This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa File: ba82d23e-e34a-3aad-972f-27e59e917e29.roa (raw, json) Hash identifier: 9KyOb5n9msVEZeuYbjovkRULCMODpQiCDO5ibSUbKxc= Subject key identifier: F6:6A:22:58:11:A4:A5:C5:0D:9C:8A:48:36:A4:A9:4C:3A:C0:11:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C751C18D75BF0AD5F4E674080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.29.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:18:d7:5b:f0:ad:5f:4e:67:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=d59bdcc9-b2e6-4c79-b030-1a93577e128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:27:50:54:1d:56:2d:99:e1:e3:0e:be:af: e6:7e:21:f2:31:71:d6:39:c2:b0:e7:0e:f0:e2:da: 3b:46:6e:4d:d0:a2:1f:ee:9c:dc:bb:2e:48:df:6b: 24:57:14:9f:ef:52:b4:30:11:97:0d:3f:b3:c2:91: 7a:96:de:96:87:3c:86:77:6b:86:b0:6d:91:80:43: 7e:f4:fd:0e:05:fb:e4:fa:2c:f7:0a:f0:82:ee:b1: a2:8d:90:88:88:9f:c2:84:2d:73:92:83:b1:99:03: ad:e9:86:68:18:8c:63:8f:f8:ae:c0:90:18:2c:4c: 97:d0:74:1d:51:61:27:15:b5:6e:37:80:11:56:5c: 2f:21:8e:0e:f9:b1:9a:cb:e2:21:3e:15:c4:10:13: da:40:b0:2e:76:0f:e2:6d:41:3b:a2:1d:8e:3c:91: d1:76:a4:3e:dd:3b:96:92:22:01:7b:05:1c:ce:fe: e4:45:05:34:6e:5b:0f:98:66:df:7a:35:7c:02:86: 6e:b2:69:a4:07:cf:90:5a:3c:ac:e0:b9:4e:a8:09: 5d:81:26:af:7f:4a:7b:c8:82:1c:a1:12:6b:d7:7e: f1:c8:2b:3f:94:a3:5d:81:94:35:ee:d0:3e:09:a6: 34:68:d8:20:a7:19:30:54:a6:de:23:59:2e:fe:ce: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6A:22:58:11:A4:A5:C5:0D:9C:8A:48:36:A4:A9:4C:3A:C0:11:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:03:df:40:15:4e:b8:e8:33:ea:9c:d9:71:15:d3:70:46:ca: a2:38:cc:83:b6:07:a2:28:7b:d0:62:b9:e2:03:cd:9b:64:95: 83:a0:22:ac:73:a8:ff:82:1b:c1:4f:8e:77:42:f3:99:76:e4: 4b:79:80:f9:ba:2f:66:c5:b7:88:d2:df:ee:d8:24:dd:4a:7d: 52:ce:8d:50:0f:4a:1e:49:5b:da:dc:0c:3e:4e:8f:18:54:9e: 02:1b:35:88:5a:54:10:eb:88:f3:61:49:1c:61:72:22:9e:06: 33:c0:62:3f:c0:25:88:c1:7d:25:fd:e0:28:98:dc:b4:00:05: ed:4c:d8:10:03:3e:c3:b1:9f:14:d2:29:ce:18:9c:53:2f:b4: 3c:dd:e2:80:1b:e5:eb:8f:a1:f2:34:cd:f4:c1:da:8a:c7:07: 52:72:73:b0:84:d7:4e:90:2a:ff:43:70:0b:da:bd:3b:71:18: ff:b3:e9:14:2c:64:70:00:79:10:ed:33:da:31:49:53:07:29: aa:fd:ad:5e:2d:44:da:ad:e7:b2:6a:fa:ee:95:47:ef:6d:71: cf:e6:09:df:c3:dd:0a:82:d8:d3:51:28:44:22:4a:ec:3e:3f: b8:cb:ea:14:57:fa:81:04:3f:38:f8:97:95:ad:e2:6a:c4:fd: 99:12:b6:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HBjXW/CtX05nQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk ZDU5YmRjYzktYjJlNi00Yzc5LWIwMzAtMWE5MzU3N2UxMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5MnUFQdVi2Z4eMOvq/mfiHyMXHWOcKw5w7w 4to7Rm5N0KIf7pzcuy5I32skVxSf71K0MBGXDT+zwpF6lt6WhzyGd2uGsG2RgEN+ 9P0OBfvk+iz3CvCC7rGijZCIiJ/ChC1zkoOxmQOt6YZoGIxjj/iuwJAYLEyX0HQd UWEnFbVuN4ARVlwvIY4O+bGay+IhPhXEEBPaQLAudg/ibUE7oh2OPJHRdqQ+3TuW kiIBewUczv7kRQU0blsPmGbfejV8AoZusmmkB8+QWjys4LlOqAldgSavf0p7yIIc oRJr137xyCs/lKNdgZQ17tA+CaY0aNggpxkwVKbeI1ku/s6BsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZqIlgRpKXFDZyKSDakqUw6wBEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE4MmQyM2UtZTM0YS0z YWFkLTk3MmYtMjdlNTllOTE3ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcD30AVTrjoM+qc2XEV03BGyqI4zIO2B6Ioe9BiueIDzZtklYOgIqxz qP+CG8FPjndC85l25Et5gPm6L2bFt4jS3+7YJN1KfVLOjVAPSh5JW9rcDD5OjxhU ngIbNYhaVBDriPNhSRxhciKeBjPAYj/AJYjBfSX94CiY3LQABe1M2BADPsOxnxTS Kc4YnFMvtDzd4oAb5euPofI0zfTB2orHB1Jyc7CE106QKv9DcAvavTtxGP+z6RQs ZHAAeRDtM9oxSVMHKar9rV4tRNqt57Jq+u6VR+9tcc/mCd/D3QqC2NNRKEQiSuw+ P7jL6hRX+oEEPzj4l5Wt4mrE/ZkStsg= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:47 2026 by rpki-client