This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa File: c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa (raw, json) Hash identifier: haW6l2FxMf0xLaL/b4j6WbwjfCVQHbS5FxsUiE8Wt+4= Subject key identifier: 70:C5:75:DE:03:D4:A9:A0:DC:89:6A:A4:DB:FF:C7:43:6A:4C:B4:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D151ADD7AAA6C385685AE1 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 209.165.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:51:ad:d7:aa:a6:c3:85:68:5a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=98d53a2a-1d79-49cf-b821-4e5caef0d5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:17:4d:48:e9:26:71:f5:5e:ad:6a:1f:ae: 98:ac:fb:35:2e:54:cc:8d:a4:08:2c:cb:5f:89:f8: 98:af:5d:99:a9:e5:b3:fb:7d:6c:39:e2:6e:1b:b6: a2:fd:61:56:18:2a:fd:ad:c7:72:09:45:f6:1d:6f: da:73:52:c3:05:1e:5f:8c:1a:c4:e7:ad:58:13:40: 21:4e:99:eb:b5:35:b1:3e:26:6e:7c:13:c8:03:f9: 86:c5:73:08:9a:c9:55:9f:9f:eb:03:79:14:00:0f: 33:f1:9d:09:84:f4:65:fb:06:0e:4b:fe:e9:4f:71: e0:d9:49:fd:35:ca:16:7f:20:93:c3:a0:c2:1a:f0: 91:50:60:53:87:59:c1:fe:27:0b:c7:ec:ed:46:a8: cb:08:8f:59:70:bc:6f:24:2d:d7:46:9e:18:79:3e: ac:c0:bb:3e:6a:ba:73:dc:0d:bd:be:9c:c6:68:61: 59:0c:b1:03:07:3b:de:39:6e:74:0c:a3:b5:a6:a3: 65:b6:f1:6a:aa:47:23:53:fe:d1:f9:26:44:64:41: 8c:59:70:f5:9f:25:28:2f:35:b1:53:dd:9f:4e:0a: 6d:63:99:75:5c:83:fe:36:0a:74:48:13:e6:b7:c3: 7d:c3:5f:db:0f:bd:db:8b:34:65:35:bf:fa:47:89: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:75:DE:03:D4:A9:A0:DC:89:6A:A4:DB:FF:C7:43:6A:4C:B4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:54:c8:5a:13:9c:48:24:1c:17:4b:79:a4:f0:2e:c4:af:9e: 89:26:37:44:6d:85:fa:3a:7d:d7:12:a5:99:b6:bd:78:1e:90: ef:63:99:7d:d5:a2:cc:44:82:cd:7d:6b:85:cc:1c:a1:22:d3: e1:bb:34:97:91:0b:03:94:ae:58:29:36:c1:54:18:71:f0:e5: 9d:e0:cd:9f:47:be:60:b5:d3:3b:31:e0:72:93:c4:5b:2b:eb: be:fd:ad:f3:c4:77:2f:64:e1:80:11:a6:b7:9f:af:47:6f:b9: 7b:97:65:e6:3c:91:cc:49:1b:fc:2d:c4:50:57:a2:f6:fe:74: 23:7a:94:82:20:3e:0b:7e:b9:59:cc:42:c3:16:67:10:51:1a: ff:5c:cb:e9:9d:41:a9:96:32:3e:bc:29:20:9c:59:dc:ea:95: eb:d2:77:55:74:a0:8e:bf:55:2f:92:b0:a2:96:1d:c3:9b:44: af:f0:f7:f5:1f:ab:68:0a:de:1c:cf:64:55:37:ad:16:a4:cd: 22:c8:49:54:d5:9f:26:bf:e0:3c:e3:35:a1:16:28:e2:86:06: c8:1e:1d:d0:8f:87:fa:af:45:13:f3:ce:21:0b:41:1d:0f:6b: 3a:cf:50:05:0e:a5:3b:97:5b:ff:6f:bd:70:cb:dd:00:08:66: 8b:30:d3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VGt16qmw4VoWuEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OThkNTNhMmEtMWQ3OS00OWNmLWI4MjEtNGU1Y2FlZjBkNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukXTUjpJnH1Xq1qH66YrPs1LlTMjaQILMtf ifiYr12ZqeWz+31sOeJuG7ai/WFWGCr9rcdyCUX2HW/ac1LDBR5fjBrE561YE0Ah TpnrtTWxPiZufBPIA/mGxXMImslVn5/rA3kUAA8z8Z0JhPRl+wYOS/7pT3Hg2Un9 NcoWfyCTw6DCGvCRUGBTh1nB/icLx+ztRqjLCI9ZcLxvJC3XRp4YeT6swLs+arpz 3A29vpzGaGFZDLEDBzveOW50DKO1pqNltvFqqkcjU/7R+SZEZEGMWXD1nyUoLzWx U92fTgptY5l1XIP+Ngp0SBPmt8N9w1/bD73bizRlNb/6R4nzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDFdd4D1Kmg3IlqpNv/x0NqTLT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJhYzIwOTQtM2U2Ni0z YWU1LWFhMTYtZGI2ZjkxMjM5NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFUyFoTnEgkHBdLeaTwLsSvnokmN0Rthfo6fdcSpZm2vXgekO9jmX3V osxEgs19a4XMHKEi0+G7NJeRCwOUrlgpNsFUGHHw5Z3gzZ9HvmC10zsx4HKTxFsr 6779rfPEdy9k4YARprefr0dvuXuXZeY8kcxJG/wtxFBXovb+dCN6lIIgPgt+uVnM QsMWZxBRGv9cy+mdQamWMj68KSCcWdzqlevSd1V0oI6/VS+SsKKWHcObRK/w9/Uf q2gK3hzPZFU3rRakzSLISVTVnya/4DzjNaEWKOKGBsgeHdCPh/qvRRPzziELQR0P azrPUAUOpTuXW/9vvXDL3QAIZosw054= -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:00 2026 by rpki-client