This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa File: a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa (raw, json) Hash identifier: twVSGDUWbigWCIalhaCQa1l6Vv+cyHQsPEq4hsG+v5c= Subject key identifier: 8B:3F:83:FE:E3:9F:A4:2C:1E:C7:D8:DD:9D:95:64:C6:2F:E7:2B:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15D0BE21D81CACF1E6D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 53478 IP address blocks: 207.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:5d:0b:e2:1d:81:ca:cf:1e:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=2928b32e-7bae-4e02-bc5d-b2e216e03d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:62:8d:5c:67:eb:fd:53:d6:fd:f8:ee:ca: 6c:9a:70:5e:eb:62:36:33:89:03:a6:cd:44:d1:40: 1d:10:8b:22:06:cf:9d:ab:14:29:b9:58:ea:3e:df: 7d:1c:8c:d2:7e:82:ec:07:23:f9:bf:86:f4:b3:11: dc:6d:83:b1:8a:1e:58:41:23:03:3e:23:26:1d:a4: b2:45:1d:0d:a2:5d:92:e2:30:c7:1b:8b:1c:26:d9: 84:bd:f3:02:ff:aa:78:cc:ff:53:6e:21:96:61:6e: c1:02:8d:c0:e1:79:37:1d:dd:b9:76:22:23:c8:87: bb:7d:b3:65:ad:31:1a:10:22:b9:5b:f4:e1:e4:e0: 00:60:18:8a:5a:9a:42:07:b2:3c:33:28:e3:31:fa: 94:3b:31:06:29:46:14:38:2e:24:52:b6:7c:e7:a7: 96:6e:0f:5c:df:a4:78:90:4c:0e:cc:56:62:1f:f7: e3:19:fa:bc:d7:0a:9f:33:64:a5:43:f4:ed:be:db: 27:27:14:66:60:a7:a6:17:aa:71:b2:90:9e:0f:7c: 78:09:9d:26:eb:d8:f2:c4:d9:da:31:b2:5b:ad:f3: 8f:8b:0c:87:4b:8c:b7:cb:46:7d:ad:92:99:5f:0b: 7a:39:3a:02:f4:a0:85:f8:72:0d:43:16:5f:56:ef: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:83:FE:E3:9F:A4:2C:1E:C7:D8:DD:9D:95:64:C6:2F:E7:2B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:63:41:59:58:6c:a1:2a:3e:1f:a9:d1:3b:cd:1b:ca:04:5a: 18:92:ba:a6:23:70:62:32:b7:c0:5c:de:59:54:b1:c5:b7:86: ff:92:48:0e:f6:64:a5:3f:6d:4d:5d:65:e6:1b:ef:6f:f6:04: df:f8:03:7a:c2:94:a5:1d:a8:09:46:48:84:9a:ea:7e:a9:76: d8:65:ee:b0:10:dd:ed:74:01:60:6a:d4:ad:d2:4e:ac:c5:64: 88:7c:d0:81:50:7e:66:74:4a:a2:43:8f:a9:8a:af:e7:d2:b4: e7:a6:66:ce:2b:ad:c2:ee:6a:43:89:83:5c:17:a6:21:5d:0f: 65:93:68:32:ad:08:9d:18:21:ef:04:b7:bb:9e:6b:28:b9:89: 68:65:25:12:9a:57:8b:d2:72:46:c5:5e:05:bb:05:44:44:96: 73:5b:b2:a2:ef:aa:52:fc:dd:95:43:4c:7c:01:60:2c:3a:3c: d4:c9:68:1b:c4:13:c4:58:65:91:18:fc:ea:28:f7:c1:7e:e7: 7c:c1:ae:fe:a2:17:9b:ad:f5:b3:43:48:45:3e:60:d6:83:af: 47:0e:e3:95:c5:35:86:14:c3:ab:3c:e5:c0:d3:6c:fa:a3:c0: 86:79:af:b4:f1:ea:96:4c:43:d1:a1:95:d7:55:55:c0:0e:ea: b6:ee:c1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0V0L4h2Bys8ebYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MjkyOGIzMmUtN2JhZS00ZTAyLWJjNWQtYjJlMjE2ZTAzZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOxijVxn6/1T1v347spsmnBe62I2M4kDps1E 0UAdEIsiBs+dqxQpuVjqPt99HIzSfoLsByP5v4b0sxHcbYOxih5YQSMDPiMmHaSy RR0Nol2S4jDHG4scJtmEvfMC/6p4zP9TbiGWYW7BAo3A4Xk3Hd25diIjyIe7fbNl rTEaECK5W/Th5OAAYBiKWppCB7I8MyjjMfqUOzEGKUYUOC4kUrZ856eWbg9c36R4 kEwOzFZiH/fjGfq81wqfM2SlQ/TtvtsnJxRmYKemF6pxspCeD3x4CZ0m69jyxNna MbJbrfOPiwyHS4y3y0Z9rZKZXwt6OToC9KCF+HINQxZfVu/q0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/g/7jn6QsHsfY3Z2VZMYv5ytxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhY2FhYTMtN2ViNC0z ZjM4LTkwMjktMTY0YzdkNWI2MjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpjQVlYbKEqPh+p0TvNG8oEWhiSuqYjcGIyt8Bc3llUscW3hv+SSA72 ZKU/bU1dZeYb72/2BN/4A3rClKUdqAlGSISa6n6pdthl7rAQ3e10AWBq1K3STqzF ZIh80IFQfmZ0SqJDj6mKr+fStOemZs4rrcLuakOJg1wXpiFdD2WTaDKtCJ0YIe8E t7ueayi5iWhlJRKaV4vSckbFXgW7BURElnNbsqLvqlL83ZVDTHwBYCw6PNTJaBvE E8RYZZEY/Ooo98F+53zBrv6iF5ut9bNDSEU+YNaDr0cO45XFNYYUw6s85cDTbPqj wIZ5r7Tx6pZMQ9GhlddVVcAO6rbuwRk= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:08 2026 by rpki-client