This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa File: d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa (raw, json) Hash identifier: 3XzfPnb3nxHWf6FVQFDRFhxWLV0rTyVJWM+SRbQdVSU= Subject key identifier: FF:C2:DE:DE:5F:29:17:99:2C:8D:49:16:C8:65:39:CE:EC:66:DA:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14A45A074FCA936F0FA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 66.64.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4a:45:a0:74:fc:a9:36:f0:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=5b6a2803-2604-4912-926d-9174976ac727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:29:0e:00:f0:94:8e:d3:12:2d:08:55:ed: ec:3a:6e:f7:66:89:51:4d:70:ff:5c:92:13:30:ef: 95:6b:78:6a:35:32:c2:4d:7e:f2:cb:6d:0d:be:e1: 28:36:a6:84:c2:a0:20:90:a4:13:50:c3:ec:22:93: a0:9b:35:54:9b:03:57:4e:bd:56:5f:a5:ba:b9:bf: 09:08:87:30:0a:f1:bd:43:73:b8:a4:32:57:7a:e2: 0b:e2:c4:a2:83:94:e4:36:d1:b4:82:b4:d2:e4:d7: d4:49:ee:a3:66:94:19:84:44:96:79:1a:29:f5:51: a1:70:b6:9c:60:45:20:5d:26:9d:e0:10:12:c9:ef: 9b:1d:ad:e3:5a:bc:13:12:b2:17:d6:07:8b:d5:52: 7d:b9:0a:46:55:3b:a8:11:30:91:ea:01:2f:93:51: 7f:bf:ad:ae:34:9d:3b:46:3e:2b:e2:91:3b:52:27: ed:94:15:3a:12:07:4b:1b:f5:7f:ad:ef:4b:48:c0: 19:33:16:2f:44:16:c7:07:a5:ef:04:01:6c:b0:4b: 5c:4f:e0:8c:dd:6e:2f:a6:f6:d5:ba:63:94:5d:53: d6:32:ba:2f:b6:a9:23:d1:e2:c1:9f:c0:af:75:e2: 38:61:4b:38:76:5b:4c:24:15:6d:3d:4e:cb:05:d1: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:DE:DE:5F:29:17:99:2C:8D:49:16:C8:65:39:CE:EC:66:DA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f7:83:85:4f:38:e9:69:66:93:78:9e:3c:64:29:5b:4a:c3: 32:dd:c8:8a:9a:6c:b9:48:a1:12:80:16:a9:1d:6c:b3:8e:ce: 84:89:14:a7:05:2f:52:6d:97:50:59:10:65:df:b7:c0:65:4e: cc:2c:f4:27:48:d6:3a:cc:57:d1:14:17:35:90:6d:d1:48:25: 19:99:18:35:b7:5e:c9:03:2a:4c:58:c0:cb:1e:fa:03:f4:c1: bb:67:5a:e8:9b:de:e0:35:b0:32:cb:2c:dc:04:b2:df:e3:af: 94:fb:d0:3e:72:d8:94:18:a2:51:2f:6f:53:4a:b1:06:ff:19: 0f:38:d9:17:c7:62:61:f7:cc:e2:78:c1:9f:af:b8:08:fc:23: 9b:8a:8c:d6:2e:7d:41:e8:51:a9:1f:d7:aa:0e:e7:fb:3a:6b: 89:3f:13:b3:89:49:4c:63:be:32:51:16:2b:0a:7a:6d:7b:71: 79:b7:32:f3:5b:73:15:30:61:ae:d4:91:20:72:d6:8e:10:5f: 1e:ec:3c:97:ef:d1:93:4f:cf:69:f8:e0:82:a1:24:f2:74:c2: b3:86:0f:01:4e:17:0a:10:59:f6:a2:d6:86:11:9a:be:fd:a8: e0:15:ad:0e:d2:75:85:06:82:96:66:9c:90:5c:c0:fb:6d:9a: 0c:fd:d8:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0UpFoHT8qTbw+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NWI2YTI4MDMtMjYwNC00OTEyLTkyNmQtOTE3NDk3NmFjNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1QpDgDwlI7TEi0IVe3sOm73ZolRTXD/XJIT MO+Va3hqNTLCTX7yy20NvuEoNqaEwqAgkKQTUMPsIpOgmzVUmwNXTr1WX6W6ub8J CIcwCvG9Q3O4pDJXeuIL4sSig5TkNtG0grTS5NfUSe6jZpQZhESWeRop9VGhcLac YEUgXSad4BASye+bHa3jWrwTErIX1geL1VJ9uQpGVTuoETCR6gEvk1F/v62uNJ07 Rj4r4pE7UiftlBU6EgdLG/V/re9LSMAZMxYvRBbHB6XvBAFssEtcT+CM3W4vpvbV umOUXVPWMrovtqkj0eLBn8CvdeI4YUs4dltMJBVtPU7LBdFXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/C3t5fKReZLI1JFshlOc7sZtoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmZDM0MjQtNDcxMC0z ZTcyLWJiMDQtYTUzZTIwMzNhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD3g4VPOOlpZpN4njxkKVtKwzLdyIqabLlIoRKAFqkdbLOOzoSJFKcF L1Jtl1BZEGXft8BlTsws9CdI1jrMV9EUFzWQbdFIJRmZGDW3XskDKkxYwMse+gP0 wbtnWuib3uA1sDLLLNwEst/jr5T70D5y2JQYolEvb1NKsQb/GQ842RfHYmH3zOJ4 wZ+vuAj8I5uKjNYufUHoUakf16oO5/s6a4k/E7OJSUxjvjJRFisKem17cXm3MvNb cxUwYa7UkSBy1o4QXx7sPJfv0ZNPz2n44IKhJPJ0wrOGDwFOFwoQWfai1oYRmr79 qOAVrQ7SdYUGgpZmnJBcwPttmgz92AY= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:13 2026 by rpki-client