This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7fd0c5e-268b-3122-b027-0a2c4f18de61.roa File: b7fd0c5e-268b-3122-b027-0a2c4f18de61.roa (raw, json) Hash identifier: 18LHvE71pE90OxYNHaTiE8gJKe4RPOHY6/rtTikF7Z4= Subject key identifier: B5:F4:05:6A:E7:41:4C:EE:AD:A2:17:D1:01:14:76:A3:D3:A9:34:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D17DFA1B8DF8BD1F928800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7fd0c5e-268b-3122-b027-0a2c4f18de61.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.190.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:7d:fa:1b:8d:f8:bd:1f:92:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=9552ea54-e591-4fc3-9e46-ef7a4307fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:35:a3:e1:2f:3b:d0:21:c4:42:6c:9f:64: 16:08:04:02:9d:49:21:a2:8d:3c:e4:4f:0a:23:e8: 0c:d6:80:37:25:30:55:52:54:d8:d3:ee:9c:88:3d: b8:93:ec:b1:22:a3:43:a7:f4:1a:b6:a5:d6:8c:35: d6:16:75:33:fa:a6:c7:2d:7c:a7:d1:a9:ae:45:3e: e4:ac:29:1f:43:0e:ba:01:f0:fe:4d:b5:e1:88:80: 1f:60:f0:fd:cf:bf:54:d1:5c:ff:c8:e0:e4:46:4a: 1a:f9:dd:56:b7:ed:30:1d:55:e7:39:3e:8e:74:8c: b7:41:c1:8a:37:98:9a:fd:76:7a:91:4a:f1:40:5a: c6:5a:83:2b:0f:b6:fd:cb:9a:b9:d5:fd:d5:a0:8f: b6:df:78:00:f8:5e:a6:b1:cf:07:85:aa:99:42:2b: 88:67:27:20:f0:71:ed:63:51:7a:c1:e0:ff:46:1c: d1:d0:60:c2:ef:2c:a1:f6:23:bc:01:a6:3c:10:0e: 5c:27:ae:e5:85:a4:a1:a2:61:75:c5:d8:a8:7c:38: 9f:99:02:c3:ef:4e:36:c6:0a:ff:bb:04:25:9c:19: 1d:32:2a:9b:95:b7:1d:59:34:0d:65:ae:68:e6:ea: 67:b1:3a:97:41:7d:3f:d0:2d:e6:64:cb:e5:17:0a: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F4:05:6A:E7:41:4C:EE:AD:A2:17:D1:01:14:76:A3:D3:A9:34:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7fd0c5e-268b-3122-b027-0a2c4f18de61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:26:49:b5:09:9d:f9:62:aa:31:88:6f:97:b6:60:5f:87:a5: c1:8c:dc:64:19:3d:2f:05:52:64:68:7e:2f:d7:fa:ba:a6:cd: 40:f6:5f:38:c9:28:15:f1:f5:9c:21:df:9c:ff:1d:c1:02:c6: 8d:86:29:ab:3f:57:48:09:bf:b1:50:b0:df:0f:9e:7f:8f:fd: 9a:85:0a:48:32:51:06:9c:9c:a5:56:8a:28:c0:53:ba:70:f4: cd:e1:9a:09:bb:61:33:ec:91:85:d5:52:05:e4:a5:e0:72:14: 10:df:a4:93:61:76:3c:bf:45:19:15:33:55:a0:c0:c8:57:25: 8b:75:b0:68:d0:66:6c:78:98:a2:06:d6:11:e7:ed:d0:ff:f2: 3c:0a:7d:12:2a:9d:1d:45:f9:6b:07:d8:9d:0c:e9:96:ff:6c: 38:9a:d6:02:4a:23:7b:a1:d7:cb:d7:5f:53:20:48:6b:a6:32: fc:66:c6:5c:1f:d0:be:1d:b6:74:a8:4f:0f:55:b5:a4:d5:10: 9d:e2:f6:78:a2:61:98:2c:5f:c5:17:2a:80:6b:17:b5:0a:1c: 99:77:25:28:f0:a9:c5:23:f9:88:de:04:76:96:1b:b5:47:a0: f0:e0:bd:f6:e3:fb:8b:18:c4:d0:4a:cf:38:68:f5:84:f8:f1: 1e:53:87:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0X36G434vR+SiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTU1MmVhNTQtZTU5MS00ZmMzLTllNDYtZWY3YTQzMDdmYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8E1o+EvO9AhxEJsn2QWCAQCnUkhoo085E8K I+gM1oA3JTBVUlTY0+6ciD24k+yxIqNDp/QatqXWjDXWFnUz+qbHLXyn0amuRT7k rCkfQw66AfD+TbXhiIAfYPD9z79U0Vz/yODkRkoa+d1Wt+0wHVXnOT6OdIy3QcGK N5ia/XZ6kUrxQFrGWoMrD7b9y5q51f3VoI+233gA+F6msc8HhaqZQiuIZycg8HHt Y1F6weD/RhzR0GDC7yyh9iO8AaY8EA5cJ67lhaShomF1xdiofDifmQLD7042xgr/ uwQlnBkdMiqblbcdWTQNZa5o5upnsTqXQX0/0C3mZMvlFwr2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX0BWrnQUzuraIX0QEUdqPTqTQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjdmZDBjNWUtMjY4Yi0z MTIyLWIwMjctMGEyYzRmMThkZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMmSbUJnfliqjGIb5e2YF+HpcGM3GQZPS8FUmRofi/X+rqmzUD2XzjJ KBXx9Zwh35z/HcECxo2GKas/V0gJv7FQsN8Pnn+P/ZqFCkgyUQacnKVWiijAU7pw 9M3hmgm7YTPskYXVUgXkpeByFBDfpJNhdjy/RRkVM1WgwMhXJYt1sGjQZmx4mKIG 1hHn7dD/8jwKfRIqnR1F+WsH2J0M6Zb/bDia1gJKI3uh18vXX1MgSGumMvxmxlwf 0L4dtnSoTw9VtaTVEJ3i9niiYZgsX8UXKoBrF7UKHJl3JSjwqcUj+YjeBHaWG7VH oPDgvfbj+4sYxNBKzzho9YT48R5Th54= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:35 2026 by rpki-client