This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa File: fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa (raw, json) Hash identifier: JE1IZir8P849t71qrHvr84XeGoLMWn1f+XW/QYceDVg= Subject key identifier: BA:FA:EC:CB:9B:51:01:B3:51:1D:89:58:1C:19:07:08:56:75:5B:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D156B895CFCFE358045814 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:56:b8:95:cf:cf:e3:58:04:58:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=98624451-7522-42c6-b80e-3668ad9d2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:1c:b9:f7:bc:75:5c:32:dc:b8:10:49:fa: 74:a6:3e:57:9e:a9:63:8e:84:e3:5a:df:9b:fa:77: 4c:6d:8b:93:92:f0:4e:0c:b8:70:ad:43:22:4b:77: c5:13:de:22:b8:38:2c:a0:5a:10:17:d3:17:39:7b: 85:fd:96:20:48:53:ac:e3:b3:61:61:98:69:4c:5b: c7:42:13:6a:1e:b6:fb:b7:e7:bf:9b:0e:69:d2:fb: 98:65:86:eb:e0:a2:69:dc:4d:28:67:b0:f2:09:68: 28:aa:46:eb:db:e4:ac:72:cc:9a:4e:9a:f5:cf:30: af:b4:57:07:9a:0b:fa:15:25:73:88:fd:77:d4:4f: e1:f9:f0:e0:fa:82:8b:2f:6c:d5:27:74:71:a2:04: f0:7f:1a:df:d2:bc:07:11:d0:4b:04:57:f2:71:57: 38:40:66:9c:d2:59:98:ea:3a:4f:7e:38:fb:d6:a6: 9f:14:e3:b9:f0:cb:cc:93:2c:2e:e6:8d:31:fe:c7: 1a:32:50:fc:61:b6:e1:1d:a1:de:b2:01:6c:94:33: 52:f1:df:b7:d8:a8:d1:62:79:da:dd:96:de:81:2d: ed:02:af:da:5d:4f:49:75:f2:78:af:3d:55:8a:dc: 64:87:4a:66:91:2b:4b:c1:ca:33:47:98:5f:91:85: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:EC:CB:9B:51:01:B3:51:1D:89:58:1C:19:07:08:56:75:5B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:74:b7:67:24:fc:13:80:4b:c7:65:7a:5c:40:05:1c:0b:cf: 1b:43:06:14:78:92:28:08:ad:e5:15:66:b5:55:d7:ab:fb:82: 6b:35:7b:70:56:30:4b:73:76:a3:b0:2b:c3:79:61:17:96:db: 7a:c5:74:0a:52:90:5e:c3:1c:c3:c1:a1:03:ed:b7:c3:d4:09: de:63:ef:5e:fa:da:2c:be:a8:6e:10:92:17:a3:27:b8:5d:b1: 87:97:46:40:29:a7:cf:ab:e7:f9:12:72:f7:fc:52:c6:e7:3b: 38:17:11:61:aa:4a:cf:3e:a7:9d:85:68:07:02:ab:c2:a4:50: 76:57:77:09:03:f5:9e:92:97:4b:ab:23:d2:1c:3d:25:c1:bd: 33:21:b0:b2:86:d9:65:3e:66:a8:f8:86:c4:62:38:01:b9:a1: e2:b9:01:2c:8a:64:d2:12:d8:55:e0:e6:e7:8e:0b:2f:97:55: 41:0c:9e:e6:f7:b0:bc:8a:a6:65:63:71:6b:c1:82:ef:77:41: 76:62:f0:0b:06:a7:8b:80:7d:99:ab:27:d5:66:7f:12:bc:1f: 35:e7:79:53:96:5b:ec:0d:fe:7a:3a:59:9e:df:6a:a4:6e:7d: 1d:65:75:63:0c:78:fe:4d:3e:3c:7a:08:25:7d:9a:44:ca:39: 1f:4a:8a:1d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0Va4lc/P41gEWBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTg2MjQ0NTEtNzUyMi00MmM2LWI4MGUtMzY2OGFkOWQyNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoMcufe8dVwy3LgQSfp0pj5XnqljjoTjWt+b +ndMbYuTkvBODLhwrUMiS3fFE94iuDgsoFoQF9MXOXuF/ZYgSFOs47NhYZhpTFvH QhNqHrb7t+e/mw5p0vuYZYbr4KJp3E0oZ7DyCWgoqkbr2+SscsyaTpr1zzCvtFcH mgv6FSVziP131E/h+fDg+oKLL2zVJ3RxogTwfxrf0rwHEdBLBFfycVc4QGac0lmY 6jpPfjj71qafFOO58MvMkywu5o0x/scaMlD8YbbhHaHesgFslDNS8d+32KjRYnna 3ZbegS3tAq/aXU9JdfJ4rz1Vitxkh0pmkStLwcozR5hfkYUYJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLr67MubUQGzUR2JWBwZBwhWdVtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmU5NzJlNDgtNzRhMC0z NWI5LWIwZTMtYjEzNjAzM2Q0ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD3S3ZyT8E4BLx2V6XEAFHAvPG0MGFHiSKAit5RVmtVXXq/uCazV7 cFYwS3N2o7Arw3lhF5bbesV0ClKQXsMcw8GhA+23w9QJ3mPvXvraLL6obhCSF6Mn uF2xh5dGQCmnz6vn+RJy9/xSxuc7OBcRYapKzz6nnYVoBwKrwqRQdld3CQP1npKX S6sj0hw9JcG9MyGwsobZZT5mqPiGxGI4Abmh4rkBLIpk0hLYVeDm544LL5dVQQye 5vewvIqmZWNxa8GC73dBdmLwCwani4B9masn1WZ/ErwfNed5U5Zb7A3+ejpZnt9q pG59HWV1Ywx4/k0+PHoIJX2aRMo5H0qKHQ== -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:01 2026 by rpki-client