This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa File: 22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa (raw, json) Hash identifier: y7hc5nhmaLRQ19ubOzpS3H8qJr/l1GAInslt7ut6SUk= Subject key identifier: 8C:4F:59:9E:25:EC:16:59:15:B1:9E:E9:F9:97:84:A1:70:DD:7D:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14BD8F30CFA4B61A90500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 70.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4b:d8:f3:0c:fa:4b:61:a9:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=ba2e9f75-f507-401d-ba06-29804158a138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:35:e7:ac:46:54:93:ad:79:72:02:28:c1: 7e:78:75:00:ed:1d:65:f7:5f:83:76:ff:48:94:05: 3e:e6:1d:49:f8:58:42:1b:b8:65:4f:e7:fc:6f:fa: 8a:f0:21:95:a0:24:36:68:0a:a4:2a:d9:6e:22:a8: 87:9d:8e:fa:a7:78:31:da:65:3e:6f:27:cb:f6:6e: 8f:74:56:53:f8:2d:d9:87:0c:1e:17:80:c0:39:f8: 0e:80:67:73:21:d1:c4:f1:e9:2e:6e:fc:71:f6:ce: 14:56:35:16:3e:54:a7:e0:17:14:63:a2:3b:a3:d1: ac:71:f8:9e:07:88:87:d6:6b:31:3c:6a:d3:b7:0f: a4:ea:3b:38:f8:8c:fd:0c:57:d2:dd:ca:a6:08:34: 54:2b:a0:6d:c9:fc:a1:d8:3d:2b:03:5c:be:6e:43: 06:60:c1:cb:4c:11:8b:79:8f:b7:2e:62:a7:f3:bf: 90:4b:b1:22:93:65:69:87:4b:08:8e:a8:08:b0:56: db:be:5e:63:dd:c6:46:5c:55:8d:f9:c9:ca:a1:c0: 40:8c:ec:c8:07:bc:c6:b0:5e:4e:54:ee:1c:16:4b: e3:c4:c2:a3:c6:c6:46:13:c6:f8:fe:5e:c3:3f:e2: 79:34:3a:d5:94:d2:e0:da:81:c1:2c:68:cd:19:12: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:59:9E:25:EC:16:59:15:B1:9E:E9:F9:97:84:A1:70:DD:7D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 70.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:09:37:40:ed:90:e2:64:38:54:37:8e:20:52:7b:1f:53:ef: 96:94:2d:24:ab:39:87:62:91:f6:a7:46:17:d7:78:69:58:f6: 78:8e:3f:5f:36:aa:3c:08:0c:a5:8a:59:77:6a:ec:be:7b:eb: a8:a0:86:94:6e:9d:57:0e:41:0b:3b:1c:d8:d4:d3:e1:32:35: d5:6f:e9:17:3d:66:e7:b8:e8:96:97:a7:b0:5c:bc:ec:45:e7: 33:5f:1e:1d:87:96:8e:91:73:b2:f6:dd:79:59:a1:2e:5f:2f: ea:b6:c1:32:fc:f2:c8:ef:51:ae:42:12:25:ef:48:40:3e:6f: 74:10:58:b5:63:f5:de:8c:c3:55:a9:ce:79:c1:82:0f:25:04: 58:bb:b1:d3:2a:af:e4:24:14:72:bd:c4:ab:3c:73:5d:31:dd: d7:8b:e2:1e:71:28:ce:98:17:65:70:a5:b9:f7:fd:67:57:f8: 21:47:22:73:0c:60:b7:ab:63:9b:fa:c5:d2:dc:80:f4:92:9a: f4:d9:63:1d:57:1e:7a:35:89:fc:0e:2d:5a:b2:92:aa:f9:56: fd:82:f4:70:49:a3:b9:23:f0:04:4b:92:38:12:e6:99:f0:e9: 2b:c8:fa:bb:8a:e5:31:a3:b6:91:8f:1a:20:20:45:ab:e1:9d: 52:bf:d4:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExQ0UvY8wz6S2GpBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YmEyZTlmNzUtZjUwNy00MDFkLWJhMDYtMjk4MDQxNThhMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt64156xGVJOteXICKMF+eHUA7R1l91+Ddv9I lAU+5h1J+FhCG7hlT+f8b/qK8CGVoCQ2aAqkKtluIqiHnY76p3gx2mU+byfL9m6P dFZT+C3ZhwweF4DAOfgOgGdzIdHE8ekubvxx9s4UVjUWPlSn4BcUY6I7o9Gscfie B4iH1msxPGrTtw+k6js4+Iz9DFfS3cqmCDRUK6Btyfyh2D0rA1y+bkMGYMHLTBGL eY+3LmKn87+QS7Eik2Vph0sIjqgIsFbbvl5j3cZGXFWN+cnKocBAjOzIB7zGsF5O VO4cFkvjxMKjxsZGE8b4/l7DP+J5NDrVlNLg2oHBLGjNGRJndQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIxPWZ4l7BZZFbGe6fmXhKFw3X2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJmYjIzZDktN2Q3OS0z YTUxLTg2Y2QtNWQwM2U3ZTZhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARiswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcAk3QO2Q4mQ4VDeOIFJ7H1PvlpQtJKs5h2KR9qdGF9d4aVj2eI4/Xzaq PAgMpYpZd2rsvnvrqKCGlG6dVw5BCzsc2NTT4TI11W/pFz1m57jolpensFy87EXn M18eHYeWjpFzsvbdeVmhLl8v6rbBMvzyyO9RrkISJe9IQD5vdBBYtWP13ozDVanO ecGCDyUEWLux0yqv5CQUcr3EqzxzXTHd14viHnEozpgXZXCluff9Z1f4IUcicwxg t6tjm/rF0tyA9JKa9NljHVceejWJ/A4tWrKSqvlW/YL0cEmjuSPwBEuSOBLmmfDp K8j6u4rlMaO2kY8aICBFq+GdUr/UEg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:00:04 2026 by rpki-client