This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa File: e4efbffc-2324-3f3b-be0b-927acd18aae1.roa (raw, json) Hash identifier: CFXX5zVuGwX20VGaJnSKGeyApwENycdexlVwHu3QcIY= Subject key identifier: 52:64:2A:C3:27:18:0E:E1:10:FD:C5:0C:9F:55:CC:9A:B7:A4:22:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18D6157273D286A3A6F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:8d:61:57:27:3d:28:6a:3a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=5e51a7ee-597b-41aa-a7cc-713961c2c47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:7a:36:d1:d2:80:5f:18:40:70:ca:47:f3: 37:d2:60:2c:e5:60:4e:7f:e0:dc:dd:5e:96:c0:7e: f6:80:b5:34:2e:b0:2c:a3:f0:40:bb:f8:1e:30:16: a4:6b:80:cc:b1:8c:90:fc:10:d8:64:16:32:6b:e2: 71:c0:db:48:f2:16:76:03:a1:b6:74:d6:fd:8f:2e: ee:9b:47:d2:34:e5:46:bb:c8:29:13:5c:c7:c9:d0: 00:80:01:94:3f:de:d6:b9:ef:a8:97:cc:1c:0f:54: 18:28:18:5e:b9:02:26:a5:b3:90:15:6d:c9:cf:83: 08:3d:d5:ac:b2:5b:3d:57:bd:32:4e:d0:c6:83:f8: 14:f2:73:e3:b7:a0:53:12:3f:b1:6e:95:be:cb:aa: 4b:5c:c6:5b:e2:21:60:9f:94:b3:90:7d:29:cf:05: 1b:45:ab:0e:0e:84:da:8c:1c:1a:39:fe:96:76:c5: 85:c9:38:f5:c3:76:ae:35:e5:e9:c0:e0:f7:1d:2e: 28:0b:5a:c6:eb:e1:89:ae:20:5c:be:9f:4c:96:4a: 1a:63:fc:9a:3b:1c:7c:88:ed:bd:1c:9d:1e:58:ba: 3c:8b:83:a8:77:8d:22:46:79:bc:30:d5:09:d1:a7: 2f:94:3e:b7:1a:2c:81:04:e8:3c:79:f1:c9:a8:6e: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:2A:C3:27:18:0E:E1:10:FD:C5:0C:9F:55:CC:9A:B7:A4:22:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:92:82:8d:b6:ae:d9:9b:09:b5:e1:a3:cd:7b:c3:f3:e3:39: 19:5f:49:ee:3a:de:87:e3:bb:cf:83:80:db:9d:d8:6c:b7:bc: 73:e8:5b:75:9e:42:a4:60:e2:a7:d1:40:75:ee:1e:77:7b:0b: 45:0f:cd:53:fe:f8:e2:f5:f2:80:07:12:af:c8:12:1d:02:e1: 8e:6c:be:bb:1f:1e:ac:d9:b4:88:85:bb:f9:69:f1:50:27:b2: 4c:35:e2:53:d6:2c:7c:c0:c5:38:0b:33:eb:0f:58:2d:6d:fa: 17:08:e8:7d:06:b3:a0:e7:a7:c3:a0:23:c2:87:c8:03:ef:87: 03:fd:23:f5:5c:a5:33:b9:1b:1f:23:df:38:da:36:bc:4c:f3: 01:90:b4:01:08:60:2f:80:41:89:39:6e:1d:0a:c1:b4:75:04: 47:ec:64:c3:a4:b2:41:81:56:6b:e1:11:ff:fc:10:cb:9b:0d: 53:49:82:78:72:98:c8:5e:4d:83:92:40:a0:e7:53:7b:fe:88: 3a:bb:ae:16:aa:c1:72:f7:d4:87:88:22:31:01:99:fc:5d:00: 56:50:7f:5d:26:a0:71:d3:4f:be:e7:4d:f9:d6:6e:3b:16:55: f7:74:d7:3c:29:45:e6:97:40:af:1d:8f:ac:b6:ab:57:18:9c: f0:c4:f9:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Y1hVyc9KGo6b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NWU1MWE3ZWUtNTk3Yi00MWFhLWE3Y2MtNzEzOTYxYzJjNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNp6NtHSgF8YQHDKR/M30mAs5WBOf+Dc3V6W wH72gLU0LrAso/BAu/geMBaka4DMsYyQ/BDYZBYya+JxwNtI8hZ2A6G2dNb9jy7u m0fSNOVGu8gpE1zHydAAgAGUP97Wue+ol8wcD1QYKBheuQImpbOQFW3Jz4MIPdWs sls9V70yTtDGg/gU8nPjt6BTEj+xbpW+y6pLXMZb4iFgn5SzkH0pzwUbRasODoTa jBwaOf6WdsWFyTj1w3auNeXpwOD3HS4oC1rG6+GJriBcvp9MlkoaY/yaOxx8iO29 HJ0eWLo8i4Ood40iRnm8MNUJ0acvlD63GiyBBOg8efHJqG478wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJkKsMnGA7hEP3FDJ9VzJq3pCIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRlZmJmZmMtMjMyNC0z ZjNiLWJlMGItOTI3YWNkMThhYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2Sgo22rtmbCbXho817w/PjORlfSe463ofju8+DgNud2Gy3vHPoW3We QqRg4qfRQHXuHnd7C0UPzVP++OL18oAHEq/IEh0C4Y5svrsfHqzZtIiFu/lp8VAn skw14lPWLHzAxTgLM+sPWC1t+hcI6H0Gs6Dnp8OgI8KHyAPvhwP9I/VcpTO5Gx8j 3zjaNrxM8wGQtAEIYC+AQYk5bh0KwbR1BEfsZMOkskGBVmvhEf/8EMubDVNJgnhy mMheTYOSQKDnU3v+iDq7rhaqwXL31IeIIjEBmfxdAFZQf10moHHTT77nTfnWbjsW Vfd01zwpReaXQK8dj6y2q1cYnPDE+Ug= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:33 2026 by rpki-client