This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa File: 7858d667-e6fa-3f96-bdaf-8712e64c5159.roa (raw, json) Hash identifier: BWBn9IuOxrWbpD6yHy7+HJHHN3MAJEX/evB3t7DOueI= Subject key identifier: B3:AB:3D:6F:E4:A0:DE:1E:6C:01:03:73:83:13:A4:48:6D:5E:21:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4CA11B133039C4142C293080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 40.142.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:1b:13:30:39:c4:14:2c:29:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=7a1e243f-fada-426a-839e-610e8ba65ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:4c:8a:bc:e0:59:f3:19:5b:95:62:05:0e: 26:39:71:64:90:9a:42:d2:07:61:bd:e2:11:37:32: 27:a1:06:39:7b:a3:15:f0:b7:ad:dc:96:5e:1f:7a: 7d:30:ed:57:d1:6e:55:db:2e:e6:76:20:ce:d3:70: 34:28:d8:29:b1:55:5b:ac:91:cf:21:c2:ec:21:fa: 16:33:46:1a:6c:43:c6:5f:87:1a:a6:e3:6e:e6:1c: d2:92:d1:bb:cf:8b:7b:1f:21:6e:11:40:df:b3:81: bd:02:25:b2:66:07:de:cd:a5:62:bf:f3:aa:22:77: 3f:ed:5b:e8:ed:6a:06:74:64:de:6b:03:e8:63:4a: bf:58:1d:fb:c6:49:9f:79:89:24:17:44:28:81:5d: 0f:71:85:35:06:4b:2c:ac:4d:c5:af:5f:1a:9b:4a: b9:53:0f:f6:8c:10:f6:58:5d:e2:13:a0:92:88:62: a1:83:31:46:1d:cd:fb:38:42:66:ea:03:92:07:db: d7:56:39:91:41:3f:b0:a2:8a:53:5a:65:10:67:cb: 2d:00:8f:cc:85:7c:af:9b:d7:ae:d4:40:2c:66:c9: 9e:9b:e2:bf:1c:58:9b:e1:58:aa:0f:47:fc:58:33: 89:2d:39:c2:89:8f:bb:d3:5d:04:93:51:de:08:eb: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:3D:6F:E4:A0:DE:1E:6C:01:03:73:83:13:A4:48:6D:5E:21:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:73:40:85:df:22:34:cc:30:50:bf:b8:25:59:d7:df:83:14: e7:34:ad:01:2b:40:7d:cd:e9:32:69:50:81:91:e9:11:23:f5: 80:57:91:bd:90:3d:b0:ac:da:54:d6:93:f1:e3:ee:6e:1e:f3: 4c:0f:80:18:26:ba:f6:c5:74:d2:04:41:cc:e1:00:29:dc:8c: bf:30:b7:e6:38:8b:37:0f:1b:cf:b3:af:42:ce:0d:cc:e0:52: 56:45:6f:43:7f:53:f5:d8:22:c5:d7:8b:3a:76:a7:f0:07:53: f7:81:9c:10:29:23:8e:fd:a8:73:ba:ce:11:03:e4:79:e3:91: 99:18:10:85:02:c8:85:02:2d:bb:5a:35:e7:5a:72:67:74:92: 6c:26:71:ce:bb:40:7b:54:c0:b2:de:9a:ae:a0:bb:52:26:35: e7:e3:2e:5e:ea:48:5b:71:ac:19:3b:57:72:42:f7:55:78:e1: 9b:ca:a9:aa:83:00:de:80:4c:23:17:57:0f:37:1a:ae:4d:5b: 76:c2:6b:88:bb:a7:da:80:ef:a0:c2:c9:f7:85:30:bd:1e:2e: b0:8b:52:8f:11:3e:4d:96:08:ad:0d:40:a0:bb:e0:9c:93:c3: 9f:ee:38:82:8e:13:e1:49:a6:43:cc:46:d8:f1:da:ac:81:5a: bd:e6:c8:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoRsTMDnEFCwpMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk N2ExZTI0M2YtZmFkYS00MjZhLTgzOWUtNjEwZThiYTY1Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRVMirzgWfMZW5ViBQ4mOXFkkJpC0gdhveIR NzInoQY5e6MV8Let3JZeH3p9MO1X0W5V2y7mdiDO03A0KNgpsVVbrJHPIcLsIfoW M0YabEPGX4capuNu5hzSktG7z4t7HyFuEUDfs4G9AiWyZgfezaViv/OqInc/7Vvo 7WoGdGTeawPoY0q/WB37xkmfeYkkF0QogV0PcYU1BkssrE3Fr18am0q5Uw/2jBD2 WF3iE6CSiGKhgzFGHc37OEJm6gOSB9vXVjmRQT+woopTWmUQZ8stAI/MhXyvm9eu 1EAsZsmem+K/HFib4ViqD0f8WDOJLTnCiY+7010Ek1HeCOshvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOrPW/koN4ebAEDc4MTpEhtXiHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg1OGQ2NjctZTZmYS0z Zjk2LWJkYWYtODcxMmU2NGM1MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdzQIXfIjTMMFC/uCVZ19+DFOc0rQErQH3N6TJpUIGR6REj9YBXkb2Q PbCs2lTWk/Hj7m4e80wPgBgmuvbFdNIEQczhACncjL8wt+Y4izcPG8+zr0LODczg UlZFb0N/U/XYIsXXizp2p/AHU/eBnBApI479qHO6zhED5HnjkZkYEIUCyIUCLbta Nedacmd0kmwmcc67QHtUwLLemq6gu1ImNefjLl7qSFtxrBk7V3JC91V44ZvKqaqD AN6ATCMXVw83Gq5NW3bCa4i7p9qA76DCyfeFML0eLrCLUo8RPk2WCK0NQKC74JyT w5/uOIKOE+FJpkPMRtjx2qyBWr3myB4= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:45 2026 by rpki-client