This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa File: 994d3c02-64be-3e74-aad7-84b3e0a5a022.roa (raw, json) Hash identifier: nKnjx1iKxoTK6rjmqcOXfBvzM+Cap4oOLGblneTqBk0= Subject key identifier: F8:72:7C:1D:4A:06:21:8F:A1:BC:5C:3F:53:7C:C7:84:C9:74:0D:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14E7B4F8557CBEECB2E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 151.213.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4e:7b:4f:85:57:cb:ee:cb:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=86f3eab7-a1e2-408c-ba46-7a39c0fe01d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:6a:82:16:be:73:44:5a:e0:95:57:07:6e: 05:d6:72:fb:d9:4a:3c:67:38:d5:41:5f:7d:35:7d: ca:83:93:0e:98:df:0d:64:a0:bf:fc:46:e2:fe:5b: e0:c6:12:a1:73:97:24:16:6a:10:ed:bc:f5:11:c1: 9d:21:20:f4:b6:13:b3:5e:11:cc:eb:c0:a7:19:4b: d0:61:75:e0:27:dc:a1:e4:2f:da:99:d5:f3:56:39: a4:b9:af:fc:eb:16:28:6e:4a:79:7d:e8:38:c5:fc: 43:cc:16:c4:14:b4:07:68:fa:de:cb:56:2d:24:81: 92:35:85:24:b3:62:30:23:3e:2f:80:27:99:a5:12: d2:5d:e3:67:51:41:40:86:1a:bf:59:a7:ee:13:41: 49:09:74:0e:35:9e:73:77:d3:da:49:e1:a9:79:65: bc:af:fe:7c:c8:18:47:72:d3:44:0d:40:11:1f:9e: 39:fb:41:56:68:e2:6e:82:18:e1:77:37:ef:7a:69: ec:22:13:b1:17:b5:ba:a8:86:e6:4b:3d:c0:91:ea: 19:8c:e2:0f:e1:40:84:d2:61:3f:21:ce:72:64:f4: e6:27:73:94:65:ac:62:de:47:94:1a:f2:bb:f8:e3: a3:ac:89:d4:5b:5e:b0:c9:d5:59:df:05:ab:3e:85: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:7C:1D:4A:06:21:8F:A1:BC:5C:3F:53:7C:C7:84:C9:74:0D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9f:dc:97:65:7f:88:98:5e:14:9b:97:e0:63:8a:45:67:ce: bf:b8:0f:7b:d6:47:1f:61:53:bb:8d:f9:63:77:62:aa:fe:8d: cb:5f:e6:24:91:de:57:cf:78:f4:2a:36:e0:d1:d7:a9:dd:ad: 78:69:75:5d:79:3b:f0:62:5d:a4:8e:58:08:db:68:44:33:85: 85:61:07:50:d9:99:99:4a:03:53:01:a0:9d:c3:58:2b:f1:0a: f5:66:89:95:d5:ea:6f:20:36:3b:1c:21:a4:f4:11:11:2d:6d: 05:be:4f:cd:eb:4a:d4:a0:77:00:f0:a8:bf:b6:09:e8:9e:a6: f7:14:62:8b:88:f5:db:8a:4f:78:9e:dc:26:69:31:17:bc:d7: a5:3e:7b:e2:36:29:42:17:1f:3e:ca:17:24:db:9a:e2:90:da: 5c:4f:f0:34:38:71:2b:c6:e9:a1:52:9a:d4:9e:16:77:0a:ee: 8a:87:c5:20:d9:a1:a2:61:3c:13:85:56:63:7e:6d:2f:05:b2: 62:0a:7b:a5:f5:a0:bb:e7:a4:0a:aa:c3:26:37:91:82:30:ce: 44:5c:ea:4a:57:2b:df:98:11:d7:2f:86:ab:e4:9f:3e:e7:d0: a5:33:c3:98:e3:68:07:25:19:58:00:c8:40:2d:18:15:8c:c7: 9c:d5:33:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExQ0U57T4VXy+7LLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODZmM2VhYjctYTFlMi00MDhjLWJhNDYtN2EzOWMwZmUwMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs1qgha+c0Ra4JVXB24F1nL72Uo8ZzjVQV99 NX3Kg5MOmN8NZKC//Ebi/lvgxhKhc5ckFmoQ7bz1EcGdISD0thOzXhHM68CnGUvQ YXXgJ9yh5C/amdXzVjmkua/86xYobkp5feg4xfxDzBbEFLQHaPrey1YtJIGSNYUk s2IwIz4vgCeZpRLSXeNnUUFAhhq/WafuE0FJCXQONZ5zd9PaSeGpeWW8r/58yBhH ctNEDUARH545+0FWaOJughjhdzfvemnsIhOxF7W6qIbmSz3AkeoZjOIP4UCE0mE/ Ic5yZPTmJ3OUZaxi3keUGvK7+OOjrInUW16wydVZ3wWrPoVo3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPhyfB1KBiGPobxcP1N8x4TJdA2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTk0ZDNjMDItNjRiZS0z ZTc0LWFhZDctODRiM2UwYTVhMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl9UwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkp/cl2V/iJheFJuX4GOKRWfOv7gPe9ZHH2FTu435Y3diqv6Ny1/mJJHe V8949Co24NHXqd2teGl1XXk78GJdpI5YCNtoRDOFhWEHUNmZmUoDUwGgncNYK/EK 9WaJldXqbyA2OxwhpPQRES1tBb5PzetK1KB3APCov7YJ6J6m9xRii4j124pPeJ7c JmkxF7zXpT574jYpQhcfPsoXJNua4pDaXE/wNDhxK8bpoVKa1J4WdwruiofFINmh omE8E4VWY35tLwWyYgp7pfWgu+ekCqrDJjeRgjDORFzqSlcr35gR1y+Gq+SfPufQ pTPDmONoByUZWADIQC0YFYzHnNUzyA== -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:00 2026 by rpki-client