This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa File: e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa (raw, json) Hash identifier: OnuIyFDGdTamJyW4dbCvXKcpRCocRQ/ZYLMvMCF5POs= Subject key identifier: A5:C3:E5:44:09:6F:C3:32:62:94:1C:D7:B8:84:70:28:5B:E2:22:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D174A7BC5995FF05748C20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7018 IP address blocks: 173.186.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:74:a7:bc:59:95:ff:05:74:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=37201625-c7dc-476d-ad13-b16f5c99a75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:70:6d:75:43:0b:8c:f6:b6:5b:7d:65:f0: 47:83:dd:f5:8f:e7:a4:e8:ae:05:d1:da:96:f1:e8: 0a:2f:83:84:e3:6b:62:f4:a5:f2:c5:44:31:f4:66: 41:93:68:da:20:48:29:2b:6e:c9:5d:62:e9:47:3e: 45:54:5e:c6:83:6c:be:49:9f:ff:38:bd:74:81:55: 14:09:fd:56:5e:a5:63:5b:19:2d:60:7d:17:de:33: 0b:ce:18:86:64:4e:fe:57:22:ca:a3:d3:c7:3b:ae: 69:2b:6e:cd:02:3b:d1:02:78:15:7d:a2:96:30:6d: be:92:26:6a:9d:ce:9b:87:81:40:d8:31:a9:7c:e5: f7:0a:7f:65:53:12:65:9a:cd:7e:d9:de:8d:e4:44: 30:7c:4f:b3:8f:b1:6c:2b:a2:07:74:24:5c:4e:1d: be:5e:2d:31:3e:38:ff:9c:2d:45:00:0f:1a:0e:19: e7:59:1e:57:54:8a:28:67:f7:dd:04:70:fc:b9:be: 63:77:ac:91:3b:d5:fb:89:c8:e8:21:1f:be:33:fc: d5:dc:da:45:f2:94:2d:69:8b:d1:f4:d9:a2:51:3e: 75:87:41:24:12:cf:18:b0:9e:91:8c:5d:8b:a6:62: e2:ea:34:63:33:4b:f3:0a:59:c8:60:ea:db:e4:58: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:E5:44:09:6F:C3:32:62:94:1C:D7:B8:84:70:28:5B:E2:22:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:35:6a:ea:3c:e4:2e:c4:d6:3c:cd:57:06:5e:18:83:13:f0: d2:8c:f5:94:37:45:1f:8b:eb:89:e3:c8:e5:88:0b:76:47:dd: e2:9e:d3:52:bf:5a:89:4d:0c:ba:7c:ef:51:35:00:84:6e:ea: 9b:af:ed:c8:84:4d:a4:e8:ae:c0:27:15:23:b1:40:83:e0:7a: 6c:3a:71:46:4e:18:70:0c:1f:67:f4:b4:b7:f0:db:a8:3d:e1: 6b:a6:d4:62:d9:a4:ee:6c:6d:c3:90:8e:15:b1:89:11:72:0f: c6:3a:d3:c7:c9:5d:c7:e7:54:e1:9a:c7:da:7a:8c:ba:7b:d1: 36:04:70:a2:dc:8d:7f:f0:e9:65:e4:93:d2:df:82:ce:3f:2c: 97:2c:0d:d6:78:db:fd:8a:ab:25:aa:6a:9c:f7:52:02:01:d9: a7:57:3b:88:c9:e3:ae:f9:6a:f1:10:83:4e:41:e1:92:57:92: 58:d4:52:81:98:66:ea:1d:56:0e:5f:29:9d:17:57:71:41:22: 31:28:3a:48:8d:96:dd:d3:9c:7e:f5:3d:ea:8f:ec:b9:04:29: 1f:de:39:64:da:23:ec:f3:01:50:4a:a2:26:da:7b:da:24:9c: 12:ab:4c:a1:42:db:1d:0e:99:3c:cc:25:c4:ad:40:3c:d5:c2: 4f:9b:f5:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0XSnvFmV/wV0jCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MzcyMDE2MjUtYzdkYy00NzZkLWFkMTMtYjE2ZjVjOTlhNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/lwbXVDC4z2tlt9ZfBHg931j+ek6K4F0dqW 8egKL4OE42ti9KXyxUQx9GZBk2jaIEgpK27JXWLpRz5FVF7Gg2y+SZ//OL10gVUU Cf1WXqVjWxktYH0X3jMLzhiGZE7+VyLKo9PHO65pK27NAjvRAngVfaKWMG2+kiZq nc6bh4FA2DGpfOX3Cn9lUxJlms1+2d6N5EQwfE+zj7FsK6IHdCRcTh2+Xi0xPjj/ nC1FAA8aDhnnWR5XVIooZ/fdBHD8ub5jd6yRO9X7icjoIR++M/zV3NpF8pQtaYvR 9NmiUT51h0EkEs8YsJ6RjF2LpmLi6jRjM0vzClnIYOrb5FjcYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXD5UQJb8MyYpQc17iEcChb4iLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgzOTgyODAtNTAxNy0z ZmQ3LWFhM2MtZTJiOWYyN2YzNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw1auo85C7E1jzNVwZeGIMT8NKM9ZQ3RR+L64njyOWIC3ZH3eKe01K/ WolNDLp871E1AIRu6puv7ciETaTorsAnFSOxQIPgemw6cUZOGHAMH2f0tLfw26g9 4Wum1GLZpO5sbcOQjhWxiRFyD8Y608fJXcfnVOGax9p6jLp70TYEcKLcjX/w6WXk k9Lfgs4/LJcsDdZ42/2KqyWqapz3UgIB2adXO4jJ4675avEQg05B4ZJXkljUUoGY ZuodVg5fKZ0XV3FBIjEoOkiNlt3TnH71PeqP7LkEKR/eOWTaI+zzAVBKoibae9ok nBKrTKFC2x0OmTzMJcStQDzVwk+b9ZQ= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:51 2026 by rpki-client