This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa File: c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa (raw, json) Hash identifier: WAG1/aQsRo2GvLA++745YDmwHHFgYMgu5WLDmO9yZeE= Subject key identifier: 75:36:6F:85:A5:9B:FD:07:56:E2:99:78:4F:86:C8:1E:89:4B:19:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15DDC90EE9AD191B931C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 398741 IP address blocks: 40.136.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:5d:dc:90:ee:9a:d1:91:b9:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=af79c80c-c806-482f-914c-7c99fc17e412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:5e:e9:9d:ab:50:1e:09:12:f1:14:85:6d: 45:ba:43:33:56:4c:88:04:eb:3b:a2:4e:85:c1:dc: 26:77:eb:b6:3d:80:7b:5c:50:62:26:dc:6f:d9:c0: 6f:47:0a:15:41:ea:54:28:90:54:af:43:ca:a0:c4: 82:62:8e:59:55:9d:d5:8d:20:1d:11:a5:c2:6e:e5: 23:19:53:84:9c:f4:a4:91:41:d3:d9:f5:76:a9:94: a9:b5:2c:b6:29:3a:7a:ed:1f:e5:9e:ff:b1:63:f9: aa:84:71:75:73:95:28:5b:69:bd:f9:d7:f9:b3:1d: bd:6b:8f:32:21:5c:8a:73:49:19:f0:c4:60:ae:7c: 96:e0:67:86:a6:dc:16:4d:8c:4f:b6:42:be:09:ca: 07:b8:ea:1e:15:07:d8:b9:57:38:72:79:c9:3d:8d: 80:c5:95:6d:44:1b:c4:8b:25:55:e8:34:14:7c:be: fe:cb:97:bf:06:7b:84:bd:d3:67:26:36:49:48:59: e6:03:91:19:38:1d:16:67:5b:1a:eb:26:b2:89:f4: b1:cc:c1:a9:10:a3:63:c2:65:8e:45:e7:65:da:ac: 02:af:90:69:9c:dd:ad:17:a0:e1:da:f6:55:f1:99: c6:4e:4d:1f:13:c1:44:4d:71:bf:8d:7e:16:6e:a9: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:6F:85:A5:9B:FD:07:56:E2:99:78:4F:86:C8:1E:89:4B:19:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:35:36:0c:a8:a0:70:22:e4:07:4c:18:47:65:86:0a:68:a3: b4:80:64:0e:87:0a:22:19:e0:82:05:12:9c:30:1f:63:98:96: c7:a5:06:21:ad:de:2f:e9:62:8b:4a:27:f2:db:67:c2:2c:0e: 52:80:53:cd:6f:0a:23:2b:be:2e:9e:18:d4:49:f0:d3:94:52: 2b:9d:3a:cc:41:0b:8e:dc:0b:3e:08:01:97:5e:78:73:9f:02: 96:f6:47:86:6f:a8:f1:3d:6f:e0:f6:3b:49:80:11:51:fa:f3: 2c:dd:d2:9b:5b:5b:2b:24:4a:69:a3:06:fc:07:5e:65:10:1f: e7:93:75:c2:9d:30:b9:8d:c8:eb:9b:11:19:a5:70:bf:cc:69: 99:ea:d9:6d:d8:d5:98:fe:68:96:7b:6f:41:a9:51:6d:22:6f: c9:92:79:68:b6:50:bd:8a:5b:55:f6:1f:1b:23:dd:0d:38:b0: cc:92:a1:9b:a2:e7:4f:0c:db:b5:5b:59:22:b0:ef:71:68:60: f7:fa:8c:42:19:a7:ce:4e:cb:6b:e3:8f:cf:ff:93:52:32:1d: 0a:94:9e:8c:53:4a:77:02:99:5e:60:e7:9b:85:c3:c7:96:e5: dc:2c:2a:8a:bc:9a:b8:d1:b3:26:c4:7d:70:ef:74:3f:d7:ac: f7:3e:11:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0V3ckO6a0ZG5McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YWY3OWM4MGMtYzgwNi00ODJmLTkxNGMtN2M5OWZjMTdlNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9e6Z2rUB4JEvEUhW1FukMzVkyIBOs7ok6F wdwmd+u2PYB7XFBiJtxv2cBvRwoVQepUKJBUr0PKoMSCYo5ZVZ3VjSAdEaXCbuUj GVOEnPSkkUHT2fV2qZSptSy2KTp67R/lnv+xY/mqhHF1c5UoW2m9+df5sx29a48y IVyKc0kZ8MRgrnyW4GeGptwWTYxPtkK+CcoHuOoeFQfYuVc4cnnJPY2AxZVtRBvE iyVV6DQUfL7+y5e/BnuEvdNnJjZJSFnmA5EZOB0WZ1sa6yayifSxzMGpEKNjwmWO Redl2qwCr5BpnN2tF6Dh2vZV8ZnGTk0fE8FETXG/jX4WbqmPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU2b4Wlm/0HVuKZeE+GyB6JSxmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljZWExYmUtNzNjYi0z YmNlLWFkNjItZjhhYmI2YjI0ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk1NgyooHAi5AdMGEdlhgpoo7SAZA6HCiIZ4IIFEpwwH2OYlselBiGt 3i/pYotKJ/LbZ8IsDlKAU81vCiMrvi6eGNRJ8NOUUiudOsxBC47cCz4IAZdeeHOf Apb2R4ZvqPE9b+D2O0mAEVH68yzd0ptbWyskSmmjBvwHXmUQH+eTdcKdMLmNyOub ERmlcL/MaZnq2W3Y1Zj+aJZ7b0GpUW0ib8mSeWi2UL2KW1X2Hxsj3Q04sMySoZui 508M27VbWSKw73FoYPf6jEIZp85Oy2vjj8//k1IyHQqUnoxTSncCmV5g55uFw8eW 5dwsKoq8mrjRsybEfXDvdD/XrPc+ER0= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:58 2026 by rpki-client