This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cadc13a5-2771-3b82-b98b-b6acc7a4e8c4.roa File: cadc13a5-2771-3b82-b98b-b6acc7a4e8c4.roa (raw, json) Hash identifier: KJRIfhL81kclO74TaNOoNONxFrFySuMgZo0Pcwnhv0w= Subject key identifier: 28:2A:FB:C3:D1:C6:A8:F3:8D:F3:51:BC:22:36:0D:78:4E:39:DE:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18A23E426FEE5673D4C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cadc13a5-2771-3b82-b98b-b6acc7a4e8c4.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 40114 IP address blocks: 63.139.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:8a:23:e4:26:fe:e5:67:3d:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=ce12b6c5-753a-4284-851a-306bd9bdde6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:ac:79:da:80:9c:d5:22:88:d4:5b:e6:b8: 50:e2:5f:dc:23:c0:f4:d3:30:e1:c7:23:33:4c:24: c2:c1:23:4b:12:5e:a2:eb:df:6b:0c:4d:66:cf:43: 74:2f:54:7b:7e:ee:e3:89:08:67:a6:90:6d:a6:ea: 73:72:60:2a:c7:cd:b7:a2:45:e6:a9:0d:cc:27:a7: e9:aa:b5:cc:5a:48:c9:14:fe:9b:36:03:b5:81:eb: 90:50:d1:a0:dd:9d:0a:eb:00:0f:44:62:e4:88:e2: 40:75:0e:3f:4e:bc:5b:f0:8b:f1:9d:0b:27:db:47: 77:fb:84:55:2b:a8:40:f9:48:80:f2:f9:1a:90:35: a7:fc:1b:8a:91:da:f0:48:c1:f2:e0:1a:a9:ea:29: 04:9e:6d:d4:fa:56:57:4b:7e:b1:ff:3f:c7:3f:eb: b7:2a:f0:68:10:00:8f:70:a0:d2:0c:c1:ea:0f:19: 43:3f:9c:62:5d:df:26:40:e2:13:1b:d9:b9:eb:48: 17:90:63:f4:0c:fc:cb:7c:66:f7:05:f6:92:7f:84: a8:2b:aa:c6:1e:7c:85:c1:f8:e3:7c:ba:fb:ff:f9: 55:59:34:a1:d2:fa:37:21:4e:43:45:ad:59:88:f8: 3b:c5:80:60:48:f6:e5:1d:0e:49:68:b5:b5:44:ba: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:FB:C3:D1:C6:A8:F3:8D:F3:51:BC:22:36:0D:78:4E:39:DE:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cadc13a5-2771-3b82-b98b-b6acc7a4e8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.139.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:89:b7:15:34:fb:4b:3b:59:39:7c:78:ae:32:8c:f9:70:ab: d7:06:ba:53:73:5b:1b:8c:38:8a:2d:cb:d9:20:9d:ec:96:eb: 67:c9:b3:68:31:34:4b:d1:fa:69:c9:e2:9e:c2:35:ce:68:40: e7:93:bb:9a:5a:b5:67:24:46:3a:eb:9d:1e:e4:ad:73:28:ad: e4:c6:fb:d7:5f:9e:1a:b3:72:44:5b:13:d1:00:0e:7b:7b:ec: bb:13:34:90:1b:dd:41:97:5a:a0:f4:11:7b:63:96:05:cd:04: 65:7f:b7:11:dc:de:1e:80:76:b8:f1:14:46:19:62:e2:86:06: fc:50:00:bf:9b:d2:36:bc:f8:6a:64:0f:32:f2:56:c1:5a:76: 24:92:de:0e:37:77:b4:55:11:bc:dc:23:1f:c7:4e:bc:84:da: 1f:3a:7f:02:07:a5:82:90:d1:d3:91:74:4b:d1:00:3e:8d:87: 8a:23:ba:c0:33:19:57:a0:ef:92:39:c7:d7:71:a1:c9:13:79: ff:26:a2:97:41:6b:cd:d6:5a:2c:13:a2:33:f2:79:cf:59:a5: c5:3d:03:de:59:f2:2b:d8:79:fd:da:a8:c0:aa:c2:fc:70:a3: 11:af:21:3d:24:fb:75:50:5f:d0:55:f3:f6:41:ad:f5:29:c5: e6:ec:d4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Yoj5Cb+5Wc9TGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk Y2UxMmI2YzUtNzUzYS00Mjg0LTg1MWEtMzA2YmQ5YmRkZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhisedqAnNUiiNRb5rhQ4l/cI8D00zDhxyMz TCTCwSNLEl6i699rDE1mz0N0L1R7fu7jiQhnppBtpupzcmAqx823okXmqQ3MJ6fp qrXMWkjJFP6bNgO1geuQUNGg3Z0K6wAPRGLkiOJAdQ4/Trxb8IvxnQsn20d3+4RV K6hA+UiA8vkakDWn/BuKkdrwSMHy4Bqp6ikEnm3U+lZXS36x/z/HP+u3KvBoEACP cKDSDMHqDxlDP5xiXd8mQOITG9m560gXkGP0DPzLfGb3BfaSf4SoK6rGHnyFwfjj fLr7//lVWTSh0vo3IU5DRa1ZiPg7xYBgSPblHQ5JaLW1RLr9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgq+8PRxqjzjfNRvCI2DXhOOd7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2FkYzEzYTUtMjc3MS0z YjgyLWI5OGItYjZhY2M3YTRlOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeJtxU0+0s7WTl8eK4yjPlwq9cGulNzWxuMOIoty9kgneyW62fJs2gx NEvR+mnJ4p7CNc5oQOeTu5patWckRjrrnR7krXMoreTG+9dfnhqzckRbE9EADnt7 7LsTNJAb3UGXWqD0EXtjlgXNBGV/txHc3h6AdrjxFEYZYuKGBvxQAL+b0ja8+Gpk DzLyVsFadiSS3g43d7RVEbzcIx/HTryE2h86fwIHpYKQ0dORdEvRAD6Nh4ojusAz GVeg75I5x9dxockTef8mopdBa83WWiwTojPyec9ZpcU9A95Z8ivYef3aqMCqwvxw oxGvIT0k+3VQX9BV8/ZBrfUpxebs1HA= -----END CERTIFICATE-----Generated at Sun Jan 11 07:36:18 2026 by rpki-client