This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa File: b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa (raw, json) Hash identifier: D5YPDblUQDazhxvgwzllp3b3UJYgloD4G5rJVUOsadM= Subject key identifier: 76:AD:62:71:EB:F8:B8:A4:0A:8F:1C:CB:EF:AF:2C:DB:F5:03:6C:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D153B38FBA037E3ED56620 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:53:b3:8f:ba:03:7e:3e:d5:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=7a6d8cf7-2776-4cfe-97bb-879a08008b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:24:ef:17:0b:45:5b:ea:f8:3e:9f:8c:0b: 86:b9:2e:78:b8:b9:e4:d4:0b:ee:7a:55:f0:ea:3e: 5d:28:1e:df:d2:2f:a9:4e:40:56:17:70:d7:b2:f6: 8f:cc:ca:ef:80:7e:94:d1:f2:75:be:98:15:d3:58: 78:9e:75:89:36:20:7b:aa:78:96:c9:16:a6:f8:79: ce:00:d6:36:18:62:24:f9:b0:26:49:a0:a2:f3:78: bb:67:e3:ba:c8:92:18:0c:4a:4f:a5:f3:96:35:46: a1:21:01:0c:c9:8e:75:c7:25:c9:d3:9c:5f:c8:ad: cd:55:f7:fd:b8:53:f1:71:5d:f4:5a:c5:97:e6:89: cb:23:30:45:c3:b4:11:de:11:f0:f7:a6:4d:5e:b9: d0:0d:2a:2b:25:c0:25:7d:53:43:c8:2b:16:b0:36: 4d:ed:05:a1:62:e6:1c:f8:1b:df:24:0e:24:98:ca: c0:ca:93:dc:fd:30:f9:e8:b9:43:4c:4d:13:d1:44: 9b:da:6e:ee:c3:bd:16:e1:82:d7:c2:03:13:d4:36: df:5a:43:50:c7:3c:18:9b:c2:83:68:52:be:9d:4d: db:5c:ff:27:38:4a:8c:3f:6f:b7:23:de:90:49:a0: 90:1b:47:ae:e4:d1:91:01:8c:7d:db:d6:73:40:57: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AD:62:71:EB:F8:B8:A4:0A:8F:1C:CB:EF:AF:2C:DB:F5:03:6C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e3:2d:c1:08:c6:f8:d3:30:34:ea:cf:05:d2:c1:d6:d6:96: dc:29:f5:c1:23:1b:0d:ef:51:0e:7b:eb:a8:d8:03:3b:f2:09: a4:8b:fa:06:e4:68:e6:68:50:a7:85:c3:11:62:9d:3b:b6:b7: e2:23:b8:0e:93:64:4b:56:7f:8d:90:34:2d:cd:38:c2:65:10: 94:c4:4b:7e:ee:28:a8:98:f0:95:36:b2:2e:9c:4a:e0:4d:0d: b1:2e:ac:95:b2:e8:67:07:14:39:79:d0:74:cd:2c:42:4a:04: 30:de:4f:58:d8:49:ea:8f:71:36:bd:53:54:c4:01:35:44:89: 3d:a2:21:03:4f:cf:8f:16:51:05:79:7a:e6:40:13:c6:eb:8f: 3d:2e:c1:8d:c9:72:4c:23:1a:27:3e:25:74:76:a3:88:fd:28: 58:66:f2:5b:0a:42:0d:49:d1:56:4e:4b:fc:e7:00:21:96:ab: 1c:a3:4e:f1:b7:38:e0:e0:79:74:1c:2d:06:08:e2:13:7d:fe: fc:be:da:6f:e5:b4:e5:44:9b:14:ca:05:5d:0e:5f:c4:7d:c0: 21:06:24:0a:99:0a:b9:a5:b1:45:8f:44:15:d3:14:65:ce:b1: 91:42:33:c6:c1:37:61:ab:e2:3a:f8:95:73:8c:26:67:b9:4f: 22:d8:2e:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0VOzj7oDfj7VZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk N2E2ZDhjZjctMjc3Ni00Y2ZlLTk3YmItODc5YTA4MDA4YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nok7xcLRVvq+D6fjAuGuS54uLnk1AvuelXw 6j5dKB7f0i+pTkBWF3DXsvaPzMrvgH6U0fJ1vpgV01h4nnWJNiB7qniWyRam+HnO ANY2GGIk+bAmSaCi83i7Z+O6yJIYDEpPpfOWNUahIQEMyY51xyXJ05xfyK3NVff9 uFPxcV30WsWX5onLIzBFw7QR3hHw96ZNXrnQDSorJcAlfVNDyCsWsDZN7QWhYuYc +BvfJA4kmMrAypPc/TD56LlDTE0T0USb2m7uw70W4YLXwgMT1DbfWkNQxzwYm8KD aFK+nU3bXP8nOEqMP2+3I96QSaCQG0eu5NGRAYx929ZzQFct+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHatYnHr+LikCo8cy++vLNv1A2zUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM3MTZmMzYtOWQ1MS0z YTQ4LWJjMWEtYTZiNWY3ZTI4NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHjLcEIxvjTMDTqzwXSwdbWltwp9cEjGw3vUQ5766jYAzvyCaSL +gbkaOZoUKeFwxFinTu2t+IjuA6TZEtWf42QNC3NOMJlEJTES37uKKiY8JU2si6c SuBNDbEurJWy6GcHFDl50HTNLEJKBDDeT1jYSeqPcTa9U1TEATVEiT2iIQNPz48W UQV5euZAE8brjz0uwY3JckwjGic+JXR2o4j9KFhm8lsKQg1J0VZOS/znACGWqxyj TvG3OODgeXQcLQYI4hN9/vy+2m/ltOVEmxTKBV0OX8R9wCEGJAqZCrmlsUWPRBXT FGXOsZFCM8bBN2Gr4jr4lXOMJme5TyLYLtA= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:02 2026 by rpki-client