This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa File: c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa (raw, json) Hash identifier: jBSSidM/c3miFJmZ5pMhH/UVSZtNrkL8N99wfrBz/lU= Subject key identifier: D3:5D:DB:EF:E6:46:97:B5:F6:6B:14:50:44:CC:C4:8B:54:BC:83:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1576C08B9C70A0C4AE3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2607:f560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:57:6c:08:b9:c7:0a:0c:4a:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=90e8d297-216c-4611-bd99-88236151e7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:20:3b:c9:5c:d2:ec:ee:4e:fc:58:13:c8: 71:82:22:e9:26:7a:28:6f:d3:a5:8c:ee:8f:d7:3f: d4:46:4d:2d:e5:31:ef:75:63:1c:cf:66:6b:db:df: 47:31:4a:c6:fb:62:c6:c0:d8:cd:7e:4f:f0:ed:79: 65:a3:c1:87:06:8a:d5:6c:88:33:63:2c:eb:c6:4a: 2b:bf:cc:ef:2c:32:33:96:33:64:93:05:63:c5:62: 8c:54:42:80:6a:94:57:89:ab:59:4c:2d:b2:33:84: 34:77:9a:e4:44:af:c8:4a:39:da:46:20:9c:b8:e1: 7a:08:b6:63:cc:4a:b2:b3:74:4a:f9:85:13:68:93: ef:26:d9:8c:33:ea:4d:9b:86:13:f5:c2:84:99:0a: 72:2c:50:fc:ae:4a:75:1d:c9:c8:d3:88:00:26:d8: 2d:79:d1:0f:2f:d2:66:1e:ac:32:85:fd:5c:c7:59: 6a:0a:f2:f4:91:6d:4b:26:24:4e:6d:ca:10:04:82: 59:35:0c:e8:cd:35:a1:e5:5c:22:47:b7:ca:6b:28: e2:57:0a:0f:65:ef:8e:6a:e6:82:af:39:7e:8b:b9: 53:76:8f:bc:23:f9:b6:be:ae:63:a2:2e:e5:ce:2c: 8f:27:35:0a:09:be:75:f6:63:88:6f:cf:29:fd:c9: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:DB:EF:E6:46:97:B5:F6:6B:14:50:44:CC:C4:8B:54:BC:83:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:af:0e:94:5a:e9:c4:45:4e:b4:d9:76:76:a9:8d:5c:57:2c: 2c:86:de:00:a7:0c:86:d3:73:e0:e4:f9:fb:d6:50:36:ad:13: ae:14:3e:95:8a:2a:d9:ae:cd:dd:4f:80:30:1d:65:70:32:85: fd:d6:7d:2f:d3:17:10:91:25:d8:47:16:52:5c:b7:6c:87:55: 9d:ff:b2:53:7a:c7:d6:eb:42:53:17:00:7b:f1:5f:e2:a6:22: 90:21:83:31:0d:65:9e:6e:89:79:94:0d:96:79:5e:c9:98:1c: 96:37:f2:91:6e:69:89:f8:ad:a4:f9:8f:5c:40:a6:12:5b:e9: 26:62:22:73:e9:cb:21:cd:20:63:9c:c4:52:96:e4:9b:df:e1: 1a:6a:9b:04:99:0a:04:0f:90:6d:a8:7b:dd:9f:c8:b3:5e:34: db:47:05:74:4d:6f:85:12:75:8f:f0:37:fb:d9:bd:be:63:a3: 37:8c:c7:8a:72:bb:40:ef:2b:13:fc:ab:b8:f2:ae:ad:67:9d: 1a:12:5d:af:67:f7:b0:53:34:ba:9a:6a:2c:e4:4a:36:e8:9c: d8:e7:75:39:b4:e4:49:5a:f6:08:b6:ae:22:78:06:36:b5:06: 65:61:e9:5f:58:55:5d:83:4f:63:10:4c:29:e1:06:c2:db:d4: ca:b5:2e:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExQ0VdsCLnHCgxK48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTBlOGQyOTctMjE2Yy00NjExLWJkOTktODgyMzYxNTFlN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzowgO8lc0uzuTvxYE8hxgiLpJnoob9OljO6P 1z/URk0t5THvdWMcz2Zr299HMUrG+2LGwNjNfk/w7Xllo8GHBorVbIgzYyzrxkor v8zvLDIzljNkkwVjxWKMVEKAapRXiatZTC2yM4Q0d5rkRK/ISjnaRiCcuOF6CLZj zEqys3RK+YUTaJPvJtmMM+pNm4YT9cKEmQpyLFD8rkp1HcnI04gAJtgtedEPL9Jm Hqwyhf1cx1lqCvL0kW1LJiRObcoQBIJZNQzozTWh5VwiR7fKayjiVwoPZe+OauaC rzl+i7lTdo+8I/m2vq5joi7lziyPJzUKCb519mOIb88p/cmO3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNNd2+/mRpe19msUUETMxItUvIPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdmZjQ2ODMtZDU2YS0z OThiLWJmN2YtYTA2MTdmN2Q5NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAurw6UWunERU602XZ2qY1cVywsht4ApwyG03Pg5Pn71lA2rROuFD6V iirZrs3dT4AwHWVwMoX91n0v0xcQkSXYRxZSXLdsh1Wd/7JTesfW60JTFwB78V/i piKQIYMxDWWebol5lA2WeV7JmByWN/KRbmmJ+K2k+Y9cQKYSW+kmYiJz6cshzSBj nMRSluSb3+EaapsEmQoED5BtqHvdn8izXjTbRwV0TW+FEnWP8Df72b2+Y6M3jMeK crtA7ysT/Ku48q6tZ50aEl2vZ/ewUzS6mmos5Eo26JzY53U5tORJWvYItq4ieAY2 tQZlYelfWFVdg09jEEwp4QbC29TKtS7a -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:04 2026 by rpki-client