This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json) Hash identifier: siwUGdaQYEaqMjgLIhwiGsZtyUM4B8r49OrvKLu74M4= Subject key identifier: DB:AC:03:63:69:7C:0E:C8:D5:6A:23:C6:8E:5F:4E:AC:23:43:D8:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D183DB7DD52D91943D5040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:83:db:7d:d5:2d:91:94:3d:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=ac2936f0-74ef-4ac7-82a9-f70adbffb4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:53:41:6f:65:0c:25:ca:c7:e9:e3:f8:b6: 88:12:bb:eb:e4:67:68:a0:55:2b:ab:9b:81:ab:d3: 6f:59:16:4d:6a:76:8f:33:28:39:d5:51:f4:75:d3: 57:ef:57:a1:2e:45:9f:a7:60:77:98:08:8a:f8:95: 6d:ec:87:3a:48:27:30:78:44:40:00:9d:57:83:0f: d4:4d:65:6a:5a:66:7f:4a:a8:4f:86:b8:a1:0e:d1: 03:97:7c:40:dc:4c:5e:97:2b:f4:a3:55:2d:7b:58: 02:a0:f5:3c:a6:48:e2:da:7b:62:03:ea:c5:ae:2f: e5:51:c2:8b:c9:ae:f5:0b:9f:dc:c1:93:49:f5:91: 33:c9:5d:ea:33:f7:9c:85:9a:06:a0:cf:ef:e2:29: 5b:5c:8a:66:a6:c5:c8:6c:be:1d:81:e0:19:87:15: 83:ba:2c:84:e4:f0:a8:13:ca:b0:ee:2c:fc:1c:71: 3a:5b:25:82:10:51:6e:ee:ca:2d:e8:03:63:77:9c: ea:b8:47:aa:79:ec:32:3b:34:2a:44:61:79:d7:f8: 23:fc:1b:fd:fb:81:47:05:91:41:6d:c3:da:1c:1c: 35:36:75:ba:f9:96:9c:f3:a5:a6:d0:20:06:04:45: 7d:29:af:29:c3:ab:fd:cd:13:e9:22:fc:a1:e5:1d: c5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:03:63:69:7C:0E:C8:D5:6A:23:C6:8E:5F:4E:AC:23:43:D8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cb:3d:5b:bd:7f:a5:20:6b:46:1b:ce:cf:1c:49:cb:dc:75: e4:35:f0:ec:5b:ba:4a:4e:29:af:36:f9:ce:0c:48:00:c9:87: 4a:9a:76:70:39:2e:b5:cb:d1:14:cf:fb:28:02:0a:35:e9:9d: 8a:aa:1e:b9:7f:d8:56:16:5a:c1:88:74:e0:88:7b:a5:d0:20: cc:30:3d:b4:8e:44:d6:5a:fb:a1:bd:b8:b9:51:8b:ba:3f:57: 93:4c:39:2c:56:41:76:c1:66:ee:aa:bd:8c:46:63:2d:cc:ea: 2b:a3:4e:96:01:be:56:bb:f5:fc:2a:8d:2d:b5:78:1b:56:c7: 91:f8:24:cf:c8:f7:62:f7:e0:9f:c7:5d:27:e5:60:b7:74:f2: 20:0e:23:22:c8:75:d2:1f:f0:df:19:7a:94:dc:ef:30:1d:bc: 1f:37:14:26:75:b9:05:1f:0b:28:9e:1d:37:bc:42:7e:d5:a4: 7e:a4:fb:32:c1:18:5f:a7:ef:5e:e3:30:3e:5b:55:c3:cd:88: 33:9f:11:29:7e:1c:1d:99:3a:bb:a4:bc:1a:8b:fd:a3:6b:6c: f8:65:14:08:ad:69:8e:41:81:fe:f2:e8:03:6c:0c:8f:78:32: 48:9a:67:b0:94:b6:57:de:2b:08:5b:b5:fa:98:bc:cb:ce:93: ca:16:e0:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0YPbfdUtkZQ9UEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YWMyOTM2ZjAtNzRlZi00YWM3LTgyYTktZjcwYWRiZmZiNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAlTQW9lDCXKx+nj+LaIErvr5GdooFUrq5uB q9NvWRZNanaPMyg51VH0ddNX71ehLkWfp2B3mAiK+JVt7Ic6SCcweERAAJ1Xgw/U TWVqWmZ/SqhPhrihDtEDl3xA3Exelyv0o1Ute1gCoPU8pkji2ntiA+rFri/lUcKL ya71C5/cwZNJ9ZEzyV3qM/echZoGoM/v4ilbXIpmpsXIbL4dgeAZhxWDuiyE5PCo E8qw7iz8HHE6WyWCEFFu7sot6ANjd5zquEeqeewyOzQqRGF51/gj/Bv9+4FHBZFB bcPaHBw1NnW6+Zac86Wm0CAGBEV9Ka8pw6v9zRPpIvyh5R3FqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNusA2NpfA7I1Wojxo5fTqwjQ9hEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNjNzlmMjgtZmE4YS0z MjY3LWE2ZjAtZDEwOTlkNjA0YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjLPVu9f6Uga0Ybzs8cScvcdeQ18OxbukpOKa82+c4MSADJh0qa dnA5LrXL0RTP+ygCCjXpnYqqHrl/2FYWWsGIdOCIe6XQIMwwPbSORNZa+6G9uLlR i7o/V5NMOSxWQXbBZu6qvYxGYy3M6iujTpYBvla79fwqjS21eBtWx5H4JM/I92L3 4J/HXSflYLd08iAOIyLIddIf8N8ZepTc7zAdvB83FCZ1uQUfCyieHTe8Qn7VpH6k +zLBGF+n717jMD5bVcPNiDOfESl+HB2ZOrukvBqL/aNrbPhlFAitaY5Bgf7y6ANs DI94MkiaZ7CUtlfeKwhbtfqYvMvOk8oW4I4= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:45 2026 by rpki-client