This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa File: aa02ecbb-d6aa-3708-9e14-93c170317571.roa (raw, json) Hash identifier: faXZeWZD3apHKqXD/WSKBWUP47sGzLV+sWtDfQn3UUM= Subject key identifier: AD:B1:B8:54:C8:44:A9:22:C6:AF:33:49:4B:F5:0B:64:F1:C7:97:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068C5732C7786599988680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.28.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8c:57:32:c7:78:65:99:98:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=2434fd84-bf26-4a44-846c-f69f2b5b1c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:7e:a3:a6:73:35:4b:07:88:b1:4c:71:e3: 99:7f:a0:83:2e:89:37:e8:92:74:d1:e4:2d:fd:99: d8:61:7d:93:fd:a3:3c:ac:6f:74:64:dc:7c:7b:8c: d6:c9:8c:42:a3:3b:8f:48:df:85:84:df:22:34:7a: 70:03:55:de:e7:16:fe:af:e3:51:dd:3d:e3:0d:8d: 48:62:61:7f:38:67:41:8c:6a:00:15:0e:bc:47:f2: 9f:a9:6d:1f:13:8f:a3:ef:a0:d4:13:1c:a9:c4:8e: de:51:49:31:f7:5c:69:02:2c:b2:0f:14:a8:81:59: dc:c3:a3:ad:a8:03:81:ac:ea:50:5a:88:d3:b0:3d: de:09:50:e9:85:91:eb:d3:bd:d7:35:9e:b4:a6:8c: 6c:a5:8b:d5:e8:14:00:b7:91:ab:1b:22:82:e0:95: 03:76:9e:aa:9e:15:19:31:07:c8:65:c3:c8:7f:b0: c7:74:f0:29:4c:39:6b:69:c0:f5:76:aa:ec:2b:7a: 79:ce:9a:b8:d3:97:0e:f0:d9:d4:d3:24:26:64:2f: 2a:cb:82:de:a4:35:80:71:bd:c9:42:82:d2:40:b6: af:d3:4e:06:b7:6c:09:1a:8c:44:9e:be:6f:ad:0f: ec:aa:70:70:1c:38:a4:4a:29:69:6e:a0:10:44:d4: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:B8:54:C8:44:A9:22:C6:AF:33:49:4B:F5:0B:64:F1:C7:97:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8d:2e:09:a9:ed:4d:02:49:5b:2c:b6:86:8b:88:38:06:13: 29:a3:b3:c3:24:11:57:e2:59:2d:00:68:5c:55:8d:e8:18:af: c7:14:cc:b5:dc:2c:f4:50:21:6a:7d:0b:17:5d:d8:20:0f:e2: a9:e7:1b:c0:69:e8:6e:f0:ff:5b:e6:54:38:e4:f7:36:19:a4: ff:24:74:76:95:54:6d:f8:2b:12:f6:81:8b:e6:24:ff:55:13: 9c:4b:49:f9:2b:bb:bd:8a:ff:55:12:ce:7e:7d:49:6d:4f:28: 9d:28:58:ad:ea:fc:64:cf:f0:d3:67:5d:f2:6a:fe:c0:dc:84: 6a:d8:31:7e:56:4f:dd:04:69:65:6c:fe:db:a7:7d:90:b5:b8: f7:5d:46:5e:1a:b5:df:72:03:7e:14:a1:c1:8b:73:8e:cf:0f: 9b:b1:ff:d4:5a:f5:f6:df:91:be:7a:b6:58:f2:56:38:ca:b9: 2f:37:e9:d9:d9:f1:cb:0d:46:41:e5:e3:20:6c:97:71:25:1a: 11:5f:8d:4d:67:13:b8:8e:36:65:b5:a9:5a:31:cc:cf:3b:87: b7:d8:21:ac:d5:32:6d:bc:b1:34:25:91:82:6d:53:da:01:e8: 97:4f:2e:f3:ae:8a:6e:4f:a9:82:b8:7f:b7:63:cb:59:e0:41: 53:ae:4f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBoxXMsd4ZZmYhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk MjQzNGZkODQtYmYyNi00YTQ0LTg0NmMtZjY5ZjJiNWIxYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gB+o6ZzNUsHiLFMceOZf6CDLok36JJ00eQt /ZnYYX2T/aM8rG90ZNx8e4zWyYxCozuPSN+FhN8iNHpwA1Xe5xb+r+NR3T3jDY1I YmF/OGdBjGoAFQ68R/KfqW0fE4+j76DUExypxI7eUUkx91xpAiyyDxSogVncw6Ot qAOBrOpQWojTsD3eCVDphZHr073XNZ60poxspYvV6BQAt5GrGyKC4JUDdp6qnhUZ MQfIZcPIf7DHdPApTDlracD1dqrsK3p5zpq405cO8NnU0yQmZC8qy4LepDWAcb3J QoLSQLav004Gt2wJGoxEnr5vrQ/sqnBwHDikSilpbqAQRNTYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2xuFTIRKkixq8zSUv1C2Txx5fzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEwMmVjYmItZDZhYS0z NzA4LTllMTQtOTNjMTcwMzE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6NLgmp7U0CSVsstoaLiDgGEymjs8MkEVfiWS0AaFxVjegYr8cUzLXc LPRQIWp9Cxdd2CAP4qnnG8Bp6G7w/1vmVDjk9zYZpP8kdHaVVG34KxL2gYvmJP9V E5xLSfkru72K/1USzn59SW1PKJ0oWK3q/GTP8NNnXfJq/sDchGrYMX5WT90EaWVs /tunfZC1uPddRl4atd9yA34UocGLc47PD5ux/9Ra9fbfkb56tljyVjjKuS836dnZ 8csNRkHl4yBsl3ElGhFfjU1nE7iONmW1qVoxzM87h7fYIazVMm28sTQlkYJtU9oB 6JdPLvOuim5PqYK4f7djy1ngQVOuT4A= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:24 2026 by rpki-client