This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa File: a4090cc7-d59b-33be-9408-78258d3ef95f.roa (raw, json) Hash identifier: JMgVpdXxpvUuO09TMZLtCA8l73enF2zvFTMq5/EGZOg= Subject key identifier: 39:6D:71:D1:C2:C2:2C:B5:4E:A2:AB:E1:CD:72:77:B7:A3:3F:67:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1546818142F914223E980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:54:68:18:14:2f:91:42:23:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=090e0a0a-5b8a-410d-99d5-6ba8b735e014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:6e:a1:f3:65:be:a2:4a:c5:c0:7e:7c:60: aa:e3:99:e8:49:cd:84:bb:9d:31:83:89:e1:96:dc: 92:68:24:d5:d9:ab:ca:82:f1:2c:d3:93:8f:c9:9a: 39:b4:00:24:22:cc:c4:35:2c:2c:02:ba:28:45:6f: ef:a5:60:bc:32:91:26:c3:cd:d3:c8:cf:d5:cd:d7: e5:32:1f:a4:34:db:ad:10:5d:1c:5d:e1:c8:5d:d1: d1:ea:7c:ef:02:cb:1e:a5:b2:ea:72:e1:6c:59:ca: 09:90:53:33:ed:c1:85:25:4c:69:9d:04:2e:20:a3: 8f:8d:c7:69:44:7b:12:8c:8d:79:39:0e:fb:2d:61: 0a:f1:32:1a:fc:d7:ca:cb:b6:02:d3:ac:48:6b:51: 4c:56:c9:a9:82:6f:78:f7:4a:46:f7:29:d8:c0:e9: 7e:17:65:40:da:8d:60:eb:44:44:7e:47:ec:61:6b: 7a:c6:1b:6b:a5:3b:e2:71:b9:0a:c9:0b:78:84:53: c5:6c:cb:53:00:01:85:cb:e5:85:31:5c:11:93:4e: 3c:bc:ac:f6:a4:89:9a:e7:07:31:c2:aa:5a:9d:ed: 82:1e:3a:a3:29:22:ac:59:7b:62:ad:7a:5f:ac:28: 2c:be:c4:8f:9c:d1:20:bb:a6:02:6b:27:f7:ff:c8: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:71:D1:C2:C2:2C:B5:4E:A2:AB:E1:CD:72:77:B7:A3:3F:67:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:37:9f:e4:d0:a0:7b:f3:2f:f3:31:aa:d6:e5:04:6f:c9:c6: a5:7c:61:4b:50:cf:a6:52:53:73:d7:47:79:bb:7f:67:00:48: c5:7d:ba:c7:44:83:3d:0f:9c:7a:f2:a1:39:a8:51:ea:35:26: bd:ce:c7:e2:80:92:dc:12:7a:62:c2:07:6a:65:8b:e7:5a:74: 3d:84:ad:6f:de:25:02:0b:bf:2e:37:53:81:cf:24:e4:26:74: 8c:f0:1e:d4:a9:93:48:f5:a1:37:8e:62:e4:e0:4a:41:70:e0: d4:ad:f0:13:84:c2:4a:18:6b:ab:7b:b4:dd:db:ff:61:62:c4: f1:10:7b:29:11:8d:89:0c:39:59:82:0c:16:d3:2e:33:d3:0c: 91:95:20:b4:62:92:c9:49:18:ce:49:4b:d6:68:81:81:1c:a8: 24:af:3e:b8:bc:66:b0:9b:76:21:dc:05:45:1c:0d:93:03:36: 68:0f:c1:8a:1c:9b:44:7f:8c:39:57:37:ad:f2:9d:7c:41:52: 9e:71:a4:ee:60:63:80:3a:b6:e6:95:99:b9:dc:a6:fd:46:6a: 2f:83:99:54:ee:11:ad:21:72:2f:80:1b:eb:ac:12:2d:4c:d1: d2:d3:10:b5:e1:d4:0e:4b:03:ec:c5:a0:d4:93:61:bd:ea:c3: de:2d:a9:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0VRoGBQvkUIj6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDkwZTBhMGEtNWI4YS00MTBkLTk5ZDUtNmJhOGI3MzVlMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhuofNlvqJKxcB+fGCq45noSc2Eu50xg4nh ltySaCTV2avKgvEs05OPyZo5tAAkIszENSwsArooRW/vpWC8MpEmw83TyM/Vzdfl Mh+kNNutEF0cXeHIXdHR6nzvAssepbLqcuFsWcoJkFMz7cGFJUxpnQQuIKOPjcdp RHsSjI15OQ77LWEK8TIa/NfKy7YC06xIa1FMVsmpgm9490pG9ynYwOl+F2VA2o1g 60REfkfsYWt6xhtrpTvicbkKyQt4hFPFbMtTAAGFy+WFMVwRk048vKz2pIma5wcx wqpane2CHjqjKSKsWXtirXpfrCgsvsSPnNEgu6YCayf3/8hcwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDltcdHCwiy1TqKr4c1yd7ejP2ejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwOTBjYzctZDU5Yi0z M2JlLTk0MDgtNzgyNThkM2VmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACs3n+TQoHvzL/MxqtblBG/JxqV8YUtQz6ZSU3PXR3m7f2cASMV9 usdEgz0PnHryoTmoUeo1Jr3Ox+KAktwSemLCB2pli+dadD2ErW/eJQILvy43U4HP JOQmdIzwHtSpk0j1oTeOYuTgSkFw4NSt8BOEwkoYa6t7tN3b/2FixPEQeykRjYkM OVmCDBbTLjPTDJGVILRikslJGM5JS9ZogYEcqCSvPri8ZrCbdiHcBUUcDZMDNmgP wYocm0R/jDlXN63ynXxBUp5xpO5gY4A6tuaVmbncpv1Gai+DmVTuEa0hci+AG+us Ei1M0dLTELXh1A5LA+zFoNSTYb3qw94tqeo= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:21 2026 by rpki-client