This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json) Hash identifier: 2AnGwo1cH4EsjN6zRch9aLFTJew6QudwqipU6vuuz54= Subject key identifier: 9C:D4:7A:3F:A7:30:65:A0:F9:1B:D9:D0:78:AC:77:34:4B:40:0F:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068EC844854236BAFEA180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8e:c8:44:85:42:36:ba:fe:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=d16d54a2-1d72-4406-abfc-ee6caafdfd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:17:fb:ea:3d:60:76:ae:c9:97:63:cf:50: 1d:d7:e8:2e:6d:74:8e:d8:90:4e:f9:23:62:2a:e5: 8f:16:98:31:52:cf:25:60:b1:d1:d2:bc:d4:5b:8a: 09:f4:73:7a:3a:ac:b4:fe:c0:9c:5d:96:56:98:fd: 09:fb:97:27:0e:86:76:26:90:fe:2e:47:9b:cb:12: 20:0c:26:58:6f:ce:09:ae:af:a2:43:e3:aa:a2:5c: 9d:bc:08:51:67:7b:bc:4b:c0:88:b0:30:81:39:83: 7a:38:f4:0d:c2:8d:25:10:4c:2b:0c:9d:17:c4:23: 5f:c8:8a:db:85:94:9d:6c:9d:e1:4c:8d:da:90:9e: cf:a5:1c:93:03:1a:05:d9:61:e8:86:2f:a7:8c:9e: 3a:ea:54:ad:25:a1:05:29:ff:7d:c7:bd:f5:e7:53: 34:a9:d7:d5:4d:28:c6:99:c7:de:53:5c:6f:c5:da: 63:a9:af:ec:bb:64:14:8d:a5:fb:65:76:61:d2:5b: 00:0f:0f:6d:11:e3:6b:82:29:e0:ce:be:7d:ca:59: e2:d8:94:0e:c2:83:66:d1:58:49:28:36:84:6d:05: 3e:bc:44:54:97:d1:1b:5a:46:bb:89:ff:08:c2:99: f4:9c:0b:42:2d:a8:cc:be:12:a2:73:71:99:28:1b: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D4:7A:3F:A7:30:65:A0:F9:1B:D9:D0:78:AC:77:34:4B:40:0F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:60:00:62:aa:db:74:1c:05:08:1b:4f:eb:86:50:36:80:48: d2:67:24:f5:2e:57:f3:5f:d1:7c:40:1b:6b:68:41:ca:dc:43: 29:bd:1f:d5:0f:c4:1e:8b:7f:c7:5a:da:68:75:bc:6b:8d:36: a4:56:05:d5:ec:6e:67:1e:91:d1:90:83:93:9f:8a:6d:0f:6b: 3c:82:75:cb:eb:35:48:e9:95:4a:e6:08:7c:f4:84:85:35:17: 1a:cb:e6:32:9f:42:24:4f:40:e0:fd:f8:cb:1c:bc:27:7b:fa: d2:59:f3:de:47:3d:cc:c9:d3:79:36:0c:f0:f6:be:24:aa:cc: d9:83:26:a9:f1:78:63:97:68:31:3c:c9:aa:af:9f:08:12:ed: 48:4a:4d:b7:6b:7f:22:71:1b:96:1c:b7:16:ea:37:7f:09:75: c3:bd:e9:85:b6:d9:a3:39:e5:a7:cd:41:02:8f:19:c4:25:99: f3:5c:28:9e:56:8c:f4:c2:a5:a0:0b:8a:3f:09:1e:7f:52:d9: fe:a8:57:4e:fb:90:88:52:d6:82:35:58:e6:60:54:10:a2:cb: 73:5f:b0:0e:0f:ed:6b:75:18:13:fc:7e:f8:4e:83:b7:58:63: 16:4a:a0:e7:47:0e:21:87:25:ec:e2:7e:23:58:8c:d7:07:2f: 3b:7d:b0:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo7IRIVCNrr+oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZDE2ZDU0YTItMWQ3Mi00NDA2LWFiZmMtZWU2Y2FhZmRmZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+kX++o9YHauyZdjz1Ad1+gubXSO2JBO+SNi KuWPFpgxUs8lYLHR0rzUW4oJ9HN6Oqy0/sCcXZZWmP0J+5cnDoZ2JpD+LkebyxIg DCZYb84Jrq+iQ+OqolydvAhRZ3u8S8CIsDCBOYN6OPQNwo0lEEwrDJ0XxCNfyIrb hZSdbJ3hTI3akJ7PpRyTAxoF2WHohi+njJ466lStJaEFKf99x73151M0qdfVTSjG mcfeU1xvxdpjqa/su2QUjaX7ZXZh0lsADw9tEeNrgingzr59ylni2JQOwoNm0VhJ KDaEbQU+vERUl9EbWka7if8Iwpn0nAtCLajMvhKic3GZKBs8TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzUej+nMGWg+RvZ0HisdzRLQA9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUzNTYzNjctNjI1Zi0z NWYxLWEzNzgtODZjYmI4OWMyMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5gAGKq23QcBQgbT+uGUDaASNJnJPUuV/Nf0XxAG2toQcrcQym9H9UP xB6Lf8da2mh1vGuNNqRWBdXsbmcekdGQg5Ofim0PazyCdcvrNUjplUrmCHz0hIU1 FxrL5jKfQiRPQOD9+MscvCd7+tJZ895HPczJ03k2DPD2viSqzNmDJqnxeGOXaDE8 yaqvnwgS7UhKTbdrfyJxG5YctxbqN38JdcO96YW22aM55afNQQKPGcQlmfNcKJ5W jPTCpaALij8JHn9S2f6oV077kIhS1oI1WOZgVBCiy3NfsA4P7Wt1GBP8fvhOg7dY YxZKoOdHDiGHJezifiNYjNcHLzt9sDg= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:03 2026 by rpki-client