This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa File: cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa (raw, json) Hash identifier: bTDuuLdD8+pPlz1eYso+gRHVBYMU5bDksdpH5CGjJ3U= Subject key identifier: 7A:43:54:A7:26:EA:5B:3D:F6:9F:C0:F1:75:75:9D:96:B0:85:0A:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D183429C1D8324A7C07400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:83:42:9c:1d:83:24:a7:c0:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=712b9eb4-9948-4d20-97e5-6d8ea1a96647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:fd:90:26:a8:19:14:b9:1b:e1:ac:de:84: f5:31:51:c9:23:76:52:53:80:1f:18:19:12:bb:2b: bb:0e:44:bc:8b:53:3c:d3:fb:f4:bb:a7:67:27:6d: 3c:83:af:26:0e:cc:8a:ca:1e:4c:39:cc:29:d5:d0: 6c:6d:a0:5d:a4:08:d5:d4:96:c7:0a:18:4a:43:58: 64:9e:75:31:72:98:09:70:77:f5:b4:fc:5a:d2:49: e7:95:c9:f8:8b:06:53:7f:70:44:de:7c:d0:2a:4b: 32:b2:a7:e5:5d:fe:ea:5c:89:3e:3a:87:fd:6f:86: fd:56:b0:48:ef:51:8a:ef:bc:d8:7b:4c:98:f3:24: c4:71:3b:9e:5b:b1:7e:7d:92:9b:ae:97:fe:3e:4f: f1:04:8d:08:53:64:04:61:63:49:34:f1:4a:a8:ec: 86:68:af:c7:93:e8:62:63:11:af:fe:7e:04:2f:42: 84:97:3e:e2:ab:e3:f2:47:c5:6e:cd:a9:2d:b6:44: 93:73:c6:18:e4:db:c2:13:81:e8:df:b7:83:52:a7: ad:bb:6f:f0:7b:e5:f0:ab:2b:e9:b7:e2:99:6e:bb: 07:b7:88:da:ed:40:21:1d:e6:a8:91:10:ea:09:2e: 16:29:e0:95:30:6e:b2:51:a1:55:80:95:9a:a0:ef: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:43:54:A7:26:EA:5B:3D:F6:9F:C0:F1:75:75:9D:96:B0:85:0A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8d:59:7d:58:7a:7f:d3:a8:80:2d:4d:79:b8:fb:09:7e:99: 66:11:57:36:de:7c:64:4b:ef:07:0c:49:97:48:09:21:8d:37: ee:1f:1d:09:f1:d0:8e:16:79:e9:9e:fe:08:59:2d:65:b9:2b: 42:5b:f4:e5:2d:28:ec:e2:fd:71:29:08:a8:ef:19:a9:10:da: 25:bf:ce:77:5e:db:cc:91:cc:52:78:db:77:0f:5e:87:f9:9e: 8c:2b:48:45:6d:b2:63:29:6e:3b:5b:e0:a6:96:f8:2c:40:6d: 13:00:d9:e8:66:b0:f8:73:5c:21:ec:da:d0:db:d1:eb:08:6c: 17:73:b1:dc:4b:07:7f:ba:bc:1b:b9:0a:af:99:77:fc:b0:5c: c9:75:ec:c7:a4:4d:c7:33:4a:bd:a9:de:0e:e8:a1:f5:e0:bd: 7f:b1:55:25:2c:02:21:14:85:e8:c4:4d:2a:fe:a0:df:92:67: 2a:10:8d:bc:b1:ca:d1:f9:65:57:2a:13:6d:e8:bc:da:88:49: 5e:93:61:11:45:ab:5c:bb:28:8f:d3:18:b2:24:05:e4:e8:74: 7a:84:d4:54:e9:84:15:17:88:c3:64:c0:f3:f0:f6:f8:05:3e: 1a:19:80:da:17:38:79:66:ca:f2:29:66:b1:ce:44:25:fc:4d: 5b:78:2e:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0YNCnB2DJKfAdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NzEyYjllYjQtOTk0OC00ZDIwLTk3ZTUtNmQ4ZWExYTk2NjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGn9kCaoGRS5G+Gs3oT1MVHJI3ZSU4AfGBkS uyu7DkS8i1M80/v0u6dnJ208g68mDsyKyh5MOcwp1dBsbaBdpAjV1JbHChhKQ1hk nnUxcpgJcHf1tPxa0knnlcn4iwZTf3BE3nzQKksysqflXf7qXIk+Oof9b4b9VrBI 71GK77zYe0yY8yTEcTueW7F+fZKbrpf+Pk/xBI0IU2QEYWNJNPFKqOyGaK/Hk+hi YxGv/n4EL0KElz7iq+PyR8VuzakttkSTc8YY5NvCE4Ho37eDUqetu2/we+Xwqyvp t+KZbrsHt4ja7UAhHeaokRDqCS4WKeCVMG6yUaFVgJWaoO8PIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpDVKcm6ls99p/A8XV1nZawhQoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2YzYmMxMWQtNWY5Zi0z OGZhLTg1NjktMzdjOTZhYjc2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+NWX1Yen/TqIAtTXm4+wl+mWYRVzbefGRL7wcMSZdICSGNN+4f HQnx0I4Weeme/ghZLWW5K0Jb9OUtKOzi/XEpCKjvGakQ2iW/znde28yRzFJ423cP Xof5nowrSEVtsmMpbjtb4KaW+CxAbRMA2ehmsPhzXCHs2tDb0esIbBdzsdxLB3+6 vBu5Cq+Zd/ywXMl17MekTcczSr2p3g7oofXgvX+xVSUsAiEUhejETSr+oN+SZyoQ jbyxytH5ZVcqE23ovNqISV6TYRFFq1y7KI/TGLIkBeTodHqE1FTphBUXiMNkwPPw 9vgFPhoZgNoXOHlmyvIpZrHORCX8TVt4Lso= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:22 2026 by rpki-client