This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa File: a5987cbb-27f3-317c-a6ba-afca614aced9.roa (raw, json) Hash identifier: pfJ0VWVMOg0ZQ9OxFUheQTzb+zhgKRoWxPg4CILYbYI= Subject key identifier: 15:23:C2:C2:CF:50:EA:D1:0C:7B:24:18:32:5F:AE:63:A0:BD:C0:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068DC150BEE4667565EE20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 75.89.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8d:c1:50:be:e4:66:75:65:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=0031ebfd-6bc4-4c3e-addc-c4649bca05b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:08:f9:ee:0e:44:2e:66:b1:47:6e:f3:c8: 69:e9:f5:4b:bb:47:58:e2:c1:20:60:0d:e0:b1:6b: d7:ca:8d:b1:d3:00:44:f9:39:fb:d8:11:3a:84:a5: b1:58:aa:cb:2b:41:e2:89:63:f6:eb:0b:33:84:5a: 57:63:44:1b:f3:9f:be:32:35:a8:dc:13:d5:e0:53: f7:11:d2:ab:e7:b2:ab:6a:9e:b0:0e:ad:51:b3:0f: 97:f6:4f:43:c0:60:ed:ef:10:b7:7c:09:3c:2a:0b: e4:bd:11:1a:54:36:9b:53:6a:ae:ca:d9:bb:77:fb: 2d:27:b9:fb:95:2f:d7:2b:66:d3:3b:e0:54:a8:f8: dd:18:f7:60:2d:54:ec:7e:6e:42:45:3a:3b:89:24: 59:73:5c:47:cc:10:e1:b8:3f:38:56:00:56:fa:ea: 44:55:73:f8:44:27:30:45:57:8a:53:8f:76:e8:7c: 56:45:0a:99:73:76:4f:03:80:fe:60:e9:93:bb:82: da:59:17:0b:0a:92:f5:61:76:98:96:87:a4:42:5e: d6:78:f4:a9:a0:6c:16:66:47:28:2b:fb:9d:de:ce: 3b:ac:0a:3e:2d:ca:d4:3c:cc:be:79:c7:46:03:49: cb:fb:58:ab:30:20:d2:e6:9e:8d:d7:fd:92:73:ee: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:23:C2:C2:CF:50:EA:D1:0C:7B:24:18:32:5F:AE:63:A0:BD:C0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:56:ff:94:8c:87:2b:eb:ed:b3:9f:a6:82:55:0e:5b:c7:ff: 6e:94:cf:e0:7f:a7:fa:f1:25:0b:64:c3:12:05:c7:8a:4d:9d: 5f:d3:ca:5a:ba:24:34:86:62:c0:49:c3:85:03:46:0e:52:0c: 38:91:32:28:35:f8:1b:3b:68:ef:4f:78:c5:9f:ee:45:63:90: e9:17:7a:58:f9:6f:c3:b6:3b:19:54:ba:fe:9a:55:a8:55:31: c9:27:bb:2b:da:8f:dd:1f:fd:d8:d1:4b:59:eb:60:de:d7:a3: 28:b6:f9:6f:dc:78:a0:6e:fb:42:8b:c5:56:60:9b:b8:64:99: c2:0a:01:3e:41:b8:3a:9d:9f:7d:f6:99:4f:a0:cd:3e:f9:b8: 66:84:a9:7f:45:7e:30:21:28:5a:85:a2:17:25:09:2a:33:9d: b4:20:8e:bb:2e:9b:71:51:1e:91:16:8b:85:1e:bd:cc:8c:92: 05:cc:b0:d0:28:e2:45:15:25:f8:2b:fe:b6:52:57:34:69:b5: 59:0c:50:3c:84:c5:44:94:2f:2c:00:da:1b:78:ab:7c:98:93: 22:d1:af:af:c7:8f:d2:64:69:72:b6:fd:36:57:ae:c8:75:71: 07:f1:15:a1:bb:ff:f4:3a:b5:32:60:c2:73:66:21:41:16:05: ca:c8:e0:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo3BUL7kZnVl7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk MDAzMWViZmQtNmJjNC00YzNlLWFkZGMtYzQ2NDliY2EwNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi80I+e4ORC5msUdu88hp6fVLu0dY4sEgYA3g sWvXyo2x0wBE+Tn72BE6hKWxWKrLK0HiiWP26wszhFpXY0Qb85++MjWo3BPV4FP3 EdKr57Krap6wDq1Rsw+X9k9DwGDt7xC3fAk8KgvkvREaVDabU2quytm7d/stJ7n7 lS/XK2bTO+BUqPjdGPdgLVTsfm5CRTo7iSRZc1xHzBDhuD84VgBW+upEVXP4RCcw RVeKU4926HxWRQqZc3ZPA4D+YOmTu4LaWRcLCpL1YXaYloekQl7WePSpoGwWZkco K/ud3s47rAo+LcrUPMy+ecdGA0nL+1irMCDS5p6N1/2Sc+673wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUjwsLPUOrRDHskGDJfrmOgvcDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5ODdjYmItMjdmMy0z MTdjLWE2YmEtYWZjYTYxNGFjZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxW/5SMhyvr7bOfpoJVDlvH/26Uz+B/p/rxJQtkwxIFx4pNnV/Tylq6 JDSGYsBJw4UDRg5SDDiRMig1+Bs7aO9PeMWf7kVjkOkXelj5b8O2OxlUuv6aVahV Mcknuyvaj90f/djRS1nrYN7Xoyi2+W/ceKBu+0KLxVZgm7hkmcIKAT5BuDqdn332 mU+gzT75uGaEqX9FfjAhKFqFohclCSoznbQgjrsum3FRHpEWi4UevcyMkgXMsNAo 4kUVJfgr/rZSVzRptVkMUDyExUSULywA2ht4q3yYkyLRr6/Hj9JkaXK2/TZXrsh1 cQfxFaG7//Q6tTJgwnNmIUEWBcrI4AM= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:14 2026 by rpki-client