:aa:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0YsOnsGeF1e1BXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZGY3ODlmNmMtZGFkMS00MGRhLWFmNzItM2U1YzUwNmQ1MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztlU7otQOhoYJBkZVfL7wwugK3FsPrgjooSy 0lhZaxux7nnpxBQ4l0St/ozrR0oZ9hQtrfZnKrBi4WPiuyaTrS34j88Gs8VITEL0 nGgJWwrnGoBGYQDG6FmxTScualMnBVRXl/Pi0Rf8W4Obk7aK9ZHkbgjDkeJ7YLZm eeCgyFH8h06X8XN6Uzf2ZI22Fpb4yjOcVl4UW4gqO6TesPv370gr+qpJZLQIzdRV 1qYLkg8yY4lnlSn3bLW/48SPVPYQBXimZsJCOnAE4++QQciHBVhtgcpv/VCiA7AG H36amd3bROwZkuUYxwYQUSEBhiyJj8AMovlFTstG1noVjVLbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF15uBC6CpTYy9oL8HVAHWqu+RSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjMyZDJkOTgtM2NhOC0z YzAxLWEwNDYtMzIzMmJkMmU4NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBnmBFeXQGfyhQbnVk7S7FFOTIZbQ5nC5eiwFSVQj9Hbps/vVjtvgNq v0W0eMoud/by61ZEwoj7bIaT8UrtEZSUIAbAdAoYAxuQRru7EZ72yqXeNujHIshp JUiQtiyGxSe9qShXYdLcFhm0FR05vaIIVojH5MR1mCL+c5cSk0sYkwIxiV4EhFxq xlAgtvnLU5bR3VHrW8mR5+1Ud/HkGSlUTxlllvj2a3q/KNiJ0B5YSxQaNtoQctvs w5IOcn5yCHM7QCIqJw84828fj1Yn8PTiNTrHvwRpojSY+ZkuW/FFYGkcgc6cB5hL aqcbtFL54uTA73w0rMAt3EB7P6kuqnw= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:28 2026 by rpki-client