This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa File: 96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa (raw, json) Hash identifier: eOO0W4tI83sztYN4Pb765UB0kXBDqeOv+/vMxDiI2Ds= Subject key identifier: 6C:9D:56:7E:16:FD:E5:05:20:04:48:07:31:06:F3:49:AC:B7:3A:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18608C00F4CAAD7621AF8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:86:08:c0:0f:4c:aa:d7:62:1a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=0f22a064-5dad-4168-a22f-df45820b6a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:27:93:d5:80:23:2d:75:72:4e:ac:a3:69: d8:c4:cf:44:fd:77:7a:0e:50:02:27:81:94:57:7d: 14:73:ae:97:5e:af:c6:a1:9c:f1:55:39:75:9b:6f: 2a:70:2a:f7:81:20:18:a0:eb:0d:9a:06:d5:7f:0f: 97:a5:fd:12:99:31:f9:e5:60:41:d8:c3:1d:2f:10: 22:43:e7:37:fa:40:6c:e5:90:7d:27:c1:6c:bd:69: 75:b7:45:00:73:a7:1e:0a:58:03:b1:52:91:13:51: 6a:59:bd:6b:93:5f:cd:b1:36:cb:3a:36:b4:23:5f: cf:0e:c6:bb:3b:32:31:c6:b8:b5:28:eb:f9:0e:d0: da:c3:e0:78:c4:28:48:90:cc:f6:af:9e:ca:38:cc: a2:7c:f0:79:b4:0c:a7:52:79:4b:9d:f3:78:56:01: 7c:43:8f:e9:70:39:af:09:6b:3b:5c:29:a7:d1:5a: 5e:f6:56:92:b6:e1:45:d6:d3:b7:c8:e7:e4:03:cd: d2:c2:ba:9a:a9:41:5c:cb:ba:5e:b8:27:7a:6c:1d: e4:59:94:39:78:b0:05:91:11:82:ab:f1:53:da:02: 19:f0:e8:56:4f:3b:4c:a0:2d:b6:d9:fb:d4:46:d9: 74:80:c9:7c:03:63:87:75:c4:82:85:f9:ba:cc:7e: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9D:56:7E:16:FD:E5:05:20:04:48:07:31:06:F3:49:AC:B7:3A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c3:8f:08:cd:2e:db:52:0c:d6:2f:a4:db:06:c8:29:ee:06: 4e:7f:25:7d:a8:e7:21:c4:c7:d5:68:de:5c:20:2e:5c:74:b5: be:22:bd:85:bc:84:07:c3:9f:5f:1d:4d:3c:26:41:f9:e9:36: f7:0f:13:1c:2e:16:27:26:36:04:e1:eb:87:40:34:8d:19:14: 30:35:86:f9:22:d7:6a:38:33:b8:c0:87:7e:c3:c6:2f:4e:00: 08:b5:28:47:4f:16:b3:be:f2:6e:37:c6:dc:8a:13:39:cc:3b: f4:40:5a:69:86:62:cf:09:ac:da:dc:48:49:09:d1:7b:50:f4: 33:3f:24:85:4d:bd:18:8c:ee:52:f5:1e:6c:2a:c2:6c:f7:c6: 15:71:c3:eb:cb:e3:fd:3f:2d:aa:2f:ec:c0:8a:84:09:f3:9e: 39:95:f9:7e:97:42:d0:10:82:13:ec:49:07:03:9e:4a:42:d7: 96:31:3d:4d:ac:40:3d:05:7c:f0:35:da:eb:45:14:ba:c9:a2: 50:e1:88:b8:fe:2e:6a:d6:26:60:e6:72:45:85:19:f2:ef:7a: a1:c0:c8:92:e2:cc:a6:e4:46:79:99:e2:fb:42:7d:cb:f0:b0: 88:88:6e:6d:57:5d:8a:6d:e9:59:61:23:15:a9:5a:a0:60:13: 50:00:37:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YYIwA9MqtdiGvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MGYyMmEwNjQtNWRhZC00MTY4LWEyMmYtZGY0NTgyMGI2YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTInk9WAIy11ck6so2nYxM9E/Xd6DlACJ4GU V30Uc66XXq/GoZzxVTl1m28qcCr3gSAYoOsNmgbVfw+Xpf0SmTH55WBB2MMdLxAi Q+c3+kBs5ZB9J8FsvWl1t0UAc6ceClgDsVKRE1FqWb1rk1/NsTbLOja0I1/PDsa7 OzIxxri1KOv5DtDaw+B4xChIkMz2r57KOMyifPB5tAynUnlLnfN4VgF8Q4/pcDmv CWs7XCmn0Vpe9laStuFF1tO3yOfkA83SwrqaqUFcy7peuCd6bB3kWZQ5eLAFkRGC q/FT2gIZ8OhWTztMoC222fvURtl0gMl8A2OHdcSChfm6zH4ONQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGydVn4W/eUFIARIBzEG80mstzp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZiM2Q4NGQtYmRhYy0z MGY3LTgwYzQtOTYzZWMzNWQ1YjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJsOPCM0u21IM1i+k2wbIKe4GTn8lfajnIcTH1WjeXCAuXHS1viK9 hbyEB8OfXx1NPCZB+ek29w8THC4WJyY2BOHrh0A0jRkUMDWG+SLXajgzuMCHfsPG L04ACLUoR08Ws77ybjfG3IoTOcw79EBaaYZizwms2txISQnRe1D0Mz8khU29GIzu UvUebCrCbPfGFXHD68vj/T8tqi/swIqECfOeOZX5fpdC0BCCE+xJBwOeSkLXljE9 TaxAPQV88DXa60UUusmiUOGIuP4uatYmYOZyRYUZ8u96ocDIkuLMpuRGeZni+0J9 y/CwiIhubVddim3pWWEjFalaoGATUAA3IQ== -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:16 2026 by rpki-client