This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa File: bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa (raw, json) Hash identifier: I7vZCy9EKmcFvxaLUw+8oqoBMYQyqlAn/PNxbPkzeEU= Subject key identifier: 8E:6D:75:52:12:83:47:4A:88:BD:CD:F2:B0:04:A5:FE:1E:8A:1E:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C72520C8EE5E471EB3250BF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 67.140.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:52:0c:8e:e5:e4:71:eb:32:50:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=fd6f6be6-80db-4a4b-99de-f36a6f3cef5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:1d:b2:7f:0e:f3:3b:31:f6:51:f6:29:04: 0d:86:ed:dc:1a:e1:98:45:c6:4e:f1:78:d6:a8:04: a3:2f:96:0e:63:82:8d:cd:1f:43:47:44:5a:09:f0: 51:3e:fc:12:16:1d:bb:9d:37:39:c6:52:0d:6b:71: f5:1b:e4:a7:f6:e5:00:07:d7:78:6d:97:92:45:28: 04:5f:69:ad:77:7f:8e:c3:17:b2:4c:40:b9:1d:8a: 26:be:66:79:04:15:6c:88:c9:87:b3:8a:be:53:20: 41:06:20:13:ae:d4:2c:d6:f5:fa:0d:21:49:c9:1f: b3:09:e0:0b:2f:66:9e:3b:ac:b3:98:33:9a:26:73: 9c:6e:da:61:df:03:6c:49:a9:23:62:60:95:0b:52: 54:95:07:41:f9:a5:a7:52:83:89:60:8d:ce:ff:b0: 1f:fc:5a:53:24:94:6c:95:23:d7:68:99:02:67:31: 27:4d:16:90:24:6f:05:b9:d7:3f:d5:bd:21:7c:16: 4f:cf:aa:4a:c0:b8:a6:ad:cd:20:ca:1e:46:5c:2c: 9c:8c:64:55:cb:e3:fb:d0:4a:7c:75:ff:52:93:9b: 60:b9:1e:0c:72:80:22:34:39:82:49:89:ed:41:20: 95:24:22:15:ab:79:8b:71:15:ba:a3:83:41:34:c8: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6D:75:52:12:83:47:4A:88:BD:CD:F2:B0:04:A5:FE:1E:8A:1E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c7:a9:4a:77:38:90:2b:ae:8f:f1:3c:d5:36:58:d7:6a:65: 6a:14:8f:8b:17:dd:36:52:09:84:65:9c:d3:b0:ef:15:72:07: f1:c3:db:80:a3:7c:e3:6e:e1:ef:32:28:b5:2d:28:e2:d2:b9: d9:3a:61:32:3c:5b:d5:91:6a:88:eb:74:91:05:66:46:bb:f0: 31:54:0f:08:06:bc:14:af:c9:b7:4a:c0:f4:eb:29:f7:3d:57: e2:e7:59:a9:59:2f:bc:c3:84:8e:be:d1:95:44:65:82:50:7a: e9:20:bb:a1:0f:08:1f:48:95:04:07:9f:32:71:af:33:eb:d6: 7c:2e:67:66:25:99:0c:62:a2:3a:34:e8:3b:d1:ad:c8:02:b0: 9c:22:17:f6:e8:a1:69:14:06:34:6e:4c:16:f1:86:79:84:90: 75:d7:98:5c:3c:8c:fc:fc:46:00:ac:30:8e:c4:3f:3f:59:6a: 8d:f6:e8:e6:a2:c2:5b:b2:05:76:88:50:33:19:72:08:6b:5c: 24:d9:ec:5a:a2:44:65:a0:ad:1c:98:7a:65:c2:97:9e:52:aa: 1d:42:38:2c:e5:be:f1:3a:d2:87:59:bc:4e:c3:3b:0f:a0:34: ad:ce:65:75:88:e2:52:eb:bf:db:19:0e:b9:3c:2b:eb:82:0d: f2:d1:4c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExyUgyO5eRx6zJQv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk ZmQ2ZjZiZTYtODBkYi00YTRiLTk5ZGUtZjM2YTZmM2NlZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVEdsn8O8zsx9lH2KQQNhu3cGuGYRcZO8XjW qASjL5YOY4KNzR9DR0RaCfBRPvwSFh27nTc5xlINa3H1G+Sn9uUAB9d4bZeSRSgE X2mtd3+OwxeyTEC5HYomvmZ5BBVsiMmHs4q+UyBBBiATrtQs1vX6DSFJyR+zCeAL L2aeO6yzmDOaJnOcbtph3wNsSakjYmCVC1JUlQdB+aWnUoOJYI3O/7Af/FpTJJRs lSPXaJkCZzEnTRaQJG8Fudc/1b0hfBZPz6pKwLimrc0gyh5GXCycjGRVy+P70Ep8 df9Sk5tguR4McoAiNDmCSYntQSCVJCIVq3mLcRW6o4NBNMgOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5tdVISg0dKiL3N8rAEpf4eih5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ4NzM5YWQtYjRmOC0z OGIyLTk4NzEtN2RhMGEzMWFhYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfHqUp3OJArro/xPNU2WNdqZWoUj4sX3TZSCYRlnNOw7xVyB/HD24Cj fONu4e8yKLUtKOLSudk6YTI8W9WRaojrdJEFZka78DFUDwgGvBSvybdKwPTrKfc9 V+LnWalZL7zDhI6+0ZVEZYJQeukgu6EPCB9IlQQHnzJxrzPr1nwuZ2YlmQxiojo0 6DvRrcgCsJwiF/booWkUBjRuTBbxhnmEkHXXmFw8jPz8RgCsMI7EPz9Zao326Oai wluyBXaIUDMZcghrXCTZ7FqiRGWgrRyYemXCl55Sqh1COCzlvvE60odZvE7DOw+g NK3OZXWI4lLrv9sZDrk8K+uCDfLRTFs= -----END CERTIFICATE-----Generated at Sat Jan 10 20:55:05 2026 by rpki-client