This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa File: ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa (raw, json) Hash identifier: ni8nw0klfk6gcElU0i6OoixZ0fwQFwzyVecAbrL04k0= Subject key identifier: ED:97:22:1F:57:CA:C0:67:F0:B6:ED:CB:8F:B1:78:23:19:37:3D:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0698A29F43E1153A1CD108 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 174.130.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:98:a2:9f:43:e1:15:3a:1c:d1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=29eff8bd-d9d0-47f0-9747-af6f51d6f36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:29:af:99:2f:46:10:52:96:69:1b:60:cf: 6f:27:21:30:48:07:e1:4f:20:cb:7a:37:29:69:da: 8f:7d:88:db:84:a4:64:50:f7:8a:92:d3:92:f8:28: 83:96:f3:e4:41:85:71:d4:68:2f:e5:87:da:c7:39: b2:48:f6:84:42:7a:11:8e:dc:74:f5:32:90:90:8a: bd:03:0c:94:da:37:77:90:e4:ea:41:44:63:c8:c8: 0f:e5:e8:ee:a7:4c:41:f9:85:be:71:2d:3b:07:f2: d2:36:ce:62:29:d8:f2:c5:ff:45:86:12:88:c8:79: bb:12:06:72:ce:87:f0:15:dc:2d:8c:14:5d:ed:77: 06:80:87:c3:94:7c:11:6e:da:d8:77:ce:1e:c6:72: 63:66:ca:08:0b:55:28:b4:67:4f:ae:70:e3:08:99: bb:d5:5a:61:9e:f0:27:88:82:13:56:8b:0f:e0:1d: de:0f:27:3f:4e:59:4e:18:14:a2:eb:30:6e:16:83: 6f:dc:24:53:d2:d0:a0:5f:44:97:96:42:42:92:70: a2:f5:3b:ef:ad:05:10:21:92:41:08:5d:7d:69:f6: 51:cb:0e:42:d2:68:81:c9:bb:8f:63:5d:1e:4f:a9: 41:11:bd:3f:17:04:bb:00:ce:10:93:2b:8c:bc:c2: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:97:22:1F:57:CA:C0:67:F0:B6:ED:CB:8F:B1:78:23:19:37:3D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5f:bf:e6:b6:54:5e:bd:4d:44:68:2a:64:8a:15:15:94:80: 15:71:55:56:ba:3d:06:5d:91:ee:e0:63:ab:42:b6:88:f5:74: 72:a8:db:66:29:7b:fe:6e:77:2a:87:91:78:81:af:70:0c:d0: 70:d4:23:02:99:87:61:b9:25:67:c8:81:96:43:e9:6b:aa:74: 3b:01:19:80:22:fd:e9:39:55:b1:82:4d:11:0f:54:2a:66:ef: 2f:d5:c1:58:29:76:61:ed:9a:75:40:35:44:79:3c:68:f5:d7: 42:6a:51:af:4a:fc:d6:be:2f:d9:68:b5:17:00:ef:6a:a7:f1: 37:53:8c:ff:82:bc:9c:f1:c7:14:44:7a:89:c2:8d:d9:f1:68: ab:86:e9:5d:03:0f:fa:c4:f7:cc:1c:9d:51:0e:f5:4f:91:99: a8:87:c7:32:5d:15:58:30:34:b3:a8:ed:19:40:21:5d:20:f6: 52:c4:74:d0:fb:cb:14:b5:40:cb:e0:cb:d9:b3:2b:01:da:65: 1c:ff:d4:52:f7:d4:fa:e2:a2:3c:6e:bc:9d:7a:8b:1f:41:5f: 3f:78:f8:a4:f4:f2:45:d9:ba:6e:15:31:7e:16:73:7d:dd:f0: ae:a8:7f:31:5f:27:98:4f:a3:94:25:19:a0:f8:1e:06:f9:5b: 11:9f:55:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpiin0PhFToc0QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk MjllZmY4YmQtZDlkMC00N2YwLTk3NDctYWY2ZjUxZDZmMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z4pr5kvRhBSlmkbYM9vJyEwSAfhTyDLejcp adqPfYjbhKRkUPeKktOS+CiDlvPkQYVx1Ggv5YfaxzmySPaEQnoRjtx09TKQkIq9 AwyU2jd3kOTqQURjyMgP5ejup0xB+YW+cS07B/LSNs5iKdjyxf9FhhKIyHm7EgZy zofwFdwtjBRd7XcGgIfDlHwRbtrYd84exnJjZsoIC1UotGdPrnDjCJm71VphnvAn iIITVosP4B3eDyc/TllOGBSi6zBuFoNv3CRT0tCgX0SXlkJCknCi9TvvrQUQIZJB CF19afZRyw5C0miBybuPY10eT6lBEb0/FwS7AM4QkyuMvMKu+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2XIh9XysBn8Lbty4+xeCMZNz1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNjNGRjZDUtN2JiOS0z OGE3LTliMzUtNWQwNTUyY2JhMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxfv+a2VF69TURoKmSKFRWUgBVxVVa6PQZdke7gY6tCtoj1dHKo22Yp e/5udyqHkXiBr3AM0HDUIwKZh2G5JWfIgZZD6WuqdDsBGYAi/ek5VbGCTREPVCpm 7y/VwVgpdmHtmnVANUR5PGj110JqUa9K/Na+L9lotRcA72qn8TdTjP+CvJzxxxRE eonCjdnxaKuG6V0DD/rE98wcnVEO9U+RmaiHxzJdFVgwNLOo7RlAIV0g9lLEdND7 yxS1QMvgy9mzKwHaZRz/1FL31PriojxuvJ16ix9BXz94+KT08kXZum4VMX4Wc33d 8K6ofzFfJ5hPo5QlGaD4Hgb5WxGfVZM= -----END CERTIFICATE-----Generated at Sat Jan 10 04:22:42 2026 by rpki-client