This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa File: c9d29c32-a313-3797-8f77-559ae3991224.roa (raw, json) Hash identifier: 4tBErb8ZKxwKgShZSof0MjMpYWkixNLcnITJBD0NxRk= Subject key identifier: 43:CA:7F:38:F4:DF:AE:17:8B:6E:47:1A:C9:E2:E6:97:86:2D:52:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15580629654A76E0E9200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:55:80:62:96:54:a7:6e:0e:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=b2b942b3-3e61-4232-b417-5cc12f3f7cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:86:5d:bf:0b:fb:0a:ca:a9:ce:6b:ea:12: b4:41:b4:ea:b6:8c:14:7d:76:ec:9a:90:a4:11:78: fb:58:0c:4e:bc:58:c5:cb:96:29:35:af:8a:34:05: 9d:a6:15:b8:c9:0c:e7:9e:4f:84:13:35:44:c5:f4: 7f:5e:51:2f:a9:a1:00:8f:fc:a2:f5:09:71:de:80: 99:83:ea:9c:2d:5f:30:6b:01:3a:a5:3c:0c:64:56: 23:fc:06:dc:9a:90:22:e6:d9:2c:1e:7b:5f:a6:66: 6f:b5:75:eb:17:5f:0a:d3:b1:ed:93:3e:90:6a:f6: ba:40:70:21:bf:6b:2f:28:b7:4d:81:06:db:38:e5: 60:12:59:ff:2f:2f:50:40:f8:c5:49:15:d1:b6:8d: 3a:f6:0c:ab:ea:95:82:26:40:05:07:2a:78:06:ca: c9:db:07:fb:e4:39:a9:c1:28:1d:e3:65:42:b5:5a: ce:cd:41:26:f1:15:8c:46:73:0c:f1:af:03:22:2d: a4:48:04:5b:40:db:ab:a5:75:ea:22:eb:a7:de:59: eb:54:27:65:61:3f:14:60:04:5d:45:11:72:3a:fc: 49:80:ec:7d:cb:11:57:f7:15:9f:0d:fd:8a:7b:9e: 95:1b:7a:4a:51:30:e0:23:e3:d4:b1:22:83:fa:c5: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:7F:38:F4:DF:AE:17:8B:6E:47:1A:C9:E2:E6:97:86:2D:52:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b1:61:f4:d2:35:94:a3:4d:fe:d7:53:8e:11:a6:a1:96:4d: 01:be:b0:01:98:ad:2c:30:44:1a:4e:d0:6e:df:92:e6:ef:69: 12:4d:52:90:57:1b:76:62:3d:a2:2b:eb:53:27:60:ad:be:63: 8d:5b:cb:92:2c:7d:92:11:85:65:53:0f:7f:8e:65:bf:7c:17: 55:e4:e2:b1:4e:f0:3a:84:c2:d4:83:ea:b7:df:71:c2:f6:f7: 5d:cd:fa:6f:8b:54:73:73:ac:da:d3:b6:07:62:6e:e7:2b:c4: 8b:08:70:df:18:f7:9d:31:02:48:a3:e0:a4:37:b7:13:a6:5c: d0:4e:9f:df:20:69:21:c8:56:f6:0a:d2:93:ed:dc:25:31:8a: 02:dd:3c:7c:38:92:72:20:23:0e:00:5d:4e:1d:31:3e:eb:d7: 25:a5:31:c3:ba:f4:d9:f4:6b:63:48:ce:5d:31:81:73:02:02: 4b:73:19:67:7a:75:9a:c7:9c:b4:0c:5a:c2:62:ed:93:ac:7b: a5:4f:43:e0:16:03:aa:27:75:fb:22:07:62:eb:6f:c9:01:04: e6:17:13:b8:7d:48:bb:52:44:6d:79:87:01:4a:69:28:d0:14: 02:fd:1a:95:f4:2e:bb:60:72:fd:9a:03:2f:01:85:1e:74:05: 8d:aa:45:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0VWAYpZUp24OkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YjJiOTQyYjMtM2U2MS00MjMyLWI0MTctNWNjMTJmM2Y3Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yuGXb8L+wrKqc5r6hK0QbTqtowUfXbsmpCk EXj7WAxOvFjFy5YpNa+KNAWdphW4yQznnk+EEzVExfR/XlEvqaEAj/yi9Qlx3oCZ g+qcLV8wawE6pTwMZFYj/AbcmpAi5tksHntfpmZvtXXrF18K07Htkz6Qava6QHAh v2svKLdNgQbbOOVgEln/Ly9QQPjFSRXRto069gyr6pWCJkAFByp4BsrJ2wf75Dmp wSgd42VCtVrOzUEm8RWMRnMM8a8DIi2kSARbQNurpXXqIuun3lnrVCdlYT8UYARd RRFyOvxJgOx9yxFX9xWfDf2Ke56VG3pKUTDgI+PUsSKD+sVSbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEPKfzj0364Xi25HGsni5peGLVL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlkMjljMzItYTMxMy0z Nzk3LThmNzctNTU5YWUzOTkxMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADrFh9NI1lKNN/tdTjhGmoZZNAb6wAZitLDBEGk7Qbt+S5u9pEk1S kFcbdmI9oivrUydgrb5jjVvLkix9khGFZVMPf45lv3wXVeTisU7wOoTC1IPqt99x wvb3Xc36b4tUc3Os2tO2B2Ju5yvEiwhw3xj3nTECSKPgpDe3E6Zc0E6f3yBpIchW 9grSk+3cJTGKAt08fDiSciAjDgBdTh0xPuvXJaUxw7r02fRrY0jOXTGBcwICS3MZ Z3p1msectAxawmLtk6x7pU9D4BYDqid1+yIHYutvyQEE5hcTuH1Iu1JEbXmHAUpp KNAUAv0alfQuu2By/ZoDLwGFHnQFjapFMA== -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:20 2026 by rpki-client