This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa File: 84bad8c2-46cd-3a42-80d0-ff2891389b87.roa (raw, json) Hash identifier: l/LN5XlpGWeZzFZfQ0Zb8eY8eNknGUwlxz8rP/8Qk0o= Subject key identifier: 9E:C2:81:58:9F:02:E6:2D:13:D5:9C:3B:28:D7:C3:A4:38:01:25:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1864D1460A14B4DB5D8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:86:4d:14:60:a1:4b:4d:b5:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=d511228c-a358-4bbf-857a-2f1ef284669b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:75:94:46:f4:80:31:c9:1a:fe:4f:81:fc: 95:33:54:63:42:f2:ac:ff:bc:ce:33:eb:fb:9f:c4: b8:97:57:77:00:8f:6d:c1:2b:d3:9e:c9:c3:71:46: d7:e2:a8:c8:5f:01:14:6e:17:e3:60:1d:4e:86:09: 30:0a:02:01:a5:09:51:c5:d3:87:b5:db:f0:b5:5a: 12:c0:fc:00:c1:71:97:70:ea:77:dd:2d:1d:bf:68: d2:8f:70:c2:8d:9c:94:5c:ed:ef:99:0d:d1:c0:70: 09:0d:38:81:be:37:db:92:bd:e0:27:7d:19:24:79: 91:a9:80:5c:68:1d:ba:52:c2:5e:07:bb:89:df:fd: 17:c8:f0:95:85:4d:3b:38:c4:46:8d:2a:34:33:99: 9b:5d:55:d2:c1:5b:21:24:d8:0c:f8:f0:90:76:6b: 02:33:8e:1b:6d:d3:e7:3d:f1:e0:fe:a8:65:45:91: f2:7b:b9:49:96:82:95:6d:8c:58:51:f7:c7:28:e5: 49:d3:12:df:72:ce:5d:4f:9e:49:90:31:01:46:72: e7:8c:5e:cc:75:6a:cd:69:c2:47:18:ff:21:d1:2a: b9:77:41:1e:b8:48:6a:1b:6b:3d:77:a1:f4:27:77: ae:5a:b0:57:29:88:91:15:77:fb:02:ee:d8:55:3a: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C2:81:58:9F:02:E6:2D:13:D5:9C:3B:28:D7:C3:A4:38:01:25:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cc:81:68:b3:91:6a:1d:34:7f:7e:12:18:00:f0:fa:39:ca: d3:70:37:fa:0b:c9:40:50:99:c9:3a:c4:df:c3:5e:15:82:e6: 70:05:32:45:29:74:06:3e:56:c7:89:17:c7:7b:67:2d:1c:3a: c8:0e:f3:9a:0d:ca:8b:0b:b7:7b:5d:77:f0:c9:ad:2f:e0:2e: 5c:51:47:e1:bf:bb:90:38:e7:cb:c2:12:15:44:bb:df:44:3b: ac:41:15:15:73:8f:cb:dd:da:97:a9:95:a8:b8:72:e4:6a:ad: e2:d9:6b:cd:cb:f9:cb:79:89:fb:f3:ee:90:3d:f8:c0:47:61: 67:d3:a0:ae:6a:7c:4a:8b:71:7a:a1:99:de:10:56:5f:c8:78: bd:74:d8:29:22:7c:b3:2a:fc:37:16:d5:08:67:59:34:8d:47: 13:5b:9d:19:30:e7:b4:cf:cf:30:37:e3:0f:f0:59:2c:d6:8c: cb:0c:6a:7f:cd:42:38:44:cf:c6:e6:01:05:f5:dc:bf:33:89: 74:d1:21:f4:67:58:75:98:57:5f:6f:6d:a5:9a:95:61:41:56: 9c:d3:cd:30:c2:1e:3d:a8:71:ac:5a:43:1c:4f:5b:44:6a:4a: 97:7d:8a:02:27:3e:63:90:ca:40:1e:ed:84:30:b4:d8:d9:07: 50:3d:13:5e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YZNFGChS0212MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZDUxMTIyOGMtYTM1OC00YmJmLTg1N2EtMmYxZWYyODQ2NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp51lEb0gDHJGv5PgfyVM1RjQvKs/7zOM+v7 n8S4l1d3AI9twSvTnsnDcUbX4qjIXwEUbhfjYB1OhgkwCgIBpQlRxdOHtdvwtVoS wPwAwXGXcOp33S0dv2jSj3DCjZyUXO3vmQ3RwHAJDTiBvjfbkr3gJ30ZJHmRqYBc aB26UsJeB7uJ3/0XyPCVhU07OMRGjSo0M5mbXVXSwVshJNgM+PCQdmsCM44bbdPn PfHg/qhlRZHye7lJloKVbYxYUffHKOVJ0xLfcs5dT55JkDEBRnLnjF7MdWrNacJH GP8h0Sq5d0EeuEhqG2s9d6H0J3euWrBXKYiRFXf7Au7YVTqXoQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ7CgVifAuYtE9WcOyjXw6Q4ASVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRiYWQ4YzItNDZjZC0z YTQyLTgwZDAtZmYyODkxMzg5Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHcyBaLORah00f34SGADw+jnK03A3+gvJQFCZyTrE38NeFYLmcAUy RSl0Bj5Wx4kXx3tnLRw6yA7zmg3Kiwu3e1138MmtL+AuXFFH4b+7kDjny8ISFUS7 30Q7rEEVFXOPy93al6mVqLhy5Gqt4tlrzcv5y3mJ+/PukD34wEdhZ9Ogrmp8Sotx eqGZ3hBWX8h4vXTYKSJ8syr8NxbVCGdZNI1HE1udGTDntM/PMDfjD/BZLNaMywxq f81COETPxuYBBfXcvzOJdNEh9GdYdZhXX29tpZqVYUFWnNPNMMIePahxrFpDHE9b RGpKl32KAic+Y5DKQB7thDC02NkHUD0TXg== -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:41 2026 by rpki-client