This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa File: aa969370-7f24-3b6a-8011-acd3cfea4b49.roa (raw, json) Hash identifier: pvGKRMBN58Psoe7exBECT1u8SOSrcstuPj4OcGbRaKg= Subject key identifier: DD:96:50:18:2D:52:69:10:88:64:FF:E6:09:C2:0F:25:AB:D6:0F:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D175553B04C61ADAF34C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 40.142.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:75:55:3b:04:c6:1a:da:f3:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=79f92993-9bd3-47cd-863a-a6f5cc3efbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:28:db:3d:b5:8f:11:29:b3:32:14:47:1e: 1f:09:62:9f:2c:11:d2:32:af:8d:a2:10:78:df:4a: 6f:0b:87:98:a8:2e:21:ee:20:03:21:41:63:28:58: bf:48:a2:a2:58:81:d2:00:34:f9:94:b6:52:bb:20: 23:99:cb:84:e0:50:87:d8:24:81:d3:57:95:8f:b7: 5f:9d:5c:f6:32:9e:a3:c1:f4:62:9b:4f:00:2d:58: 29:72:7d:5f:36:16:1f:34:aa:b0:3d:21:25:01:c8: c0:73:3f:34:8b:e5:16:e4:ed:e2:e0:66:50:9f:6c: f2:73:41:a4:d7:30:de:a5:9a:35:bb:32:fe:2f:d6: 56:80:83:5f:0c:28:27:9d:a6:24:c4:e8:3e:3a:a2: c4:58:98:d4:c5:5c:53:d2:c3:20:03:ef:55:06:9a: f2:d0:50:38:aa:75:82:69:85:b5:75:b6:7d:fe:03: 21:6f:d0:9b:5d:9e:e1:4d:46:28:6b:3f:04:d7:b6: dc:21:30:e8:4e:f6:d3:7d:27:36:96:fd:d0:4c:64: c8:17:1d:01:e3:11:69:35:d3:c5:dc:5a:6c:eb:25: 2d:36:5f:18:29:c6:e8:c7:18:26:56:b7:c8:aa:67: d5:f5:cf:e3:fe:0b:6b:39:26:91:a2:ef:08:e5:b3: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:50:18:2D:52:69:10:88:64:FF:E6:09:C2:0F:25:AB:D6:0F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f3:4e:7a:ee:07:97:60:67:cc:ce:c6:ce:d4:66:a3:50:6b: 49:05:11:f6:90:df:4e:a4:db:4a:ed:24:ed:8b:7b:75:36:62: 15:cf:47:f9:88:61:6e:64:d8:51:8a:a7:4e:87:ba:02:ea:99: 13:3a:c6:7b:c7:46:26:26:b6:a1:98:b0:9b:2c:5a:14:5b:f1: c7:80:21:3b:4b:6e:43:2c:8e:08:94:b6:ad:b7:35:b5:fb:cd: c5:40:08:f1:25:18:4c:7c:c3:52:9b:fb:71:d3:26:55:7e:00: dc:cc:11:64:5e:52:f7:cc:bf:74:63:f2:32:f8:35:de:9b:69: 9a:6e:8f:72:5a:0b:4e:a9:65:95:2d:b1:50:12:a5:81:84:bf: 61:9d:7b:c7:f3:c2:92:e5:03:a1:84:8d:64:56:be:14:46:7a: 80:8a:ff:30:52:de:af:2f:c1:c3:74:c9:18:1b:4e:54:4c:33: 38:6f:63:e8:e4:1b:c9:ad:03:e5:64:74:58:97:5a:ee:60:91: d0:4d:22:75:d7:7e:1c:ce:f0:72:3b:c3:6b:62:6b:75:b3:f7: ac:4a:3f:98:4b:19:b4:47:19:25:53:4a:c6:7d:28:83:fe:75: 8b:fb:40:95:57:c3:1f:24:e1:24:25:a1:11:e6:44:a4:86:18: 3f:0a:2d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0XVVOwTGGtrzTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NzlmOTI5OTMtOWJkMy00N2NkLTg2M2EtYTZmNWNjM2VmYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWAo2z21jxEpszIURx4fCWKfLBHSMq+NohB4 30pvC4eYqC4h7iADIUFjKFi/SKKiWIHSADT5lLZSuyAjmcuE4FCH2CSB01eVj7df nVz2Mp6jwfRim08ALVgpcn1fNhYfNKqwPSElAcjAcz80i+UW5O3i4GZQn2zyc0Gk 1zDepZo1uzL+L9ZWgINfDCgnnaYkxOg+OqLEWJjUxVxT0sMgA+9VBpry0FA4qnWC aYW1dbZ9/gMhb9CbXZ7hTUYoaz8E17bcITDoTvbTfSc2lv3QTGTIFx0B4xFpNdPF 3Fps6yUtNl8YKcboxxgmVrfIqmfV9c/j/gtrOSaRou8I5bPmTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2WUBgtUmkQiGT/5gnCDyWr1g8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NjkzNzAtN2YyNC0z YjZhLTgwMTEtYWNkM2NmZWE0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPzTnruB5dgZ8zOxs7UZqNQa0kFEfaQ306k20rtJO2Le3U2YhXPR/mI YW5k2FGKp06HugLqmRM6xnvHRiYmtqGYsJssWhRb8ceAITtLbkMsjgiUtq23NbX7 zcVACPElGEx8w1Kb+3HTJlV+ANzMEWReUvfMv3Rj8jL4Nd6baZpuj3JaC06pZZUt sVASpYGEv2Gde8fzwpLlA6GEjWRWvhRGeoCK/zBS3q8vwcN0yRgbTlRMMzhvY+jk G8mtA+VkdFiXWu5gkdBNInXXfhzO8HI7w2tia3Wz96xKP5hLGbRHGSVTSsZ9KIP+ dYv7QJVXwx8k4SQloRHmRKSGGD8KLZU= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:52 2026 by rpki-client