This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa File: b5c5491b-02de-3284-8dbf-991476de5e11.roa (raw, json) Hash identifier: rxDdxwpcEI4pHwk9XkInY4IP4UjACKCVFA9mm5EXtWk= Subject key identifier: 0F:84:F6:39:04:01:2B:4B:BA:45:E4:A0:07:C0:6E:D1:AF:E1:05:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15A5936390C4157721E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 27338 IP address blocks: 209.192.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:5a:59:36:39:0c:41:57:72:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=705ef509-7523-4b9b-b8a1-a02ee676c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:f0:d3:41:6e:c4:18:87:06:f7:e7:4d:c8: 6c:70:97:1e:a6:6c:90:32:fd:f1:19:d0:ec:76:7c: ff:77:59:8b:cc:10:8d:55:9a:49:c4:f0:09:3d:43: af:94:5e:43:2e:60:91:3f:a0:39:52:5c:be:46:2e: 29:c9:75:d4:bb:a5:c4:c5:a2:73:ef:c0:f9:1c:01: c9:ba:eb:bc:42:d1:ae:6a:ad:cf:55:c2:b4:7e:27: 5e:bc:c4:a8:ad:3a:78:50:5e:f9:1d:f1:cf:64:2f: f3:b6:b9:ba:1b:dc:9c:36:9d:17:69:de:08:37:31: c6:27:f5:d8:0c:68:f2:91:8f:b5:55:2e:9e:d2:86: c5:49:82:61:9c:52:c7:4e:91:e4:f0:62:8b:72:b2: 88:99:64:80:b3:3e:c5:a3:e1:a8:e3:1a:3e:1b:a3: 5d:67:0d:e5:88:1d:d5:c5:cb:9d:2f:d4:ba:50:d2: 8b:4b:95:29:51:cf:26:d7:46:8a:03:1f:06:82:b7: d4:bf:69:fa:23:0d:00:cd:f9:43:91:e4:eb:25:aa: 9d:b0:01:82:13:b9:49:60:07:f7:fc:03:4c:b5:a3: 51:c7:10:be:3b:9b:cc:ec:5c:6e:cb:54:be:f8:d2: 44:d8:bf:f2:d9:98:7d:4a:38:d0:c7:75:1a:30:f9: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:F6:39:04:01:2B:4B:BA:45:E4:A0:07:C0:6E:D1:AF:E1:05:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f6:29:6e:3a:c8:14:0b:4e:db:4b:12:01:31:f3:de:cd:57: 1c:59:f5:1d:df:25:75:dc:30:f6:07:bd:73:e9:9d:57:0d:e2: a0:93:ec:42:4b:2b:0e:d5:25:77:83:26:30:cf:d8:8e:17:84: 3b:b0:12:d8:f0:d2:f7:0a:1a:60:ca:58:18:70:0e:36:0a:f3: d2:f5:9f:c5:e1:5b:fc:5c:eb:65:52:9e:14:02:b5:09:8c:15: 6f:d4:99:f4:16:ec:6b:ee:23:df:e9:26:9e:70:6b:29:b7:5d: 33:4a:a8:7e:62:7e:2f:7e:7d:de:d5:0e:fc:45:74:88:6c:b0: ad:60:5d:4d:c6:d8:69:bf:3f:49:0e:11:e6:de:8c:85:33:85: 27:c9:a5:37:0b:6f:81:20:d9:49:7e:0e:fa:a2:e2:53:73:9d: 3c:6f:68:16:83:ea:84:a6:7c:dd:6d:b9:12:70:ec:26:d4:8d: 0c:f2:b2:2d:bd:d5:a6:85:08:c0:a0:fe:57:c5:36:91:96:13: c7:ac:59:2c:2e:36:18:fe:21:28:4e:b4:ad:1a:96:cf:09:c8: df:0a:de:ca:28:b2:83:53:88:3d:f2:b4:a6:37:d7:7b:51:22: 24:4d:b1:61:96:7e:2a:92:25:20:16:ca:a7:75:56:1b:78:28: 65:53:ff:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VpZNjkMQVdyHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NzA1ZWY1MDktNzUyMy00YjliLWI4YTEtYTAyZWU2NzZjNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Dw00FuxBiHBvfnTchscJcepmyQMv3xGdDs dnz/d1mLzBCNVZpJxPAJPUOvlF5DLmCRP6A5Uly+Ri4pyXXUu6XExaJz78D5HAHJ uuu8QtGuaq3PVcK0fidevMSorTp4UF75HfHPZC/ztrm6G9ycNp0Xad4INzHGJ/XY DGjykY+1VS6e0obFSYJhnFLHTpHk8GKLcrKImWSAsz7Fo+Go4xo+G6NdZw3liB3V xcudL9S6UNKLS5UpUc8m10aKAx8GgrfUv2n6Iw0AzflDkeTrJaqdsAGCE7lJYAf3 /ANMtaNRxxC+O5vM7Fxuy1S++NJE2L/y2Zh9SjjQx3UaMPloYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+E9jkEAStLukXkoAfAbtGv4QU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVjNTQ5MWItMDJkZS0z Mjg0LThkYmYtOTkxNDc2ZGU1ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr2KW46yBQLTttLEgEx897NVxxZ9R3fJXXcMPYHvXPpnVcN4qCT7EJL Kw7VJXeDJjDP2I4XhDuwEtjw0vcKGmDKWBhwDjYK89L1n8XhW/xc62VSnhQCtQmM FW/UmfQW7GvuI9/pJp5waym3XTNKqH5ifi9+fd7VDvxFdIhssK1gXU3G2Gm/P0kO EebejIUzhSfJpTcLb4Eg2Ul+Dvqi4lNznTxvaBaD6oSmfN1tuRJw7CbUjQzysi29 1aaFCMCg/lfFNpGWE8esWSwuNhj+IShOtK0als8JyN8K3soosoNTiD3ytKY313tR IiRNsWGWfiqSJSAWyqd1Vht4KGVT//M= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:57 2026 by rpki-client