This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa File: afd73cfa-d554-3b30-bffa-b30f657362a8.roa (raw, json) Hash identifier: a8BuzLBRCotnW7lW+zsFJVj+CdlmjzA4W9d5FGmmzR0= Subject key identifier: 43:3C:60:7B:F5:A1:FE:B3:BB:80:03:A2:D1:6D:0B:73:94:B1:22:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14FBC3F497FB67862C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.191.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4f:bc:3f:49:7f:b6:78:62:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=16b51754-4d9d-4e4b-bfeb-53a8829941d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:25:17:d5:ca:00:fa:7d:e1:59:06:a2:bd: 19:71:c8:2f:a2:82:ce:4b:48:9a:00:37:bd:cd:c2: 6b:85:1b:8f:7d:f1:7f:01:15:c3:25:c7:89:23:22: d2:a0:ff:31:06:61:0f:63:bc:af:1b:53:8a:82:0c: 74:11:78:d4:09:2f:e5:e9:2e:df:22:20:69:8c:06: 4d:fe:67:f8:5f:f6:96:cf:2a:ee:46:b5:92:c5:ed: b0:9c:b6:a3:bc:5e:94:cb:57:db:dc:a2:d1:08:2d: 0a:48:30:59:65:dc:8c:fb:82:05:ab:7c:9c:05:bb: 93:41:80:bc:cb:de:a7:ea:d0:b4:3a:aa:a8:21:0f: 4f:45:26:64:02:38:cb:c6:bf:8e:e8:24:5b:76:4c: b0:19:c2:19:67:98:2c:6f:75:57:c7:b7:22:25:43: 97:41:af:b1:69:32:8a:4a:a9:61:c8:22:34:17:91: 3e:ec:3c:da:2c:25:67:6b:22:50:cf:44:ee:64:95: 11:35:18:3d:84:58:f0:b5:18:27:b4:3d:70:0c:f1: 5a:97:ea:f5:61:ff:23:25:8e:73:38:b8:a6:ee:b4: 1c:53:4c:41:21:e3:d3:53:d2:5b:56:50:6a:ee:11: 4c:0a:83:63:2c:2c:e8:ad:1a:d1:26:50:9f:25:b6: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3C:60:7B:F5:A1:FE:B3:BB:80:03:A2:D1:6D:0B:73:94:B1:22:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0b:71:64:66:fc:3a:66:a6:73:fd:88:73:aa:72:d9:56:9a: b9:3d:44:49:ea:bd:49:03:91:93:b2:38:c7:1d:78:c9:c4:e7: e9:2a:41:48:23:a4:e8:58:c6:ea:cf:8b:2c:ee:ec:56:9d:41: 94:45:d7:1d:89:fe:5a:be:47:fd:7d:51:ae:e6:57:65:51:a9: 57:ed:39:03:b1:a2:13:a2:de:83:9a:c6:5d:d2:1b:af:43:96: 9c:ec:ae:40:09:d8:3a:c0:a9:60:9d:b1:e6:2d:b1:64:d1:7f: 8e:b5:36:7c:67:f5:db:c5:10:8c:17:40:b4:73:58:6a:ad:1f: 1b:6c:18:f7:10:e2:98:40:ef:d6:3a:c4:f7:9b:d6:b8:a5:80: e5:8e:f2:0c:2d:85:50:02:ff:88:3f:27:0d:4d:18:59:e4:e8: 9a:95:63:bc:99:45:30:bd:a0:35:06:ce:01:00:c8:cc:ab:de: 4c:0b:71:3e:30:fc:ff:33:b4:ee:63:94:76:37:f5:0a:5f:22: 7d:6a:60:e0:8d:d4:86:fa:08:68:5b:d0:4d:a8:24:c5:13:2f: 55:d3:70:3a:96:67:9e:67:85:96:44:fa:4e:e9:ce:ff:10:71: 2e:b0:8d:47:77:3f:08:dd:02:eb:cf:f9:7f:55:8f:7f:74:c4: 83:14:79:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0U+8P0l/tnhiyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MTZiNTE3NTQtNGQ5ZC00ZTRiLWJmZWItNTNhODgyOTk0MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL8lF9XKAPp94VkGor0ZccgvooLOS0iaADe9 zcJrhRuPffF/ARXDJceJIyLSoP8xBmEPY7yvG1OKggx0EXjUCS/l6S7fIiBpjAZN /mf4X/aWzyruRrWSxe2wnLajvF6Uy1fb3KLRCC0KSDBZZdyM+4IFq3ycBbuTQYC8 y96n6tC0OqqoIQ9PRSZkAjjLxr+O6CRbdkywGcIZZ5gsb3VXx7ciJUOXQa+xaTKK SqlhyCI0F5E+7DzaLCVnayJQz0TuZJURNRg9hFjwtRgntD1wDPFal+r1Yf8jJY5z OLim7rQcU0xBIePTU9JbVlBq7hFMCoNjLCzorRrRJlCfJbY77wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM8YHv1of6zu4ADotFtC3OUsSLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZkNzNjZmEtZDU1NC0z YjMwLWJmZmEtYjMwZjY1NzM2MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQLcWRm/DpmpnP9iHOqctlWmrk9REnqvUkDkZOyOMcdeMnE5+kqQUgj pOhYxurPiyzu7FadQZRF1x2J/lq+R/19Ua7mV2VRqVftOQOxohOi3oOaxl3SG69D lpzsrkAJ2DrAqWCdseYtsWTRf461Nnxn9dvFEIwXQLRzWGqtHxtsGPcQ4phA79Y6 xPeb1rilgOWO8gwthVAC/4g/Jw1NGFnk6JqVY7yZRTC9oDUGzgEAyMyr3kwLcT4w /P8ztO5jlHY39QpfIn1qYOCN1Ib6CGhb0E2oJMUTL1XTcDqWZ55nhZZE+k7pzv8Q cS6wjUd3PwjdAuvP+X9Vj390xIMUeeQ= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:13 2026 by rpki-client