This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa File: a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa (raw, json) Hash identifier: Wwr52n5cFBrLGhnCI59Xwnv2ksx80R2FXzNOsBo38GM= Subject key identifier: 58:13:5F:3A:75:E4:AE:AD:48:32:5D:D9:0F:7A:5D:75:9C:65:36:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1859802E772066F0DF580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:85:98:02:e7:72:06:6f:0d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=8e01be86-41fc-401f-a3ca-5bec91e02499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:e7:6a:12:c7:ec:96:a0:d5:ca:05:b4:7a: bd:bd:65:ba:40:29:ed:bb:65:ac:24:2c:a2:5b:1f: 15:cd:46:49:17:c2:39:d6:75:15:53:5a:4c:fe:4e: 35:34:b4:57:b5:97:4a:2f:80:ad:5e:8f:ad:42:88: fe:5a:24:1d:61:e1:57:67:e8:7e:90:1e:d2:25:3a: be:91:50:fb:1a:84:d0:02:b4:83:26:76:ad:c0:d4: ab:21:40:0a:d5:ea:b4:3a:a0:e2:f6:e4:e1:ea:f6: 49:2b:78:24:72:ca:4f:25:3e:cf:fb:c8:88:3c:05: bb:ac:6e:31:c9:34:16:1f:6b:55:a9:63:87:61:15: 38:f8:36:db:af:20:e9:1f:ef:6e:cf:5d:bf:37:9b: 53:90:2a:8d:a9:55:01:00:7b:39:04:61:8e:dc:e4: 53:16:ef:d5:e5:f8:4a:13:9c:1e:42:49:bf:9a:26: 46:5e:54:d0:fb:d5:3a:28:7b:a0:2a:72:1b:56:3b: 76:7e:a5:08:0a:2e:79:42:b5:3d:6d:f1:67:5e:cf: d1:60:d8:f0:5e:e1:aa:43:48:ab:72:e5:c4:7f:9f: dd:30:4a:14:3b:1b:1f:69:3c:4d:a4:ea:94:f1:a8: f5:41:d8:5a:bf:0b:a4:b3:aa:c4:f9:0b:ab:31:72: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:5F:3A:75:E4:AE:AD:48:32:5D:D9:0F:7A:5D:75:9C:65:36:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:97:b3:05:fa:09:4b:6f:c6:61:3f:44:d4:3c:fa:99:4d:06: a5:b5:b3:f4:e7:1d:28:97:ca:cc:fd:c9:dd:75:4a:ca:61:36: 18:e6:78:a5:2d:31:ac:66:34:83:97:a8:a7:09:62:be:70:bb: 8f:7a:cc:20:4c:db:1c:8f:a1:91:bb:34:58:cf:13:bc:15:ac: 3b:5f:2f:54:21:f4:df:3d:40:78:80:a9:9d:e2:5f:d9:04:c5: 5b:ea:ae:65:70:8f:b8:98:1a:cd:8c:7c:20:2a:5f:58:66:98: d1:fd:45:80:b8:49:cb:79:3a:91:90:08:3d:65:d1:9d:a4:45: ba:cd:41:8d:d9:b8:59:9f:bb:e5:89:bd:ed:2d:39:be:1c:3f: 98:87:90:9f:82:75:75:2d:78:57:f9:fb:0b:b4:02:82:e5:9a: 39:9f:ed:3f:f9:1d:f1:53:1e:6a:89:2d:04:4e:21:e3:f0:14: 9f:68:5e:79:3e:1c:b4:1b:5c:22:22:6a:94:9a:c5:03:cb:f7: c8:8c:7d:d4:0a:22:36:b3:b7:76:33:76:7d:72:40:d5:bb:8a: d9:d2:23:25:69:22:2c:a4:11:cc:49:0f:ca:18:69:32:40:da: a4:f0:2d:e0:12:58:4b:43:ad:22:4f:d9:a5:b6:70:13:5f:9d: f1:53:77:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YWYAudyBm8N9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OGUwMWJlODYtNDFmYy00MDFmLWEzY2EtNWJlYzkxZTAyNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIvnahLH7Jag1coFtHq9vWW6QCntu2WsJCyi Wx8VzUZJF8I51nUVU1pM/k41NLRXtZdKL4CtXo+tQoj+WiQdYeFXZ+h+kB7SJTq+ kVD7GoTQArSDJnatwNSrIUAK1eq0OqDi9uTh6vZJK3gkcspPJT7P+8iIPAW7rG4x yTQWH2tVqWOHYRU4+DbbryDpH+9uz12/N5tTkCqNqVUBAHs5BGGO3ORTFu/V5fhK E5weQkm/miZGXlTQ+9U6KHugKnIbVjt2fqUICi55QrU9bfFnXs/RYNjwXuGqQ0ir cuXEf5/dMEoUOxsfaTxNpOqU8aj1Qdhavwuks6rE+QurMXILEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFgTXzp15K6tSDJd2Q96XXWcZTYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNhNzBkYzQtMjhjNi0z MWRlLWIxYzUtNGViNGE4NjhkNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGZezBfoJS2/GYT9E1Dz6mU0GpbWz9OcdKJfKzP3J3XVKymE2GOZ4 pS0xrGY0g5eopwlivnC7j3rMIEzbHI+hkbs0WM8TvBWsO18vVCH03z1AeICpneJf 2QTFW+quZXCPuJgazYx8ICpfWGaY0f1FgLhJy3k6kZAIPWXRnaRFus1Bjdm4WZ+7 5Ym97S05vhw/mIeQn4J1dS14V/n7C7QCguWaOZ/tP/kd8VMeaoktBE4h4/AUn2he eT4ctBtcIiJqlJrFA8v3yIx91AoiNrO3djN2fXJA1buK2dIjJWkiLKQRzEkPyhhp MkDapPAt4BJYS0OtIk/ZpbZwE1+d8VN3ag== -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:03 2026 by rpki-client