This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8748a475-9d7b-3aa5-822d-c9f801637e64.roa File: 8748a475-9d7b-3aa5-822d-c9f801637e64.roa (raw, json) Hash identifier: 0JuSiecekhP3MopRNiMrFT0U09YHBBICu+4sxRS5Y4Y= Subject key identifier: 87:05:3A:64:51:7C:FA:4B:33:71:C4:14:73:0F:2D:9B:06:E5:18:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E06981F75AA2CEED9BEF800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8748a475-9d7b-3aa5-822d-c9f801637e64.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.187.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:98:1f:75:aa:2c:ee:d9:be:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=74c87225-e95c-47ab-a462-9f63aca27e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:9f:41:a6:05:fd:c4:d1:2e:69:b9:b0:fc: b8:7c:5b:ce:31:bb:5d:91:ca:42:ea:5d:94:93:84: cd:d6:51:b2:82:b2:28:8a:bd:43:11:a0:a9:b7:d4: d9:61:81:e8:a3:f3:b7:b0:6d:5c:c2:89:9a:84:d1: bd:73:cc:aa:5a:93:34:f7:b4:7f:3c:1d:a9:48:5b: 00:1a:73:b1:a0:fe:2b:58:c9:9a:4e:41:a0:b1:00: 56:7b:0f:d6:91:3c:3c:c8:b9:11:78:a6:ee:52:41: 6c:14:16:a2:e8:71:6b:bc:34:60:9a:6a:4b:10:a2: 56:1c:8e:47:6d:67:69:c7:de:20:97:a7:bb:54:a3: 02:cb:59:e0:0b:c7:9a:61:35:eb:00:bf:9c:44:4b: 1f:d8:3b:f9:89:d5:07:c0:d9:b1:35:26:24:70:f5: 63:7a:88:ee:34:98:4e:27:8c:12:6e:0f:63:86:5e: 75:d4:da:70:ee:59:63:0a:10:24:b6:bc:fb:07:76: bc:31:ae:4a:bb:ec:ab:0d:12:a3:97:03:b0:5b:b7: c6:ff:43:ba:80:59:96:0f:62:00:05:9a:cc:53:1f: c0:92:56:81:64:1a:89:f9:21:b6:76:47:b9:54:af: 27:36:5b:8e:84:ed:0b:73:c0:1f:4e:5d:cb:c5:e8: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:05:3A:64:51:7C:FA:4B:33:71:C4:14:73:0F:2D:9B:06:E5:18:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8748a475-9d7b-3aa5-822d-c9f801637e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a7:3f:3e:83:03:b8:67:b5:17:6b:3c:1b:bc:bd:29:87:ce: 96:ed:7f:93:81:23:ec:a2:b1:6c:c2:d2:76:30:32:43:f8:2c: ca:49:47:6c:29:9e:a5:3a:c5:e1:b3:38:99:74:0a:da:0e:22: 0a:92:2e:73:8b:be:8f:d4:7e:ef:a9:70:ae:c6:25:ef:c4:0c: 8a:60:3b:c0:eb:fb:cf:be:64:37:e7:2c:6d:e6:ba:c9:5d:3b: 56:32:94:a4:de:85:4d:e2:1a:70:a3:0c:4a:65:1c:3a:27:a6: ce:1e:c2:24:ae:c3:b5:9f:c8:eb:b5:6f:d8:5a:84:a6:03:28: 3d:73:8d:4c:4a:45:a9:2c:9c:6e:42:78:03:cb:d0:95:b8:75: 13:1c:20:45:b2:f9:e3:71:53:68:3d:69:37:fc:e1:70:7b:31: 6f:97:9e:91:53:9d:13:e4:33:1c:cd:59:19:3e:ac:96:25:9c: 26:40:5b:11:3a:a3:51:70:42:55:ec:e5:fe:dd:33:37:91:47: 0e:e9:cf:97:26:53:6a:45:66:dd:3e:e5:17:b8:dd:3b:05:23: 81:09:2c:82:7f:d1:45:ad:40:4f:80:df:c5:ad:28:cb:03:f4: c6:c3:11:a4:bb:e6:63:6c:24:44:33:8c:87:43:bf:e8:d0:76: 8c:01:8a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpgfdaos7tm++AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk NzRjODcyMjUtZTk1Yy00N2FiLWE0NjItOWY2M2FjYTI3ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9yfQaYF/cTRLmm5sPy4fFvOMbtdkcpC6l2U k4TN1lGygrIoir1DEaCpt9TZYYHoo/O3sG1cwomahNG9c8yqWpM097R/PB2pSFsA GnOxoP4rWMmaTkGgsQBWew/WkTw8yLkReKbuUkFsFBai6HFrvDRgmmpLEKJWHI5H bWdpx94gl6e7VKMCy1ngC8eaYTXrAL+cREsf2Dv5idUHwNmxNSYkcPVjeojuNJhO J4wSbg9jhl511Npw7lljChAktrz7B3a8Ma5Ku+yrDRKjlwOwW7fG/0O6gFmWD2IA BZrMUx/AklaBZBqJ+SG2dke5VK8nNluOhO0Lc8AfTl3LxeiH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcFOmRRfPpLM3HEFHMPLZsG5RjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc0OGE0NzUtOWQ3Yi0z YWE1LTgyMmQtYzlmODAxNjM3ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGnPz6DA7hntRdrPBu8vSmHzpbtf5OBI+yisWzC0nYwMkP4LMpJR2wp nqU6xeGzOJl0CtoOIgqSLnOLvo/Ufu+pcK7GJe/EDIpgO8Dr+8++ZDfnLG3musld O1YylKTehU3iGnCjDEplHDonps4ewiSuw7WfyOu1b9hahKYDKD1zjUxKRaksnG5C eAPL0JW4dRMcIEWy+eNxU2g9aTf84XB7MW+XnpFTnRPkMxzNWRk+rJYlnCZAWxE6 o1FwQlXs5f7dMzeRRw7pz5cmU2pFZt0+5Re43TsFI4EJLIJ/0UWtQE+A38WtKMsD 9MbDEaS75mNsJEQzjIdDv+jQdowBik0= -----END CERTIFICATE-----Generated at Sat Jan 10 20:55:34 2026 by rpki-client