This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa File: d95407e8-1a1c-31d7-a321-c8d942be6426.roa (raw, json) Hash identifier: Z3+9GByW//XVs5PP6pDdwFNkEwO+E21avk3LG1zO0nk= Subject key identifier: BC:81:46:E5:D0:64:B0:4D:41:01:D6:1C:10:E5:E0:F8:BF:A9:17:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15324FC4141EC527B1720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:53:24:fc:41:41:ec:52:7b:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=6ebb6603-977e-4d88-8ce4-a60eae236047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:a0:01:ec:98:20:1e:9a:69:81:ed:11:82: dc:64:b0:3e:84:d6:f1:13:88:68:e8:a6:a0:41:5f: 02:26:c5:79:cf:98:4d:c0:6a:8b:db:3d:9e:9f:82: 39:c0:92:4d:6b:a3:57:45:06:6c:60:0d:72:d7:c3: a6:8d:25:03:eb:23:1b:56:e8:17:6b:09:cb:89:86: b6:0a:4d:cc:5b:1d:26:08:84:9c:72:25:46:26:f0: 19:ec:62:1f:03:81:4f:ae:dc:db:c9:27:f8:a7:b0: 49:36:27:ab:ea:66:18:3c:5d:92:22:43:5a:93:a3: c9:02:ee:82:78:65:b6:f7:3a:d9:90:86:30:15:60: 28:39:4e:96:01:6d:5d:cc:36:20:e7:19:51:94:67: d6:fa:de:4d:38:ba:45:3d:87:b3:7f:ba:ea:1f:7d: b0:bb:fd:dc:60:50:9f:6b:80:c1:af:a5:8b:ed:ec: 2d:fc:ed:95:2f:12:9e:41:6a:f4:4a:c7:16:63:7d: b6:91:4a:06:c3:5c:56:c0:54:6c:eb:bb:b9:1b:6d: d5:82:d9:e8:d8:20:d7:4e:83:58:00:92:5b:e9:cb: 9d:b1:71:da:e5:ac:ac:bb:4c:68:b5:85:26:23:a0: 5c:63:ca:e6:99:69:75:d1:69:97:02:9a:d8:26:a6: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:81:46:E5:D0:64:B0:4D:41:01:D6:1C:10:E5:E0:F8:BF:A9:17:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bb:e0:61:77:fe:f0:cb:72:6b:53:cf:7a:94:9f:6f:c2:89: d6:14:a2:bc:99:e6:44:71:a5:60:f5:e7:16:fd:90:cc:cd:bd: 2d:97:82:e9:4c:55:44:31:e2:4d:bd:f0:f6:a7:16:28:57:5d: 5b:bf:f6:61:08:ba:a7:aa:b5:3d:1b:e9:8f:3c:5b:92:2a:32: 19:51:18:93:11:13:5e:21:04:bc:76:50:b9:94:46:b2:56:5f: a5:8f:26:94:46:71:34:76:40:87:6d:17:08:ce:62:d5:14:e1: d8:de:fb:8d:26:02:6d:75:79:48:20:2d:1e:19:aa:a7:61:da: a5:07:55:c1:6f:15:ab:a5:a6:8c:f3:f4:dd:eb:fe:a1:83:72: 57:6b:a8:0a:27:1e:95:3b:3c:30:4f:4c:57:ac:2a:cb:21:88: 39:76:9b:bc:29:b4:2d:b6:65:f4:ac:a9:f0:af:bc:90:4c:1a: 5b:d3:fc:0d:97:76:00:fb:93:35:69:0e:47:78:47:53:b3:97: b7:d1:49:c2:cd:31:97:b7:2b:d8:f4:87:37:5f:ed:8a:00:39: 46:25:b7:d9:13:ee:28:f3:98:79:ef:2f:76:c2:ae:24:fb:82: 20:15:1a:2b:5f:e9:9c:79:ed:f4:59:b1:6f:1b:39:28:c3:ec: a1:9e:19:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0VMk/EFB7FJ7FyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NmViYjY2MDMtOTc3ZS00ZDg4LThjZTQtYTYwZWFlMjM2MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVWgAeyYIB6aaYHtEYLcZLA+hNbxE4ho6Kag QV8CJsV5z5hNwGqL2z2en4I5wJJNa6NXRQZsYA1y18OmjSUD6yMbVugXawnLiYa2 Ck3MWx0mCIScciVGJvAZ7GIfA4FPrtzbySf4p7BJNier6mYYPF2SIkNak6PJAu6C eGW29zrZkIYwFWAoOU6WAW1dzDYg5xlRlGfW+t5NOLpFPYezf7rqH32wu/3cYFCf a4DBr6WL7ewt/O2VLxKeQWr0SscWY322kUoGw1xWwFRs67u5G23Vgtno2CDXToNY AJJb6cudsXHa5aysu0xotYUmI6BcY8rmmWl10WmXAprYJqa7HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyBRuXQZLBNQQHWHBDl4Pi/qRc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk1NDA3ZTgtMWExYy0z MWQ3LWEzMjEtYzhkOTQyYmU2NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAq74GF3/vDLcmtTz3qUn2/CidYUoryZ5kRxpWD15xb9kMzNvS2X gulMVUQx4k298PanFihXXVu/9mEIuqeqtT0b6Y88W5IqMhlRGJMRE14hBLx2ULmU RrJWX6WPJpRGcTR2QIdtFwjOYtUU4dje+40mAm11eUggLR4Zqqdh2qUHVcFvFaul pozz9N3r/qGDcldrqAonHpU7PDBPTFesKsshiDl2m7wptC22ZfSsqfCvvJBMGlvT /A2XdgD7kzVpDkd4R1Ozl7fRScLNMZe3K9j0hzdf7YoAOUYlt9kT7ijzmHnvL3bC riT7giAVGitf6Zx57fRZsW8bOSjD7KGeGQE= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:37 2026 by rpki-client