This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: pEU4lTp9lziZo8Sog7znW0WLTnEmrrsVKDQiKULuGCA= Subject key identifier: 69:E5:A1:DC:3B:DA:58:91:81:55:86:B4:42:6E:08:59:10:75:BD:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C768184E0F0FA5895CF67C880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:84:e0:f0:fa:58:95:cf:67:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=9da12517-eba1-4432-8f8c-3c6391326df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:63:64:79:3e:38:a5:fd:f9:4f:f4:f4:9d: 8b:e5:29:49:02:9d:f8:47:84:5f:bc:bb:b7:6e:e8: ad:2e:41:7e:36:b8:63:44:cd:69:c2:77:7d:a9:e7: d0:7e:fd:92:27:4c:51:88:d5:35:30:81:d4:23:60: f3:b1:b3:d7:18:47:10:b1:1b:ab:a6:d1:8b:18:89: dd:fc:2d:5d:7b:68:66:9d:56:48:be:0c:74:7f:ce: 93:17:bd:8e:b9:08:a2:b2:9c:bd:78:31:28:0d:66: 37:c5:b2:04:a6:63:90:78:61:5e:18:64:2e:31:b0: f9:5c:8d:de:db:2a:20:f3:39:12:58:c1:7a:bd:0e: b8:8f:ab:7d:25:fb:30:d4:04:0e:8f:93:f6:16:12: a2:f0:64:b1:9c:f7:60:68:19:49:ce:be:7a:ec:7a: 64:eb:ed:86:61:bd:9a:52:4b:c6:61:8c:9d:b8:a6: 01:db:cc:0b:f6:fe:3a:14:aa:a8:25:76:3a:6e:53: c9:c7:4d:83:4d:45:b4:85:b6:c1:ae:f2:11:84:50: f2:31:2a:81:b8:bb:d2:bf:c2:95:d0:31:90:bc:70: 87:6e:7a:ef:3c:8f:9e:49:f0:03:dc:5c:95:e5:31: e5:be:65:3e:26:8b:e3:a4:3a:0f:b1:7b:47:8d:14: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:A1:DC:3B:DA:58:91:81:55:86:B4:42:6E:08:59:10:75:BD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fe:28:d8:cd:16:3d:b3:07:0b:77:18:66:5a:4c:68:2b:47: 38:94:0c:07:d9:e7:f3:4e:43:d4:1c:02:d0:1f:d9:35:7a:31: 8f:e5:40:11:58:16:94:4f:0d:a6:bd:05:1d:ae:90:d7:45:82: 80:a9:d7:52:d1:92:93:7d:6d:19:29:93:a9:1b:b1:70:a0:09: 19:59:4f:ea:be:d3:6f:88:f0:fe:70:fd:c4:9d:a7:90:6d:72: 89:7f:a4:94:a5:fa:8d:6a:60:31:ee:d1:00:ee:8f:48:b5:da: ac:ed:5c:9e:53:8d:5a:11:48:4d:90:b1:de:9b:02:02:88:28: 52:1e:60:70:a0:a6:a0:e8:4d:f8:c0:4e:a6:c3:aa:21:0d:85: 80:ad:7e:67:15:13:fe:4d:18:5c:ee:4b:95:49:f3:b6:b5:a1: 09:4b:72:5a:7f:2f:80:f1:3e:43:8f:ab:49:e9:ac:52:46:e0: 67:36:5b:12:67:4e:57:ff:0a:c6:49:7f:67:04:cc:61:f2:ab: 21:a1:73:2f:c5:3c:21:9e:66:b4:1f:f6:80:e4:59:88:38:3f: 89:d4:bc:09:ad:51:bd:f3:18:ef:88:f2:ea:a1:67:d2:ae:05: 04:72:18:5e:1d:e0:dd:c8:ad:9b:cf:b1:8e:83:cd:62:f7:5e: 37:b8:26:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYTg8PpYlc9nyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk OWRhMTI1MTctZWJhMS00NDMyLThmOGMtM2M2MzkxMzI2ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA1jZHk+OKX9+U/09J2L5SlJAp34R4RfvLu3 buitLkF+NrhjRM1pwnd9qefQfv2SJ0xRiNU1MIHUI2DzsbPXGEcQsRurptGLGInd /C1de2hmnVZIvgx0f86TF72OuQiispy9eDEoDWY3xbIEpmOQeGFeGGQuMbD5XI3e 2yog8zkSWMF6vQ64j6t9Jfsw1AQOj5P2FhKi8GSxnPdgaBlJzr567Hpk6+2GYb2a UkvGYYyduKYB28wL9v46FKqoJXY6blPJx02DTUW0hbbBrvIRhFDyMSqBuLvSv8KV 0DGQvHCHbnrvPI+eSfAD3FyV5THlvmU+JovjpDoPsXtHjRTRuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnlodw72liRgVWGtEJuCFkQdb2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7+KNjNFj2zBwt3GGZaTGgrRziUDAfZ5/NOQ9QcAtAf2TV6MY/lQBFY FpRPDaa9BR2ukNdFgoCp11LRkpN9bRkpk6kbsXCgCRlZT+q+02+I8P5w/cSdp5Bt col/pJSl+o1qYDHu0QDuj0i12qztXJ5TjVoRSE2Qsd6bAgKIKFIeYHCgpqDoTfjA TqbDqiENhYCtfmcVE/5NGFzuS5VJ87a1oQlLclp/L4DxPkOPq0nprFJG4Gc2WxJn Tlf/CsZJf2cEzGHyqyGhcy/FPCGeZrQf9oDkWYg4P4nUvAmtUb3zGO+I8uqhZ9Ku BQRyGF4d4N3IrZvPsY6DzWL3Xje4JvE= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:33 2026 by rpki-client