This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa File: cddb631d-a67c-3f22-942c-cd9a33ea7008.roa (raw, json) Hash identifier: vFZg/TcK3vQ7g4XcRs55+mPkqlny91dlfz+D0+QKk/g= Subject key identifier: 8E:01:E8:17:EA:19:4A:5E:7D:08:EC:E0:B7:9A:14:C3:A4:2A:16:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C619141738013D2E293A5EB40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 173.189.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:41:73:80:13:d2:e2:93:a5:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=67435e82-e712-4ce6-85f7-36b1ec0fdfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:db:4c:c3:4e:9d:f9:e0:73:a4:39:2e:0c: 83:9f:06:9b:22:29:13:59:cb:37:6b:ae:9d:df:bc: 22:15:46:d7:2f:9c:9d:65:da:7a:6e:31:81:56:b4: 13:06:48:62:9e:ec:d2:b3:aa:4e:3b:84:2c:21:f4: 8b:22:70:b6:05:17:ba:6e:7b:df:aa:0a:2a:49:0e: 64:15:26:cd:0a:1e:08:59:ac:5a:ed:7d:79:d1:ce: 86:cf:1e:2d:4f:ad:b4:7b:19:ce:f5:00:97:10:d1: 8a:44:21:9e:39:84:da:0c:4e:f5:a6:36:06:b1:6a: fc:80:7c:f6:b3:ef:57:c8:39:ff:c1:e1:48:d0:d3: e8:bf:99:96:3e:34:ad:07:b6:a8:65:99:a8:b1:37: af:48:24:50:61:69:3a:da:a4:df:60:ba:5a:ff:a4: ad:47:75:ca:92:ce:5a:47:52:83:29:47:82:52:a2: ec:48:f7:1d:82:8c:60:9d:2c:89:54:3d:60:80:2f: 0e:82:c4:bd:27:30:88:c3:13:01:46:89:61:f6:86: 38:3d:56:4f:58:6e:9e:ab:33:3d:9b:25:33:96:ce: 4d:c3:7b:7d:2c:47:96:18:68:f6:d9:ac:7b:02:db: 6c:c6:9f:ef:fd:ff:6f:cd:da:1c:c7:a7:2d:e7:8f: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:01:E8:17:EA:19:4A:5E:7D:08:EC:E0:B7:9A:14:C3:A4:2A:16:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:79:8e:a9:3b:95:cf:42:05:8e:70:1f:9b:98:12:a2:36:b5: c2:fe:7f:fc:2c:2d:0f:e8:ff:06:c7:8f:1f:fe:6d:5c:b1:21: 22:01:17:71:70:99:e8:e0:ad:ba:28:8e:3f:90:aa:cb:a7:14: 5b:05:ab:60:17:84:cf:67:6e:b7:d2:2c:6f:5b:5d:a6:30:7d: 43:5b:3d:5c:25:cb:4a:cd:de:da:87:3b:46:a0:b3:5d:6b:0b: e0:ad:57:4a:04:4f:de:a8:b1:41:3b:a3:61:44:49:d2:d6:09: 39:f5:33:2e:ae:8a:91:39:60:11:cd:2b:73:bc:95:8b:4b:cf: ef:62:0d:29:c9:07:6a:7f:12:30:2f:4b:7e:09:02:b3:51:3c: 27:6e:be:4f:87:a6:19:17:49:d5:fe:df:a4:f9:91:7c:32:90: 95:70:39:22:15:1d:ac:18:d8:43:f4:91:96:51:d5:c9:6b:66: f9:84:20:45:24:6c:0f:3c:54:3d:1b:25:61:ad:21:75:95:85: 58:0c:ec:cd:af:25:a3:ab:59:cb:67:e2:6e:be:fe:47:72:d4: 62:36:58:35:ed:1d:b9:66:14:b0:de:f0:95:4d:03:93:82:06: 22:1a:a5:c5:c7:c5:04:8e:cf:40:5c:d3:dd:b6:d8:73:4e:90: 98:6e:da:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkUFzgBPS4pOl60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk Njc0MzVlODItZTcxMi00Y2U2LTg1ZjctMzZiMWVjMGZkZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXTbTMNOnfngc6Q5LgyDnwabIikTWcs3a66d 37wiFUbXL5ydZdp6bjGBVrQTBkhinuzSs6pOO4QsIfSLInC2BRe6bnvfqgoqSQ5k FSbNCh4IWaxa7X150c6Gzx4tT620exnO9QCXENGKRCGeOYTaDE71pjYGsWr8gHz2 s+9XyDn/weFI0NPov5mWPjStB7aoZZmosTevSCRQYWk62qTfYLpa/6StR3XKks5a R1KDKUeCUqLsSPcdgoxgnSyJVD1ggC8OgsS9JzCIwxMBRolh9oY4PVZPWG6eqzM9 myUzls5Nw3t9LEeWGGj22ax7Attsxp/v/f9vzdocx6ct548aeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4B6BfqGUpefQjs4LeaFMOkKhY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RkYjYzMWQtYTY3Yy0z ZjIyLTk0MmMtY2Q5YTMzZWE3MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG55jqk7lc9CBY5wH5uYEqI2tcL+f/wsLQ/o/wbHjx/+bVyxISIBF3Fw mejgrboojj+QqsunFFsFq2AXhM9nbrfSLG9bXaYwfUNbPVwly0rN3tqHO0ags11r C+CtV0oET96osUE7o2FESdLWCTn1My6uipE5YBHNK3O8lYtLz+9iDSnJB2p/EjAv S34JArNRPCduvk+HphkXSdX+36T5kXwykJVwOSIVHawY2EP0kZZR1clrZvmEIEUk bA88VD0bJWGtIXWVhVgM7M2vJaOrWctn4m6+/kdy1GI2WDXtHblmFLDe8JVNA5OC BiIapcXHxQSOz0Bc09222HNOkJhu2lE= -----END CERTIFICATE-----Generated at Sat Jan 10 20:52:59 2026 by rpki-client