This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa File: 87e9af17-b83d-3cfb-b718-f367a270a589.roa (raw, json) Hash identifier: cjZ/q71aZ3up79hCKralOjSTH80ElhV6cebZAfjlVdg= Subject key identifier: 3F:5B:65:21:F5:5F:9D:24:19:7D:17:2F:31:60:1C:DF:1B:8E:6F:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1836553C017875234EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:83:65:53:c0:17:87:52:34:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=95ce76e2-9c4d-4498-8cf6-6b2b8ebd0e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:db:28:cc:aa:89:1e:2d:65:31:8d:6c:b6: da:ec:bb:fc:82:26:ee:c8:81:44:e7:88:f6:77:01: fb:86:1d:7b:05:66:ba:6b:96:f0:7d:18:cb:49:f0: eb:df:01:5f:b7:ca:79:fb:dc:f5:12:01:54:7f:e7: 2e:f3:5a:3a:af:a1:7e:19:8a:e5:8c:94:37:22:87: d6:5f:59:d2:99:1b:e2:9e:00:a3:0b:9c:46:18:1b: 6e:89:29:68:11:2a:a0:b1:c6:dc:bf:fd:a4:08:97: 34:08:ed:c4:6e:a9:c9:fa:19:61:74:c0:32:22:34: b7:95:d1:26:89:02:88:4c:00:50:70:73:8d:3c:ba: f9:a2:33:d5:e8:bb:7f:a9:69:0a:ed:fe:57:76:25: 1e:24:f6:42:7d:ef:b8:95:8a:c5:cf:ca:e7:06:12: 4f:e2:a0:18:98:3a:43:a6:67:4e:6e:86:7f:0c:ad: 09:ad:a3:e1:3d:82:b7:1b:7f:0f:89:50:90:b1:c5: 5a:b2:f9:99:72:42:d1:38:4b:0c:ef:fd:f7:59:db: 78:fa:fd:95:81:5e:68:ea:e8:9b:27:cf:21:2f:a7: fd:6f:5c:12:00:86:3a:ef:8d:bf:9c:0b:c0:85:f7: 4b:ec:fe:eb:cf:41:05:79:bb:ef:9d:91:fb:ab:b2: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5B:65:21:F5:5F:9D:24:19:7D:17:2F:31:60:1C:DF:1B:8E:6F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:55:ec:05:da:79:af:65:7f:25:d4:85:be:8b:54:32:ea:26: 17:d1:79:f9:bd:a1:74:cc:63:f7:65:74:c3:b8:48:f7:09:ee: bf:46:b5:bc:a7:3d:6c:e6:3c:9b:54:0c:15:68:ac:ef:77:9f: 9b:29:25:69:a7:8c:2a:9f:fb:61:a1:04:1d:b2:d0:d6:c8:1f: 0f:ec:c8:c6:88:0a:5a:d3:56:e7:da:33:7b:f0:72:27:08:97: be:cb:80:e5:fe:44:64:22:42:c8:f5:36:dc:cb:3a:9c:bd:f3: 70:73:08:d0:c1:a0:91:2a:08:fd:64:72:8b:7d:43:d1:08:b5: 08:a9:bd:25:9c:c4:0d:00:99:c9:3c:87:65:52:70:f1:09:bc: c6:92:f7:f5:60:bb:a0:dd:00:b3:fb:3f:4a:e7:66:b5:6e:04: fa:6c:4b:0b:46:e6:6e:aa:fe:c9:55:f7:f5:49:a0:99:6c:b0: 53:31:a5:88:81:94:e7:ea:4d:11:7d:47:67:4a:e7:fb:df:0a: 17:ee:6f:b3:54:62:11:09:b8:b1:9b:91:e4:60:10:05:d9:bc: 2d:e2:92:3a:2e:95:1d:45:e4:5f:8b:5b:6a:53:1f:e0:2c:1b: 3f:e3:12:20:29:5f:1b:b7:52:d9:de:76:9c:af:09:12:8c:81: 1a:76:f2:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0YNlU8AXh1I06oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTVjZTc2ZTItOWM0ZC00NDk4LThjZjYtNmIyYjhlYmQwZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmXbKMyqiR4tZTGNbLba7Lv8gibuyIFE54j2 dwH7hh17BWa6a5bwfRjLSfDr3wFft8p5+9z1EgFUf+cu81o6r6F+GYrljJQ3IofW X1nSmRvingCjC5xGGBtuiSloESqgscbcv/2kCJc0CO3EbqnJ+hlhdMAyIjS3ldEm iQKITABQcHONPLr5ojPV6Lt/qWkK7f5XdiUeJPZCfe+4lYrFz8rnBhJP4qAYmDpD pmdOboZ/DK0JraPhPYK3G38PiVCQscVasvmZckLROEsM7/33Wdt4+v2VgV5o6uib J88hL6f9b1wSAIY6742/nAvAhfdL7P7rz0EFebvvnZH7q7JClQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9bZSH1X50kGX0XLzFgHN8bjm+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlOWFmMTctYjgzZC0z Y2ZiLWI3MTgtZjM2N2EyNzBhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtV7AXaea9lfyXUhb6LVDLqJhfRefm9oXTMY/dldMO4SPcJ7r9G tbynPWzmPJtUDBVorO93n5spJWmnjCqf+2GhBB2y0NbIHw/syMaIClrTVufaM3vw cicIl77LgOX+RGQiQsj1NtzLOpy983BzCNDBoJEqCP1kcot9Q9EItQipvSWcxA0A mck8h2VScPEJvMaS9/Vgu6DdALP7P0rnZrVuBPpsSwtG5m6q/slV9/VJoJlssFMx pYiBlOfqTRF9R2dK5/vfChfub7NUYhEJuLGbkeRgEAXZvC3ikjoulR1F5F+LW2pT H+AsGz/jEiApXxu3UtnedpyvCRKMgRp28tY= -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:43 2026 by rpki-client