This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa File: fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa (raw, json) Hash identifier: JYvXfb6Kx72oDV94ITUoLTJlfe80+zo2oJZDWCv+vj0= Subject key identifier: CA:22:45:4A:D8:82:F9:1E:8F:8A:DB:D0:78:47:48:D9:0F:76:A8:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D185C50A86CBBC73447080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:85:c5:0a:86:cb:bc:73:44:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=c5e2adc2-f9be-459e-b416-050a71b4b044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:0c:ef:6a:09:7c:47:9a:e9:1e:ce:be:93: 9b:02:12:90:a1:62:f5:85:74:4f:80:3d:e3:fa:b5: 58:17:84:fd:93:2e:cd:f9:a5:3f:80:57:cf:57:53: 07:f7:25:49:31:56:5e:ad:04:2f:e3:87:6d:96:18: db:4a:85:de:70:02:28:5e:5b:fa:02:a6:92:fb:b0: 83:8d:c8:73:fa:5f:8a:1f:70:f7:82:bd:0c:db:2b: 50:1f:9f:98:d4:cb:f0:c2:34:e1:47:0a:12:14:d9: b2:32:0e:f8:af:a0:bb:da:e2:4f:ec:df:83:d7:65: 73:ac:ad:55:c7:be:11:50:0f:09:74:0a:ce:e2:e5: e4:d6:9e:87:e4:ae:16:23:a7:da:7d:13:49:29:58: 01:f7:ce:18:6d:0a:5b:67:ea:a0:6f:62:10:4e:4a: ea:af:f1:0c:38:cb:ef:be:7d:ec:5a:3c:b4:f2:f9: de:2f:4a:16:ad:96:37:6f:97:c2:ea:6a:21:7d:26: 3c:22:b0:29:a6:e2:73:1f:52:ea:4d:e8:dc:30:7d: ec:c4:83:a4:9a:8d:e3:e1:76:b4:65:ec:36:8b:3c: 7e:82:4b:ed:5b:01:d7:11:18:17:c1:da:3d:82:46: 88:63:9b:d6:3d:1a:19:6e:3f:2f:53:3e:21:c3:d4: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:45:4A:D8:82:F9:1E:8F:8A:DB:D0:78:47:48:D9:0F:76:A8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c5:c8:9a:0c:e5:59:4c:83:59:f5:79:dd:80:ce:7c:48:c4: 49:66:61:44:d0:36:e8:5e:ce:ff:2c:74:51:07:16:b3:0e:20: c0:75:d2:ef:d5:99:b2:e6:f9:7e:c2:9d:09:57:a4:53:7e:20: 96:1f:72:70:65:9a:50:f0:f4:3b:f3:ff:8c:fe:b0:c4:01:40: 9d:2f:eb:86:45:1d:23:2b:51:48:32:a1:50:3c:92:a4:59:e0: 03:69:2c:7e:52:0b:23:5d:e0:d3:9a:89:ca:64:86:0e:55:ad: e2:9b:7f:e1:cd:8f:ac:61:81:ea:ed:2e:e3:4b:0f:47:00:23: 35:48:51:2d:98:6b:c9:8a:fa:32:b2:1c:42:49:b0:19:c3:f3: 87:12:38:6b:26:13:79:0d:5b:df:c7:9b:fb:44:4f:ab:b8:2e: 4a:28:3d:80:e5:1e:a7:0d:50:68:c1:8e:1a:f3:13:18:bb:e9: 8c:5f:dc:f8:97:47:36:71:e8:ce:94:eb:03:d9:2c:49:fe:0d: c0:8a:44:f3:b0:3c:26:e8:a3:05:c9:10:f7:d4:b4:4b:b4:a5: 5f:b4:69:1e:8e:d2:a1:ba:25:74:0c:04:e1:1f:e7:d6:ee:0b: 0d:84:a1:c1:39:5e:3f:6f:93:65:1a:97:57:d3:5c:6f:8e:dc: 4e:f8:6d:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YXFCobLvHNEcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YzVlMmFkYzItZjliZS00NTllLWI0MTYtMDUwYTcxYjRiMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0M72oJfEea6R7OvpObAhKQoWL1hXRPgD3j +rVYF4T9ky7N+aU/gFfPV1MH9yVJMVZerQQv44dtlhjbSoXecAIoXlv6AqaS+7CD jchz+l+KH3D3gr0M2ytQH5+Y1MvwwjThRwoSFNmyMg74r6C72uJP7N+D12VzrK1V x74RUA8JdArO4uXk1p6H5K4WI6fafRNJKVgB984YbQpbZ+qgb2IQTkrqr/EMOMvv vn3sWjy08vneL0oWrZY3b5fC6mohfSY8IrAppuJzH1LqTejcMH3sxIOkmo3j4Xa0 Zew2izx+gkvtWwHXERgXwdo9gkaIY5vWPRoZbj8vUz4hw9R64QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMoiRUrYgvkej4rb0HhHSNkPdqj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVkMWM2N2MtZGIyMi0z NDgzLWIyZTMtZjU5NmUwN2RiY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV8XImgzlWUyDWfV53YDOfEjESWZhRNA26F7O/yx0UQcWsw4gwHXS 79WZsub5fsKdCVekU34glh9ycGWaUPD0O/P/jP6wxAFAnS/rhkUdIytRSDKhUDyS pFngA2ksflILI13g05qJymSGDlWt4pt/4c2PrGGB6u0u40sPRwAjNUhRLZhryYr6 MrIcQkmwGcPzhxI4ayYTeQ1b38eb+0RPq7guSig9gOUepw1QaMGOGvMTGLvpjF/c +JdHNnHozpTrA9ksSf4NwIpE87A8JuijBckQ99S0S7SlX7RpHo7SoboldAwE4R/n 1u4LDYShwTleP2+TZRqXV9Ncb47cTvhtRg== -----END CERTIFICATE-----Generated at Sat Jan 10 20:56:09 2026 by rpki-client