This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa File: b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa (raw, json) Hash identifier: xhIkkZO1Ec/HMJJBn/FidDIhl6bLvI742qKp1PqnL7E= Subject key identifier: 6C:D1:2D:B9:5B:AB:D1:DA:DF:B8:11:CF:7E:13:41:59:0D:C6:D0:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15442242ADBDB89F4D040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:54:42:24:2a:db:db:89:f4:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=9b0ada5b-4f5d-4f54-9d37-babe4496a2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:4c:d6:5c:65:72:90:28:c9:dc:01:a8:76: 54:41:7c:f0:94:90:f9:93:ee:c4:5b:b0:0f:c9:53: e9:31:ab:80:da:5a:e5:4b:6b:9e:3c:9d:62:84:e6: 34:9c:5d:19:02:31:9e:24:bb:ad:12:df:34:c0:cf: 7e:62:d4:87:37:42:4f:00:9d:1f:ad:31:62:4a:85: 8c:e7:59:89:db:1e:c6:38:10:a1:86:32:28:9f:45: ba:ba:cb:9f:78:3a:8f:f5:5c:00:26:bc:4d:2a:c5: 3b:f5:c3:61:64:86:00:ad:e4:fc:d7:c9:e0:64:1f: 2a:c1:27:34:52:f6:6f:e0:b8:0a:d7:e6:da:55:8d: e8:60:f5:34:be:96:36:25:76:a5:7a:95:fc:c5:98: 89:89:27:cc:73:cd:33:75:69:ca:25:0c:a2:d1:0e: da:f4:ea:1d:72:38:e0:80:54:91:c0:f9:c2:14:79: b4:3c:39:d6:00:9e:03:fd:b5:92:ba:ce:f7:f2:88: c9:38:7c:98:c6:18:d4:60:19:32:f2:91:40:24:ed: d7:e4:7b:0b:e0:ce:f5:b9:62:6a:23:0d:8e:be:72: 22:f6:d5:0a:01:90:09:1c:1c:bb:b4:3b:39:4c:d2: 96:fa:7e:08:ca:6f:46:e5:53:14:08:4b:3f:07:5b: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:2D:B9:5B:AB:D1:DA:DF:B8:11:CF:7E:13:41:59:0D:C6:D0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6b:1f:1b:2c:8c:0f:84:18:2a:6a:13:ff:ba:53:79:52:13: 51:45:98:83:e1:ac:e0:c1:77:e1:13:bd:f9:81:a2:26:82:dd: 6e:1f:89:4d:b9:16:a2:b4:08:2e:70:f4:04:f7:0e:7a:d6:66: c6:c7:eb:29:c8:ad:64:a3:3b:8c:39:53:5e:49:ac:6d:51:9e: c4:a5:7f:79:d4:5f:65:58:25:84:9e:2d:57:cf:5c:e1:ef:7c: 8e:57:b4:4b:63:eb:a9:cc:32:2b:c5:49:14:fe:57:5e:3f:d5: f9:b2:30:0e:67:c3:ac:2b:42:bc:de:ca:82:a7:cb:d3:37:05: 0d:25:56:b6:69:19:4a:92:cd:46:0e:9c:8f:97:ac:88:03:e6: 83:e8:85:07:87:96:01:67:0d:0f:d5:bb:42:62:fb:d3:99:14: 93:a1:e1:f4:34:92:af:0c:da:24:32:4d:bc:e0:bd:cd:d6:1a: 68:31:00:e3:1c:05:27:3e:31:42:35:fc:30:b4:fa:68:fe:3e: 68:b0:79:14:de:6b:73:10:db:64:fc:b6:b9:61:ff:fc:12:f2: 4e:88:23:da:4f:0f:41:b8:94:36:cc:b7:67:bd:84:e3:0a:93: dc:04:6c:52:e8:38:4e:d1:1a:b4:c9:b6:1d:0c:0a:3e:25:c6: 67:77:8f:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0VRCJCrb24n00EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OWIwYWRhNWItNGY1ZC00ZjU0LTlkMzctYmFiZTQ0OTZhMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaFM1lxlcpAoydwBqHZUQXzwlJD5k+7EW7AP yVPpMauA2lrlS2uePJ1ihOY0nF0ZAjGeJLutEt80wM9+YtSHN0JPAJ0frTFiSoWM 51mJ2x7GOBChhjIon0W6usufeDqP9VwAJrxNKsU79cNhZIYAreT818ngZB8qwSc0 UvZv4LgK1+baVY3oYPU0vpY2JXalepX8xZiJiSfMc80zdWnKJQyi0Q7a9Oodcjjg gFSRwPnCFHm0PDnWAJ4D/bWSus738ojJOHyYxhjUYBky8pFAJO3X5HsL4M71uWJq Iw2OvnIi9tUKAZAJHBy7tDs5TNKW+n4Iym9G5VMUCEs/B1vauQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzRLblbq9Ha37gRz34TQVkNxtAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRiNDdhNmItM2ZhMy0z MTY1LWI4M2UtNmYwNDFlODA2MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1rHxssjA+EGCpqE/+6U3lSE1FFmIPhrODBd+ETvfmBoiaC3W4f iU25FqK0CC5w9AT3DnrWZsbH6ynIrWSjO4w5U15JrG1RnsSlf3nUX2VYJYSeLVfP XOHvfI5XtEtj66nMMivFSRT+V14/1fmyMA5nw6wrQrzeyoKny9M3BQ0lVrZpGUqS zUYOnI+XrIgD5oPohQeHlgFnDQ/Vu0Ji+9OZFJOh4fQ0kq8M2iQyTbzgvc3WGmgx AOMcBSc+MUI1/DC0+mj+PmiweRTea3MQ22T8trlh//wS8k6II9pPD0G4lDbMt2e9 hOMKk9wEbFLoOE7RGrTJth0MCj4lxmd3j8c= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:48 2026 by rpki-client