This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa File: d7b45522-19e4-3b2e-845e-1856072f9fd4.roa (raw, json) Hash identifier: ODey/ip9tzoywvv2efrEhc45yCGg0gQU9rML4z/9bD0= Subject key identifier: D9:5A:41:7E:C1:3F:BE:02:B7:46:E1:0F:90:4C:FA:E3:9D:9E:7E:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D181B655EFD3F8CB0F6820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 209.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:81:b6:55:ef:d3:f8:cb:0f:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=cf66e1b9-f39b-4477-8445-e8aac2755d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:c4:f8:6c:6a:10:9b:3f:7b:3b:d4:61:01: 7b:31:c4:9a:94:31:32:06:19:ca:f9:52:3f:63:b9: 38:7b:c0:e6:33:f1:7d:38:b3:a1:73:4f:7b:b4:d9: 81:05:2b:36:7a:c3:a2:1f:b9:b0:c0:63:d8:e8:7d: df:a3:a5:3c:3d:7e:37:d2:bf:d2:f9:50:30:d3:17: 63:27:77:37:30:6d:65:d9:43:2c:a0:d5:6b:0b:e9: 5a:0f:fe:9f:5a:95:0e:0e:d8:fb:e2:3e:80:64:6e: 05:f7:e1:fd:08:3d:ac:06:36:d8:86:2a:35:07:e9: cf:5e:40:b9:73:9c:34:87:14:9e:ba:24:ef:85:f8: 6d:c7:22:97:ae:b3:88:66:27:64:0e:d8:ba:fa:b2: eb:c7:b4:7e:e0:1e:0d:7a:a4:2a:c3:6e:74:b4:52: 35:17:ff:22:0f:97:cf:6c:44:29:a9:ac:db:69:97: 2a:0a:77:99:b5:04:3b:0b:e7:90:8d:12:d3:9d:99: 8c:66:b6:5b:44:b1:50:d4:f3:5a:5a:a1:65:50:84: b7:49:5b:9d:69:a6:0c:d3:f3:97:93:da:5a:01:a9: c4:f9:2e:96:2f:89:77:38:0e:6b:d8:c6:8c:46:84: 93:df:4b:7b:47:fc:82:4e:8d:9f:4d:15:bd:7f:df: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5A:41:7E:C1:3F:BE:02:B7:46:E1:0F:90:4C:FA:E3:9D:9E:7E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:ee:b1:83:28:37:94:f7:da:51:d9:46:ae:23:44:fb:92: fb:63:d2:f8:37:57:60:bb:ec:5d:7a:e1:a1:92:1d:e1:f2:bb: 96:90:4a:fc:5b:5b:3b:e0:c2:19:19:f7:8e:32:45:2a:a9:4e: 19:63:26:64:ab:d3:cd:0a:61:a7:ca:5f:76:a5:40:d2:be:9b: 14:5b:92:0e:94:bd:1e:3d:5d:84:03:7d:4c:52:ad:e1:64:ed: 38:60:5c:22:1a:38:37:be:ae:df:b1:0c:ba:4c:dd:73:71:16: 47:ba:39:41:f5:a8:b5:a2:6d:83:0d:ba:bf:3f:0a:43:9b:12: 2c:77:df:11:ea:df:ac:e4:b1:9f:a8:2e:7d:7e:f1:d8:ed:81: 07:26:14:22:c3:b9:5b:66:54:bc:72:46:70:4d:1d:f1:13:f9: d9:e1:f4:ea:e9:31:82:d6:cd:71:f0:c2:64:85:ff:de:be:75: 23:4f:0c:24:ae:a5:8b:38:e0:fb:03:e5:df:ad:2c:68:fe:ec: b5:8c:c9:9e:a1:57:0b:da:17:97:41:9d:f4:60:40:4d:e7:2c: 3c:a2:02:14:ba:11:d2:fc:70:cc:0f:fe:99:b6:ab:8d:c0:6a: b0:14:74:2e:02:00:5b:36:bf:36:fc:66:66:6a:24:33:45:db: 37:6e:e6:f7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExQ0YG2Ve/T+MsPaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk Y2Y2NmUxYjktZjM5Yi00NDc3LTg0NDUtZThhYWMyNzU1ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq3E+GxqEJs/ezvUYQF7McSalDEyBhnK+VI/ Y7k4e8DmM/F9OLOhc097tNmBBSs2esOiH7mwwGPY6H3fo6U8PX430r/S+VAw0xdj J3c3MG1l2UMsoNVrC+laD/6fWpUODtj74j6AZG4F9+H9CD2sBjbYhio1B+nPXkC5 c5w0hxSeuiTvhfhtxyKXrrOIZidkDti6+rLrx7R+4B4NeqQqw250tFI1F/8iD5fP bEQpqazbaZcqCneZtQQ7C+eQjRLTnZmMZrZbRLFQ1PNaWqFlUIS3SVudaaYM0/OX k9paAanE+S6WL4l3OA5r2MaMRoST30t7R/yCTo2fTRW9f9/POQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNlaQX7BP74Ct0bhD5BM+uOdnn53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdiNDU1MjItMTllNC0z YjJlLTg0NWUtMTg1NjA3MmY5ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFUPusYMoN5T32lHZRq4jRPuS+2PS+DdXYLvsXXrhoZId4fK7lpBK/Ftb O+DCGRn3jjJFKqlOGWMmZKvTzQphp8pfdqVA0r6bFFuSDpS9Hj1dhAN9TFKt4WTt OGBcIho4N76u37EMukzdc3EWR7o5QfWotaJtgw26vz8KQ5sSLHffEerfrOSxn6gu fX7x2O2BByYUIsO5W2ZUvHJGcE0d8RP52eH06ukxgtbNcfDCZIX/3r51I08MJK6l izjg+wPl360saP7stYzJnqFXC9oXl0Gd9GBATecsPKICFLoR0vxwzA/+mbarjcBq sBR0LgIAWza/NvxmZmokM0XbN27m9w== -----END CERTIFICATE-----Generated at Sun Jan 18 09:00:40 2026 by rpki-client