This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa File: c26c0b20-8706-3524-a0ea-85fc730e35b1.roa (raw, json) Hash identifier: wnB4NnX6lZjqy1mH/m4nSV4Fmsipo2dfs0Q8noXF6C4= Subject key identifier: 6F:34:0A:C1:24:60:32:97:DC:B6:31:1F:93:AC:40:71:CE:F0:5F:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18D3F314F1E7706562380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 72.25.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:8d:3f:31:4f:1e:77:06:56:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=97f21714-b634-44d6-9fed-9849e78a9e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:a3:53:5f:a8:01:09:78:e2:c8:41:a3:d0: 63:95:ed:2b:5e:1a:ae:17:7e:da:62:6c:db:80:70: 9d:51:7a:93:6c:05:4c:2a:7e:9c:f6:27:f9:eb:69: 12:6c:bb:63:31:31:55:a1:2e:6e:77:c0:d3:9f:8b: 08:3b:e7:29:c6:9b:bb:c1:73:78:de:4e:95:16:b6: d3:9b:84:94:1b:b3:3f:d6:bc:55:97:12:04:0c:81: 63:8e:4e:6b:1e:3e:24:2c:5b:c4:37:5c:90:5a:dd: a8:74:0a:6c:7d:66:96:31:56:66:49:58:99:57:50: 3e:03:47:98:fe:ba:3d:2c:d6:3d:07:10:be:f2:20: ce:05:e0:85:60:9f:e0:9d:07:1d:07:9c:ed:70:90: b5:7a:ea:e7:7b:70:f8:11:cd:c5:c0:7c:04:8a:bf: 69:9c:f5:ba:7e:76:7f:e3:cc:b7:5a:13:6e:f2:2c: 34:a2:6c:6c:86:03:f3:52:33:7f:eb:61:52:3a:c1: 00:93:ea:32:9a:bd:41:a4:18:cd:e9:6e:9a:a0:0b: 1f:75:48:39:e5:a2:42:4c:d6:67:0c:db:da:df:ce: 61:47:43:21:69:4e:ba:27:ae:43:7d:80:9b:54:58: 2d:c6:da:93:85:91:86:38:8a:58:58:d0:02:db:d7: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:0A:C1:24:60:32:97:DC:B6:31:1F:93:AC:40:71:CE:F0:5F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:31:6e:59:af:f6:10:9f:c8:47:04:17:5a:98:23:2b:a6:b0: 16:06:2e:a9:cf:60:14:cb:03:75:01:66:de:cf:5c:ca:93:6c: 3f:fe:76:c4:c8:d2:87:4e:92:3b:39:9a:5e:1a:fc:71:a8:5f: 4d:96:60:26:5f:58:61:65:31:4d:b3:44:d1:7d:bd:d9:9f:ca: 73:32:36:60:54:9e:b8:de:27:e4:a5:06:2d:86:8b:69:7e:e6: 26:e6:8c:27:9d:b7:0f:3d:4e:31:8d:0a:e5:7a:12:2f:c6:d6: a1:98:70:0d:a2:3b:90:ef:59:03:87:89:9b:48:e4:72:f0:b6: f2:f4:38:9b:ec:d1:c3:b0:68:fb:f3:db:44:4d:21:e5:c6:37: 1f:5f:bc:37:5f:23:7c:04:8d:5a:f2:73:09:9a:df:92:17:a0: c3:20:73:0e:f7:90:ea:0d:07:80:ad:d4:8c:c3:85:d4:41:90: 4c:2c:c6:71:f9:64:6a:08:ca:d1:19:31:34:cc:20:f9:d7:45: c4:db:0d:ea:3c:e1:11:a9:22:fa:92:f5:f6:b6:20:f4:6e:b6: 25:0f:e2:e7:a6:e7:80:41:a8:d9:a5:c7:9f:90:82:31:25:57: 68:6c:2e:a8:58:6f:db:ca:a2:10:55:7b:2f:45:37:af:ef:68: 4f:8e:5d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Y0/MU8edwZWI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTdmMjE3MTQtYjYzNC00NGQ2LTlmZWQtOTg0OWU3OGE5ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbujU1+oAQl44shBo9Bjle0rXhquF37aYmzb gHCdUXqTbAVMKn6c9if562kSbLtjMTFVoS5ud8DTn4sIO+cpxpu7wXN43k6VFrbT m4SUG7M/1rxVlxIEDIFjjk5rHj4kLFvEN1yQWt2odApsfWaWMVZmSViZV1A+A0eY /ro9LNY9BxC+8iDOBeCFYJ/gnQcdB5ztcJC1eurne3D4Ec3FwHwEir9pnPW6fnZ/ 48y3WhNu8iw0omxshgPzUjN/62FSOsEAk+oymr1BpBjN6W6aoAsfdUg55aJCTNZn DNva385hR0MhaU66J65DfYCbVFgtxtqThZGGOIpYWNAC29eAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG80CsEkYDKX3LYxH5OsQHHO8F8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI2YzBiMjAtODcwNi0z NTI0LWEwZWEtODVmYzczMGUzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUxblmv9hCfyEcEF1qYIyumsBYGLqnPYBTLA3UBZt7PXMqTbD/+dsTI 0odOkjs5ml4a/HGoX02WYCZfWGFlMU2zRNF9vdmfynMyNmBUnrjeJ+SlBi2Gi2l+ 5ibmjCedtw89TjGNCuV6Ei/G1qGYcA2iO5DvWQOHiZtI5HLwtvL0OJvs0cOwaPvz 20RNIeXGNx9fvDdfI3wEjVrycwma35IXoMMgcw73kOoNB4Ct1IzDhdRBkEwsxnH5 ZGoIytEZMTTMIPnXRcTbDeo84RGpIvqS9fa2IPRutiUP4uem54BBqNmlx5+QgjEl V2hsLqhYb9vKohBVey9FN6/vaE+OXSY= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:50 2026 by rpki-client