This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa File: be8324fe-af6a-321e-a44f-1e817df24027.roa (raw, json) Hash identifier: 3rLu4rqIzTVJ8pRoimlh2dXesoRsctR6cAQviW2MEPA= Subject key identifier: A2:05:6F:1A:53:E9:EA:BC:BC:7E:D3:6F:E1:CF:DD:0F:32:15:21:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D185B6670B90839B795200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:85:b6:67:0b:90:83:9b:79:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=d4b24c43-cfb4-43e7-a16c-7fb3d85aec4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:ad:54:9b:c7:bf:62:91:4a:22:d9:21:d5: 04:34:c1:3c:bd:98:bc:5c:93:d8:a9:cb:64:27:87: db:a8:f3:3f:d5:2d:29:1d:2c:cb:8b:e5:f9:e7:da: 5f:b8:f8:96:38:c4:ee:f5:ab:7b:a3:61:3a:a6:f6: bf:33:2d:7e:c7:b7:20:04:c9:53:81:d6:de:48:c6: 63:27:a3:dc:6a:85:94:38:33:98:fd:3b:cc:f6:da: 56:03:fc:29:f7:0c:38:b0:aa:f8:95:af:6d:06:75: ee:dc:3c:96:13:6c:e8:be:db:92:29:f3:04:71:e1: b9:fc:d7:b8:c7:a7:ad:9c:9c:fd:02:af:51:cc:ef: 45:0f:26:80:0d:82:6a:9a:28:64:38:22:bc:aa:d6: 0b:40:f4:c0:96:f3:b6:40:94:6e:40:e6:b8:e9:a6: d1:5b:bd:dd:bf:40:f9:ce:c2:07:3c:41:8b:96:a9: 8d:78:7e:cf:82:db:ed:ff:5e:40:17:31:ac:5b:44: 78:75:33:f4:37:46:29:67:ba:3a:f4:11:98:75:49: ed:3a:60:9b:2d:ea:06:fc:fa:78:69:40:eb:ea:93: 3f:e3:18:2b:f1:b3:5b:e5:50:5e:cd:45:30:0d:f4: 6e:21:3e:11:9a:c3:1a:cc:99:6e:ca:55:5c:41:33: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:05:6F:1A:53:E9:EA:BC:BC:7E:D3:6F:E1:CF:DD:0F:32:15:21:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:35:ed:76:d5:9b:da:0d:bd:a5:35:86:fb:b8:dc:1e:87:58: 9b:2d:c8:a0:2c:b8:7f:bb:88:12:a9:c7:71:85:c1:ba:7d:a5: fa:58:5b:2b:4d:2f:63:57:c6:1e:07:85:24:cb:3b:ed:22:84: 2d:25:7e:36:d6:fb:60:8c:c3:80:c7:34:87:72:0c:e5:05:46: bc:46:6f:ea:e1:83:31:c0:93:9b:28:0c:03:fc:8b:85:cb:bc: d0:d3:1e:37:51:1a:e6:1b:bd:3c:89:fc:9f:eb:0a:c9:66:39: 1e:72:d2:15:e8:bb:db:1a:aa:ec:6e:1e:f2:bb:fb:28:b1:49: 13:d6:5f:d5:2e:eb:21:33:fb:ba:58:ee:92:ad:39:3f:4b:41: 70:00:e0:6b:aa:f8:a6:33:60:58:04:e6:03:42:11:d8:2b:4a: 55:f3:3c:1b:a4:c8:43:b9:2b:ce:e9:b9:dd:e4:b2:ef:6e:5f: cf:b5:0a:ff:9c:ba:74:e4:f2:12:c2:51:10:1e:ad:b3:a8:8e: c9:4b:e5:8d:39:11:9d:c1:e2:38:23:58:46:23:dd:7c:de:df: d4:79:91:ff:cb:0f:0c:0e:da:f7:35:3e:1d:95:e9:bd:ba:83: f7:a2:1a:b4:7a:51:4f:de:eb:a5:78:e4:c2:89:04:49:1a:43: 43:d4:69:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YW2ZwuQg5t5UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZDRiMjRjNDMtY2ZiNC00M2U3LWExNmMtN2ZiM2Q4NWFlYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7GtVJvHv2KRSiLZIdUENME8vZi8XJPYqctk J4fbqPM/1S0pHSzLi+X559pfuPiWOMTu9at7o2E6pva/My1+x7cgBMlTgdbeSMZj J6PcaoWUODOY/TvM9tpWA/wp9ww4sKr4la9tBnXu3DyWE2zovtuSKfMEceG5/Ne4 x6etnJz9Aq9RzO9FDyaADYJqmihkOCK8qtYLQPTAlvO2QJRuQOa46abRW73dv0D5 zsIHPEGLlqmNeH7Pgtvt/15AFzGsW0R4dTP0N0YpZ7o69BGYdUntOmCbLeoG/Pp4 aUDr6pM/4xgr8bNb5VBezUUwDfRuIT4RmsMazJluylVcQTPsAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKIFbxpT6eq8vH7Tb+HP3Q8yFSGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmU4MzI0ZmUtYWY2YS0z MjFlLWE0NGYtMWU4MTdkZjI0MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARTXtdtWb2g29pTWG+7jcHodYmy3IoCy4f7uIEqnHcYXBun2l+lhb K00vY1fGHgeFJMs77SKELSV+Ntb7YIzDgMc0h3IM5QVGvEZv6uGDMcCTmygMA/yL hcu80NMeN1Ea5hu9PIn8n+sKyWY5HnLSFei72xqq7G4e8rv7KLFJE9Zf1S7rITP7 uljukq05P0tBcADga6r4pjNgWATmA0IR2CtKVfM8G6TIQ7krzum53eSy725fz7UK /5y6dOTyEsJREB6ts6iOyUvljTkRncHiOCNYRiPdfN7f1HmR/8sPDA7a9zU+HZXp vbqD96IatHpRT97rpXjkwokESRpDQ9Rp2Q== -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:08 2026 by rpki-client