This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa File: c9f28c3c-81b4-3515-825b-a41239eb04c5.roa (raw, json) Hash identifier: ERFaUoaeXIJdPekUhMHzE9cdXvIus9fKkXszXL5soOg= Subject key identifier: D4:6A:A1:07:E7:CC:EC:C6:6D:EC:F7:A7:98:77:1A:2E:90:09:E1:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D156440A49FED7CD52E870 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:56:44:0a:49:fe:d7:cd:52:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=11b7e485-8f44-42a0-ac17-ea29a1cb677c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:20:0a:84:a6:1d:be:93:ef:b9:f7:b7:83: a6:35:2c:47:77:27:42:96:29:a2:3a:41:c8:01:4b: fb:da:fb:62:8f:26:38:78:31:4d:1e:c1:c8:9b:b8: cd:b6:57:c1:e6:cd:fb:f2:b8:34:60:a2:35:98:a8: 40:bb:bc:24:41:9e:43:34:ab:87:f7:64:6b:df:7c: 71:62:31:b9:a5:86:ef:63:81:36:e9:c4:0c:9d:ca: c9:68:35:2e:79:06:2e:77:9a:f7:e9:ca:e9:ff:6c: 4e:37:6e:20:0d:69:2e:d0:9d:06:78:79:82:e5:fd: 5c:c7:b1:b3:8c:63:37:31:9c:cc:44:22:9d:3b:1e: 16:c3:c1:0f:e6:e6:3e:a1:7b:0e:24:29:aa:57:bd: ea:a7:64:29:9e:d2:6b:80:ab:88:4a:fb:c8:82:35: 76:5d:52:6e:2c:97:15:b0:f9:61:53:0f:12:52:bf: 8b:44:b7:43:93:18:53:5f:52:5f:14:ab:60:4a:be: 40:ff:78:e2:ee:70:ed:65:f6:2c:a6:cf:2b:90:73: a6:11:87:08:2a:40:9c:6d:c0:41:8e:15:7c:e9:be: 32:d5:e0:26:44:eb:24:6a:71:17:e9:03:89:a5:49: 6d:0d:dd:a8:8f:5b:84:d8:a0:cb:41:f6:dc:b2:d6: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:A1:07:E7:CC:EC:C6:6D:EC:F7:A7:98:77:1A:2E:90:09:E1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f1:8e:3e:63:82:81:95:0d:8e:81:9c:a5:4d:80:d8:97:ae: 8f:37:21:e7:64:45:c6:94:7b:1d:6d:09:94:17:d7:0b:19:6d: 12:e8:3a:e4:9c:78:04:c5:0e:72:7f:89:9c:d5:d4:13:7a:32: e0:5d:9c:20:05:52:12:28:d0:c7:c6:a9:6f:87:c3:66:15:86: c7:17:c2:42:c4:ff:e6:bc:7f:75:97:86:d0:a1:4c:a8:f9:35: 58:7e:0c:cf:b2:04:38:32:7a:09:c0:e1:05:2b:b2:3f:06:36: 2c:be:99:6c:0d:62:5d:79:9a:b4:d7:9c:27:02:ab:61:54:c1: 16:59:2f:58:fe:02:dc:63:9d:de:db:f3:63:c8:35:7c:e2:c8: 88:46:b3:fb:80:f8:3b:c9:d5:e3:a5:ca:c8:06:40:50:cf:27: 46:f0:c2:bf:dc:d9:01:25:17:60:a0:e6:d8:4c:0f:b1:e7:ee: 77:76:f4:4f:60:cb:7a:2d:ce:fe:2f:90:6e:b4:b6:6b:59:2a: 8c:1a:96:da:36:5d:25:a2:25:db:21:ef:ea:cb:fc:69:84:b5: 1d:08:41:24:a8:34:2d:d6:0d:a0:17:ce:29:60:e3:5b:1f:08: a4:b1:8d:ae:d1:28:04:8d:0f:6b:63:c3:b9:3c:19:3d:73:01: 58:fc:16:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0VZECkn+181S6HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MTFiN2U0ODUtOGY0NC00MmEwLWFjMTctZWEyOWExY2I2NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT0gCoSmHb6T77n3t4OmNSxHdydClimiOkHI AUv72vtijyY4eDFNHsHIm7jNtlfB5s378rg0YKI1mKhAu7wkQZ5DNKuH92Rr33xx YjG5pYbvY4E26cQMncrJaDUueQYud5r36crp/2xON24gDWku0J0GeHmC5f1cx7Gz jGM3MZzMRCKdOx4Ww8EP5uY+oXsOJCmqV73qp2QpntJrgKuISvvIgjV2XVJuLJcV sPlhUw8SUr+LRLdDkxhTX1JfFKtgSr5A/3ji7nDtZfYsps8rkHOmEYcIKkCcbcBB jhV86b4y1eAmROskanEX6QOJpUltDd2oj1uE2KDLQfbcstbTDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNRqoQfnzOzGbez3p5h3Gi6QCeH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlmMjhjM2MtODFiNC0z NTE1LTgyNWItYTQxMjM5ZWIwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAi/GOPmOCgZUNjoGcpU2A2Jeujzch52RFxpR7HW0JlBfXCxltEug6 5Jx4BMUOcn+JnNXUE3oy4F2cIAVSEijQx8apb4fDZhWGxxfCQsT/5rx/dZeG0KFM qPk1WH4Mz7IEODJ6CcDhBSuyPwY2LL6ZbA1iXXmatNecJwKrYVTBFlkvWP4C3GOd 3tvzY8g1fOLIiEaz+4D4O8nV46XKyAZAUM8nRvDCv9zZASUXYKDm2EwPsefud3b0 T2DLei3O/i+QbrS2a1kqjBqW2jZdJaIl2yHv6sv8aYS1HQhBJKg0LdYNoBfOKWDj Wx8IpLGNrtEoBI0Pa2PDuTwZPXMBWPwWKA== -----END CERTIFICATE-----Generated at Sat Jan 10 21:09:17 2026 by rpki-client