This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: eoi1MUjP1yQm8FYjgI4CFNVQg1/kYkIRsD/Si9ujwSs= Subject key identifier: 74:A5:95:97:51:85:61:EA:D3:D7:01:3C:7B:3C:6E:E8:91:B1:54:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0698C32C41919C4EAB0780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:98:c3:2c:41:91:9c:4e:ab:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=1fb087bb-d18d-4f36-9b23-80441f2d196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:95:9a:07:68:ed:d8:62:74:52:01:10:28: c1:98:5f:0b:cd:e6:15:e8:59:a5:59:ea:ad:1f:cb: 9c:fc:51:84:ed:f5:e0:59:59:b5:8e:2b:81:63:40: 03:ba:48:6a:dc:17:31:15:1e:56:7b:03:35:79:aa: 0e:f2:6e:ff:38:c5:c0:d3:84:68:bc:ad:d1:e5:0e: 81:82:cb:6b:7a:d2:f0:be:89:a3:38:5b:0f:ce:0e: 16:4f:9c:48:e2:5c:87:48:34:3b:73:fe:da:e2:b5: b3:1d:8c:34:fb:4e:53:36:73:e8:fa:35:bc:44:0b: bd:48:53:c3:97:ad:43:fa:a6:08:70:70:7b:1a:61: 49:df:70:b0:29:5a:89:c4:6b:ac:f5:a0:8e:3f:4b: c4:07:5d:f6:69:e6:a5:4e:3b:30:3d:41:85:1c:61: 5b:2d:2d:d5:99:ca:63:57:50:06:d8:37:25:e7:a3: 74:4e:21:a7:99:b0:f1:b8:79:19:cb:12:63:4c:6c: a6:e3:07:ee:69:bc:61:87:19:c1:a0:fe:ea:1c:29: 21:9a:3f:0d:cb:30:88:f2:33:aa:59:81:0c:ea:76: 64:01:ba:24:ea:51:be:5d:29:fc:c5:45:ac:21:8e: 1d:29:a8:40:e9:8d:ee:68:31:f9:90:98:41:6f:b7: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A5:95:97:51:85:61:EA:D3:D7:01:3C:7B:3C:6E:E8:91:B1:54:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:08:7e:57:77:d8:76:a0:9e:2b:a8:ae:55:57:c1:82:05:93: 19:51:12:18:ca:f6:83:27:72:76:75:5d:63:5f:f2:ba:f0:5a: 60:e8:1e:cb:c8:1d:4e:4f:2c:3a:79:16:be:fe:5d:2a:f2:81: 6e:d5:d5:4e:e9:75:4b:d8:88:e7:f0:eb:60:09:27:bd:12:17: da:48:01:d9:fa:7d:10:86:6d:ce:a5:73:98:8b:52:5f:80:32: 0a:56:73:9a:ea:a6:24:c9:f6:26:e6:6f:9e:e9:16:d4:4a:68: e8:b1:77:a7:4d:41:70:95:17:c9:88:30:d2:51:81:6e:01:c0: 6b:a9:62:28:db:e2:c8:41:26:b9:fe:1d:c0:b4:a2:09:f9:08: fa:7e:c9:35:1c:f8:3c:2f:2c:71:c6:67:e1:21:08:94:fc:67: e1:18:e7:15:b8:2a:04:fb:18:41:c7:aa:a5:9f:c6:cb:d2:51: da:db:04:cd:2a:41:60:b4:e2:39:02:b7:d8:9b:49:8c:dc:dc: 9b:54:e8:b6:89:d6:07:3f:7a:85:a9:ad:0d:86:85:76:e4:67: 6e:19:40:fb:64:0d:9b:48:a4:e7:e5:b6:68:6d:c5:1d:1e:63: f2:5b:da:0e:28:8a:4d:04:cc:08:d8:c8:7b:2e:a2:25:41:dc: 8c:80:02:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpjDLEGRnE6rB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk MWZiMDg3YmItZDE4ZC00ZjM2LTliMjMtODA0NDFmMmQxOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/mVmgdo7dhidFIBECjBmF8LzeYV6FmlWeqt H8uc/FGE7fXgWVm1jiuBY0ADukhq3BcxFR5WewM1eaoO8m7/OMXA04RovK3R5Q6B gstretLwvomjOFsPzg4WT5xI4lyHSDQ7c/7a4rWzHYw0+05TNnPo+jW8RAu9SFPD l61D+qYIcHB7GmFJ33CwKVqJxGus9aCOP0vEB132aealTjswPUGFHGFbLS3Vmcpj V1AG2Dcl56N0TiGnmbDxuHkZyxJjTGym4wfuabxhhxnBoP7qHCkhmj8NyzCI8jOq WYEM6nZkAbok6lG+XSn8xUWsIY4dKahA6Y3uaDH5kJhBb7fsuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSllZdRhWHq09cBPHs8buiRsVQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYIfld32HagniuorlVXwYIFkxlREhjK9oMncnZ1XWNf8rrwWmDoHsvI HU5PLDp5Fr7+XSrygW7V1U7pdUvYiOfw62AJJ70SF9pIAdn6fRCGbc6lc5iLUl+A MgpWc5rqpiTJ9ibmb57pFtRKaOixd6dNQXCVF8mIMNJRgW4BwGupYijb4shBJrn+ HcC0ogn5CPp+yTUc+DwvLHHGZ+EhCJT8Z+EY5xW4KgT7GEHHqqWfxsvSUdrbBM0q QWC04jkCt9ibSYzc3JtU6LaJ1gc/eoWprQ2GhXbkZ24ZQPtkDZtIpOfltmhtxR0e Y/Jb2g4oik0EzAjYyHsuoiVB3IyAAkA= -----END CERTIFICATE-----Generated at Sat Jan 10 20:52:55 2026 by rpki-client