This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa File: ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa (raw, json) Hash identifier: npt5n2GLTMddlp8STtiLyFZpAf0Bq0H+0YzCuY8BcUM= Subject key identifier: 49:37:21:4C:D3:41:44:18:8C:F6:91:4D:0B:6F:07:6E:57:4B:76:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C751C1417623DC4F867D7BFA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 40.132.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:14:17:62:3d:c4:f8:67:d7:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=2ed184db-9a3d-430f-98ce-7d8a4a11be07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:3c:a2:87:af:9f:1c:4d:d7:c6:32:1b:f3: f4:d9:be:2c:ff:65:44:30:af:63:63:03:72:8b:3b: 3f:e4:ae:69:1d:4c:cb:cc:89:21:65:bd:45:1c:c6: 22:b8:93:1f:a8:45:58:8c:17:68:f1:21:79:fc:64: e6:0b:a4:f3:da:52:a2:08:e3:65:6c:af:d8:72:8a: 82:8b:dc:2c:89:2e:09:ab:7c:91:21:98:11:97:93: ab:3d:82:5f:d5:60:d4:dc:5b:a0:40:fc:e8:59:8c: 27:c6:fa:fa:e3:06:b8:2e:93:44:04:5f:bb:5e:4b: 9d:da:b8:86:31:5a:dc:ba:d1:28:12:0b:12:56:44: 74:d8:30:90:51:c6:49:54:48:86:23:a3:e1:10:ce: 1e:c0:c7:63:d6:93:38:f8:00:8b:e6:5a:a6:89:ec: 33:6b:e6:f6:fc:da:96:29:e9:47:2a:c3:17:f1:c3: 12:fa:55:01:13:c1:8f:0a:28:75:2c:6c:48:bb:93: 82:71:ec:c4:0c:ce:5c:4a:e6:77:92:1f:fc:a6:7e: 8e:2e:1c:aa:8b:9b:2f:62:e5:99:da:58:10:88:72: 60:94:ad:22:a6:ed:af:f3:fd:3d:e4:0e:18:72:53: bd:ad:c5:27:73:17:56:74:f5:52:c0:48:cb:f9:ae: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:37:21:4C:D3:41:44:18:8C:F6:91:4D:0B:6F:07:6E:57:4B:76:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:08:f6:7b:e0:3c:cc:6a:8f:4f:a3:d0:83:e2:cf:9c:16:85: e2:9c:16:f1:40:16:f4:43:39:39:84:18:1a:2c:6c:6a:9c:87: 7c:a9:3a:27:b6:43:61:7b:2a:67:fe:a0:60:3a:79:c9:c0:e3: 4f:22:82:74:e8:35:53:09:f6:6e:0e:37:ab:fe:bd:46:a7:ea: cc:f3:3d:63:0a:74:9d:46:de:82:9d:ab:6d:b8:b4:ee:a1:81: a6:bb:91:b4:a7:98:c6:ed:9b:5a:51:96:eb:25:50:7e:30:02: 5e:70:79:69:31:fb:6f:6f:60:16:a8:1e:2f:4f:a0:d7:63:11: 38:7f:3a:a5:e6:4e:47:3f:63:ca:01:55:36:c9:5e:c3:d3:07: 9f:13:69:8c:d9:ea:0b:f7:d5:84:15:76:58:31:1d:22:f6:7a: fb:13:ec:72:d4:4d:88:40:28:2d:52:a3:c3:78:a8:41:60:8d: 63:7d:71:a9:84:f4:2b:24:86:68:74:6a:6c:a8:02:df:32:e1: 57:70:05:e6:56:aa:e2:7a:54:96:82:5b:d9:92:21:5a:a6:08: a7:71:9c:7f:c6:2e:f8:45:a9:b1:d1:03:0c:fb:a3:9b:9e:69: 74:8b:a4:e2:0f:88:bd:3d:11:30:09:2c:cd:ef:dc:8d:4c:83: 80:1b:c8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HBQXYj3E+GfXv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk MmVkMTg0ZGItOWEzZC00MzBmLTk4Y2UtN2Q4YTRhMTFiZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQ8ooevnxxN18YyG/P02b4s/2VEMK9jYwNy izs/5K5pHUzLzIkhZb1FHMYiuJMfqEVYjBdo8SF5/GTmC6Tz2lKiCONlbK/YcoqC i9wsiS4Jq3yRIZgRl5OrPYJf1WDU3FugQPzoWYwnxvr64wa4LpNEBF+7Xkud2riG MVrcutEoEgsSVkR02DCQUcZJVEiGI6PhEM4ewMdj1pM4+ACL5lqmiewza+b2/NqW KelHKsMX8cMS+lUBE8GPCih1LGxIu5OCcezEDM5cSuZ3kh/8pn6OLhyqi5svYuWZ 2lgQiHJglK0ipu2v8/095A4YclO9rcUncxdWdPVSwEjL+a7bZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk3IUzTQUQYjPaRTQtvB25XS3YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY4MTdhOWItMzM1Ni0z ZmYzLThlMTMtZTAzYjQ0ZjNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAI9nvgPMxqj0+j0IPiz5wWheKcFvFAFvRDOTmEGBosbGqch3ypOie2 Q2F7Kmf+oGA6ecnA408ignToNVMJ9m4ON6v+vUan6szzPWMKdJ1G3oKdq224tO6h gaa7kbSnmMbtm1pRluslUH4wAl5weWkx+29vYBaoHi9PoNdjETh/OqXmTkc/Y8oB VTbJXsPTB58TaYzZ6gv31YQVdlgxHSL2evsT7HLUTYhAKC1So8N4qEFgjWN9camE 9Cskhmh0amyoAt8y4VdwBeZWquJ6VJaCW9mSIVqmCKdxnH/GLvhFqbHRAwz7o5ue aXSLpOIPiL09ETAJLM3v3I1Mg4AbyGs= -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:43 2026 by rpki-client