This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa File: b6644eb8-860e-36c8-9338-e619fe3b172f.roa (raw, json) Hash identifier: RNMV5a1mscX31Gn8iSndgCTc0aqkcEQu+pGgWLRLiYM= Subject key identifier: BB:BF:8A:D5:46:4F:F4:89:FE:DB:3A:F7:DD:CD:25:00:80:9E:C7:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4CA108A54AE8315DAC81CA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 71.28.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:08:a5:4a:e8:31:5d:ac:81:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=b2a31a95-0164-48a2-810c-86f2022fb6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:01:da:a7:ca:93:58:31:3e:72:5d:4b:b2: ce:1e:c2:4d:3f:ee:3d:ba:1f:50:ae:33:5c:8c:58: bb:46:6c:39:e0:ff:9e:d4:7a:c5:a9:8a:9f:3a:64: cc:82:48:f0:54:88:9c:1d:97:14:85:81:4c:ee:12: c7:a2:8e:72:60:2d:7b:8b:e2:49:54:f3:34:c7:33: 96:92:fd:82:70:e0:37:a1:02:ce:61:7f:87:8c:15: 2f:54:35:00:69:10:38:52:3e:66:9b:8f:b4:b0:6f: 84:93:58:85:fa:5b:8f:1a:ec:ec:54:08:a5:e9:f9: c2:4b:9d:2b:66:a0:8e:02:de:71:14:ed:0c:46:df: 50:31:0b:f7:b7:62:8a:c4:ba:8d:ad:81:de:19:e0: 98:d4:4c:2b:57:92:2c:e7:2a:cb:8c:ed:21:8e:fc: 85:37:47:72:c0:45:ae:97:48:43:dc:52:ad:db:f0: d9:49:ef:ce:14:71:af:24:22:c6:f4:c7:ea:1a:94: e3:e1:8d:d8:17:56:c7:b7:84:1e:6f:0a:ab:94:ff: da:80:a6:38:3d:44:9d:88:1c:de:34:40:fa:02:e4: e2:66:85:d6:a8:7d:c0:11:ac:05:03:64:25:36:c5: 67:c4:3a:ae:0f:d6:d6:06:9c:a2:c0:0b:b0:d7:c5: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BF:8A:D5:46:4F:F4:89:FE:DB:3A:F7:DD:CD:25:00:80:9E:C7:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a0:ed:4a:f0:2c:c9:29:20:63:ca:14:43:d8:35:50:14:58: 65:4c:ba:9c:2f:5a:c4:66:ed:5e:dd:c9:93:36:3a:4c:66:be: 0f:d6:6c:26:9d:40:bb:5a:37:2d:da:f1:61:a9:e5:d7:bd:08: 36:4f:4b:b9:6b:ce:da:72:3c:c1:d3:32:91:24:ea:38:5a:4d: d0:04:6e:a8:1f:4c:ae:90:46:73:5d:5d:cf:84:f3:bc:27:d7: d7:da:ff:68:90:25:26:d7:69:52:85:10:8e:87:f3:5f:4b:3c: 0a:50:de:c6:6f:8f:da:09:d3:46:98:3f:18:b4:dd:a6:cf:37: cc:f9:64:d8:ab:62:74:26:2a:b5:84:7e:0d:05:fa:86:24:01: ef:70:f4:1f:14:c1:c6:9c:17:40:3d:9a:93:8f:cb:29:87:34: 4c:f5:91:bc:c8:33:71:c4:7f:19:ed:0f:22:30:99:59:a4:73: e2:62:91:6b:8a:df:d7:5a:64:f2:28:d0:cb:75:22:fc:09:3c: a0:b4:7a:a2:fc:28:f6:9b:73:ed:3c:83:8e:b7:71:a5:84:cc: 25:56:4b:d4:67:18:42:7f:da:ec:28:41:46:fe:ce:a9:9c:89: 16:4c:34:3c:0f:15:12:f7:05:b6:8d:54:f4:cb:4c:62:a2:3c: 50:24:90:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoQilSugxXayByoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk YjJhMzFhOTUtMDE2NC00OGEyLTgxMGMtODZmMjAyMmZiNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBgB2qfKk1gxPnJdS7LOHsJNP+49uh9QrjNc jFi7Rmw54P+e1HrFqYqfOmTMgkjwVIicHZcUhYFM7hLHoo5yYC17i+JJVPM0xzOW kv2CcOA3oQLOYX+HjBUvVDUAaRA4Uj5mm4+0sG+Ek1iF+luPGuzsVAil6fnCS50r ZqCOAt5xFO0MRt9QMQv3t2KKxLqNrYHeGeCY1EwrV5Is5yrLjO0hjvyFN0dywEWu l0hD3FKt2/DZSe/OFHGvJCLG9MfqGpTj4Y3YF1bHt4QebwqrlP/agKY4PUSdiBze NED6AuTiZoXWqH3AEawFA2QlNsVnxDquD9bWBpyiwAuw18UdnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu/itVGT/SJ/ts6993NJQCAnseAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY2NDRlYjgtODYwZS0z NmM4LTkzMzgtZTYxOWZlM2IxNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmg7UrwLMkpIGPKFEPYNVAUWGVMupwvWsRm7V7dyZM2Okxmvg/WbCad QLtaNy3a8WGp5de9CDZPS7lrztpyPMHTMpEk6jhaTdAEbqgfTK6QRnNdXc+E87wn 19fa/2iQJSbXaVKFEI6H819LPApQ3sZvj9oJ00aYPxi03abPN8z5ZNirYnQmKrWE fg0F+oYkAe9w9B8UwcacF0A9mpOPyymHNEz1kbzIM3HEfxntDyIwmVmkc+JikWuK 39daZPIo0Mt1IvwJPKC0eqL8KPabc+08g463caWEzCVWS9RnGEJ/2uwoQUb+zqmc iRZMNDwPFRL3BbaNVPTLTGKiPFAkkOE= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:29 2026 by rpki-client