This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa File: 8520335c-5409-30cc-874f-c7fd7d7b6a29.roa (raw, json) Hash identifier: dMZ9sOIqqL5M6PxgZhW7gyc8qPhKmK9uPb68gMR0lMw= Subject key identifier: FA:34:72:54:C0:96:CD:4C:AE:29:14:64:A2:C3:4E:C1:2B:AF:48:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C751D0DBCCA6D20141E51AE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 64.24.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1d:0d:bc:ca:6d:20:14:1e:51:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=e9502ead-2cb1-4512-9c2e-4d0fadd95c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:fb:12:32:a8:92:52:66:59:03:f7:dd:02: 3c:6d:68:5d:3e:9d:79:27:0e:41:42:5d:3a:2a:89: e5:54:61:8e:e1:3d:f9:1b:76:30:f8:78:75:67:ee: 9b:f6:fe:e0:d1:ce:10:6d:87:d4:51:11:25:3d:5e: e1:d8:48:85:37:70:44:8d:8f:a5:09:aa:6f:77:fd: 09:b4:bf:c7:1c:02:65:85:34:22:c3:50:09:91:f5: a3:21:42:a1:88:4e:83:90:8f:ca:36:e4:ee:17:58: 3e:a4:8d:4a:0d:b1:c8:e5:78:0b:9c:93:74:78:f4: 2b:bf:10:92:46:48:7d:cb:04:98:e0:76:cc:69:42: 9c:41:e9:5c:54:b7:cf:00:08:2d:81:f3:ba:9f:cc: 94:ea:8c:92:27:32:52:2e:fb:fe:81:be:66:68:86: 44:90:e3:02:c9:9a:9c:7b:6d:9b:86:e4:e5:6a:58: 1d:3a:08:bc:e0:71:91:75:c3:7a:23:86:05:48:f5: dc:d7:06:af:a1:39:8b:fb:94:22:f6:24:10:1c:37: 65:51:2e:f3:08:5b:99:62:62:00:42:fb:50:23:9d: 6b:f8:1c:88:3c:e7:52:52:9d:00:d8:b4:d9:3c:1c: 99:20:06:e0:6f:a6:63:3c:07:4f:41:d9:1b:f8:d8: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:72:54:C0:96:CD:4C:AE:29:14:64:A2:C3:4E:C1:2B:AF:48:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f5:0d:52:af:15:a4:aa:ba:7d:88:aa:97:2e:fc:19:a0:df: 05:8d:ce:43:7a:e7:01:9b:71:64:2a:8b:2e:c0:9c:9e:70:c2: e9:46:79:21:bb:25:ff:6b:71:3c:0c:23:b4:bc:e9:b0:08:4b: 70:15:51:73:26:a6:3b:e4:bf:c5:2a:51:01:60:7a:e8:e0:ae: 73:6b:87:fd:85:ad:5c:ca:74:37:47:29:15:0b:f6:0b:07:b9: 04:e1:ff:4d:48:72:60:4e:fc:85:0b:b0:b5:29:0b:a1:a9:17: b0:01:21:d5:d0:80:b0:c5:26:93:fc:43:bc:b6:79:ff:60:5f: e3:60:0d:bf:d2:fd:3a:0f:49:f9:9a:6c:5f:68:c0:21:7f:65: 42:e4:3b:51:4d:19:8b:01:df:38:66:98:bd:e0:71:b6:f5:b9: 93:81:5b:6e:90:df:7a:13:60:31:f5:f5:46:dd:a5:05:58:01: 6e:e2:0b:58:9d:e6:77:06:60:e6:ea:47:ff:1d:bd:39:65:ef: f2:66:87:c8:44:92:64:1d:05:75:9f:d4:26:2f:f6:3d:8c:f2: c6:01:07:4a:9c:49:27:a5:bb:95:f4:67:4a:75:a7:0d:ab:ce: 54:5d:5a:81:dc:7c:da:98:a4:85:d5:37:2e:c8:98:3b:6f:f7: e7:46:83:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HQ28ym0gFB5RroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk ZTk1MDJlYWQtMmNiMS00NTEyLTljMmUtNGQwZmFkZDk1YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsn7EjKoklJmWQP33QI8bWhdPp15Jw5BQl06 KonlVGGO4T35G3Yw+Hh1Z+6b9v7g0c4QbYfUURElPV7h2EiFN3BEjY+lCapvd/0J tL/HHAJlhTQiw1AJkfWjIUKhiE6DkI/KNuTuF1g+pI1KDbHI5XgLnJN0ePQrvxCS Rkh9ywSY4HbMaUKcQelcVLfPAAgtgfO6n8yU6oySJzJSLvv+gb5maIZEkOMCyZqc e22bhuTlalgdOgi84HGRdcN6I4YFSPXc1wavoTmL+5Qi9iQQHDdlUS7zCFuZYmIA QvtQI51r+ByIPOdSUp0A2LTZPByZIAbgb6ZjPAdPQdkb+Nhe5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo0clTAls1MrikUZKLDTsErr0huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODUyMDMzNWMtNTQwOS0z MGNjLTg3NGYtYzdmZDdkN2I2YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj1DVKvFaSqun2Iqpcu/Bmg3wWNzkN65wGbcWQqiy7AnJ5wwulGeSG7 Jf9rcTwMI7S86bAIS3AVUXMmpjvkv8UqUQFgeujgrnNrh/2FrVzKdDdHKRUL9gsH uQTh/01IcmBO/IULsLUpC6GpF7ABIdXQgLDFJpP8Q7y2ef9gX+NgDb/S/ToPSfma bF9owCF/ZULkO1FNGYsB3zhmmL3gcbb1uZOBW26Q33oTYDH19UbdpQVYAW7iC1id 5ncGYObqR/8dvTll7/Jmh8hEkmQdBXWf1CYv9j2M8sYBB0qcSSelu5X0Z0p1pw2r zlRdWoHcfNqYpIXVNy7ImDtv9+dGg3U= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:59 2026 by rpki-client