This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: 5XFwAotFdG4yzQbeSWjHosrKDx6CjD0/2W9QfohMMrQ= Subject key identifier: 20:EE:D3:5F:C4:85:A7:5E:9D:BF:03:F8:2D:3D:DF:F6:70:D5:67:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1890C35D8A088EEA0DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:89:0c:35:d8:a0:88:ee:a0:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=269c270c-c866-41c7-87a2-847475bfd71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:ae:c6:0b:ca:8b:5c:bb:48:04:a9:02:24: 0e:53:7c:15:27:32:66:79:aa:a0:e2:da:8b:0a:78: 69:42:76:ad:39:f0:10:aa:8b:6f:3e:71:dc:91:79: f2:6f:a3:5e:fb:9f:63:ef:04:00:4a:f7:e6:61:c5: d3:e4:82:fb:eb:59:9e:1d:23:ab:2a:56:27:f2:8c: f8:a4:7a:b7:07:6c:f9:e3:16:a3:12:66:6c:eb:b6: e3:6f:b5:bd:9d:de:5c:8d:dc:07:88:f7:92:e7:be: 60:fe:2f:67:e7:48:3b:10:64:07:df:10:53:51:fd: 6a:f9:f3:0a:c2:9f:50:28:7a:b8:d9:9e:37:12:cb: 95:9a:07:4b:3a:e3:31:00:dc:4f:7b:e4:54:a3:a0: a6:2e:87:2e:1c:2c:01:41:69:94:c0:d9:e2:05:39: 27:57:8a:6e:57:e8:10:6b:40:36:f1:fb:f6:94:e6: 64:26:44:74:e6:a4:23:d6:9f:5b:a2:ca:43:a4:8e: ae:d5:0a:9b:26:db:f7:74:44:04:fc:c4:b4:f2:12: ee:e1:82:cc:ef:d8:5c:2c:9f:ff:d4:97:77:fe:1e: 94:59:fd:2d:19:f6:80:2a:6b:28:9d:ed:5c:aa:71: 98:8c:6f:e6:52:a0:0e:9f:46:4f:5c:a7:82:fa:77: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:D3:5F:C4:85:A7:5E:9D:BF:03:F8:2D:3D:DF:F6:70:D5:67:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:42:f1:7c:fa:62:44:96:cd:45:f7:ab:6b:73:16:24:a8:ad: fa:4a:6b:14:48:fb:13:1f:e1:8b:8a:b9:d8:bc:34:70:d5:c8: f2:76:d2:19:22:7b:ea:19:b3:69:cb:1d:a9:8a:7e:ec:b5:ec: 10:5d:fe:03:bb:8a:60:57:41:b2:f5:85:53:6a:47:ed:e7:f2: 9a:af:32:22:23:e9:9f:89:c3:1f:1b:eb:10:73:9f:c9:25:70: 7f:6c:c0:95:ac:27:53:47:cd:3c:fb:70:07:8f:f4:f7:51:ff: be:ff:01:ce:56:0b:fe:9b:ce:94:8f:bc:f4:fb:eb:d7:67:8e: 9b:31:14:a4:68:22:32:a7:0d:45:00:0f:75:b1:9b:a5:72:c6: d3:0e:aa:2c:d0:f9:67:d3:7a:b2:3f:75:7a:43:6b:ec:0a:a2: 8f:34:1c:ac:c9:08:5c:21:05:64:f6:84:18:3e:b5:60:b7:b3: 91:f9:0f:51:bf:c8:c6:78:d9:3b:63:02:a4:6a:7c:c9:90:b1: a8:66:3b:a5:5f:df:30:15:1a:a7:9b:8e:86:c2:f4:22:c1:00: f0:d7:0d:5c:47:08:0f:9f:fe:82:c1:72:d9:6f:2b:99:e6:68: be:ad:9f:ac:b7:25:82:b0:23:63:80:9b:b4:ab:2b:0f:20:e0: ce:0d:f4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0YkMNdigiO6g2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MjY5YzI3MGMtYzg2Ni00MWM3LTg3YTItODQ3NDc1YmZkNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7SuxgvKi1y7SASpAiQOU3wVJzJmeaqg4tqL CnhpQnatOfAQqotvPnHckXnyb6Ne+59j7wQASvfmYcXT5IL761meHSOrKlYn8oz4 pHq3B2z54xajEmZs67bjb7W9nd5cjdwHiPeS575g/i9n50g7EGQH3xBTUf1q+fMK wp9QKHq42Z43EsuVmgdLOuMxANxPe+RUo6CmLocuHCwBQWmUwNniBTknV4puV+gQ a0A28fv2lOZkJkR05qQj1p9bospDpI6u1QqbJtv3dEQE/MS08hLu4YLM79hcLJ// 1Jd3/h6UWf0tGfaAKmsone1cqnGYjG/mUqAOn0ZPXKeC+nen5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDu01/Ehadenb8D+C093/Zw1WcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRC8Xz6YkSWzUX3q2tzFiSorfpKaxRI+xMf4YuKudi8NHDVyPJ20hki e+oZs2nLHamKfuy17BBd/gO7imBXQbL1hVNqR+3n8pqvMiIj6Z+Jwx8b6xBzn8kl cH9swJWsJ1NHzTz7cAeP9PdR/77/Ac5WC/6bzpSPvPT769dnjpsxFKRoIjKnDUUA D3Wxm6VyxtMOqizQ+WfTerI/dXpDa+wKoo80HKzJCFwhBWT2hBg+tWC3s5H5D1G/ yMZ42TtjAqRqfMmQsahmO6Vf3zAVGqebjobC9CLBAPDXDVxHCA+f/oLBctlvK5nm aL6tn6y3JYKwI2OAm7SrKw8g4M4N9F4= -----END CERTIFICATE-----Generated at Sat Jan 10 21:02:12 2026 by rpki-client