This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa File: 8968e430-8f77-32f3-9204-563c171a1df0.roa (raw, json) Hash identifier: 9m5B21VopsVDR9m54BxaSEHkV4CMB7XCFsBQBEGFGng= Subject key identifier: C9:E6:5A:FE:20:21:F6:3C:94:47:50:4B:E5:03:F5:BE:A8:E5:EC:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C7C16ABE189C441A97244D180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa Signing time: Sun 11 Jan 2026 02:00:30 +0000 ROA not before: Sun 11 Jan 2026 02:00:30 +0000 ROA not after: Sat 11 Apr 2026 01:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7c:16:ab:e1:89:c4:41:a9:72:44:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 11 02:00:30 2026 GMT Not After : Apr 11 01:00:30 2026 GMT Subject: CN=0d73c1b5-9f00-4e51-87f1-112276cc61aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:63:3f:37:d8:1f:93:ba:c5:b1:0b:0f:71: 7e:dc:e6:c8:ab:ad:db:fd:07:f8:08:19:5c:8b:53: a9:f9:18:48:df:f2:d9:03:38:a7:d4:1e:21:1b:e4: 9d:ce:cd:9d:d7:83:84:8e:f2:55:4d:0c:1c:5b:ca: 75:57:72:cd:f6:2e:1b:0f:4e:98:6c:f6:74:cc:0e: 0c:89:1e:6b:36:dc:8e:14:38:bb:8b:31:3c:fe:9b: d2:ed:82:a6:09:49:ad:bb:08:64:b9:7d:98:f9:ef: d1:a1:3d:7e:c0:a7:9c:c0:22:53:b0:fc:ea:34:1e: 71:32:5a:a2:75:44:55:59:26:73:66:42:a4:08:30: 6e:7a:b0:1e:d5:6d:2b:24:58:12:28:ee:76:91:53: 8c:5d:6a:30:cc:50:e1:6a:da:ac:11:07:3e:63:c8: 27:9b:ce:28:87:8f:8b:57:52:34:4c:d4:b3:76:41: 22:0c:e9:b7:8c:c8:05:2f:14:38:9f:4e:fe:d6:c0: 7b:e1:77:c0:36:af:11:04:52:9a:10:d5:ed:38:61: 75:78:db:70:b1:b8:9f:e0:e8:55:ea:57:3e:22:c9: e4:bd:0f:1f:a5:7d:0d:1d:bd:ce:15:25:6a:71:ae: 86:81:86:dc:a9:0e:81:7f:3d:b4:d3:5b:e0:fa:6f: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E6:5A:FE:20:21:F6:3C:94:47:50:4B:E5:03:F5:BE:A8:E5:EC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:5c:cb:35:21:43:5a:da:6b:40:84:b9:51:a4:c9:af:ac: 3d:6d:6f:9c:8c:0d:e2:f4:c8:92:ea:fa:a5:91:65:c8:68:0e: 42:32:5c:f1:72:e7:b4:62:50:13:12:52:91:c4:51:65:7b:1e: 2d:5e:67:c4:66:10:ef:8a:30:96:fc:81:87:57:fc:d2:6e:d7: 77:d0:3a:cd:db:83:a2:e1:13:ce:30:5c:db:7a:9c:f8:fe:48: d3:2b:ab:d0:05:94:02:7c:6a:e5:ff:f9:14:e5:2e:59:01:49: af:03:c3:95:ae:67:44:c4:aa:f5:dd:07:6a:19:91:ea:e0:c7: 7a:97:f1:85:2d:e2:a5:1d:5b:5f:85:5e:f2:5e:03:b3:58:7c: ae:ec:80:4f:ee:e0:83:bd:97:69:49:8c:59:3e:67:66:a4:e0: 53:26:bf:41:fc:7a:b2:e2:d8:4b:cd:50:f2:25:f8:a7:b1:e6: fa:b7:0d:e5:26:49:2b:4b:ff:07:8d:36:cb:48:30:c0:0b:78: c4:a6:f9:51:5f:11:3b:dc:7f:ae:2d:a5:3c:ef:f8:f3:03:e8: d9:5d:8c:a8:19:16:75:01:cf:32:ba:cb:cc:26:32:95:d6:a9: 2a:db:75:24:81:f3:60:ee:2f:21:90:b4:3c:50:44:14:69:4d: 90:49:73:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx8FqvhicRBqXJE0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDExMTAyMDAzMFoXDTI2MDQxMTAxMDAzMFowLzEtMCsGA1UEAxMk MGQ3M2MxYjUtOWYwMC00ZTUxLTg3ZjEtMTEyMjc2Y2M2MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJpjPzfYH5O6xbELD3F+3ObIq63b/Qf4CBlc i1Op+RhI3/LZAzin1B4hG+Sdzs2d14OEjvJVTQwcW8p1V3LN9i4bD06YbPZ0zA4M iR5rNtyOFDi7izE8/pvS7YKmCUmtuwhkuX2Y+e/RoT1+wKecwCJTsPzqNB5xMlqi dURVWSZzZkKkCDBuerAe1W0rJFgSKO52kVOMXWowzFDhatqsEQc+Y8gnm84oh4+L V1I0TNSzdkEiDOm3jMgFLxQ4n07+1sB74XfANq8RBFKaENXtOGF1eNtwsbif4OhV 6lc+IsnkvQ8fpX0NHb3OFSVqca6GgYbcqQ6Bfz2001vg+m+xDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnmWv4gIfY8lEdQS+UD9b6o5ezUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2OGU0MzAtOGY3Ny0z MmYzLTkyMDQtNTYzYzE3MWExZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGsUXMs1IUNa2mtAhLlRpMmvrD1tb5yMDeL0yJLq+qWRZchoDkIy XPFy57RiUBMSUpHEUWV7Hi1eZ8RmEO+KMJb8gYdX/NJu13fQOs3bg6LhE84wXNt6 nPj+SNMrq9AFlAJ8auX/+RTlLlkBSa8Dw5WuZ0TEqvXdB2oZkergx3qX8YUt4qUd W1+FXvJeA7NYfK7sgE/u4IO9l2lJjFk+Z2ak4FMmv0H8erLi2EvNUPIl+Kex5vq3 DeUmSStL/weNNstIMMALeMSm+VFfETvcf64tpTzv+PMD6NldjKgZFnUBzzK6y8wm MpXWqSrbdSSB82DuLyGQtDxQRBRpTZBJc8Q= -----END CERTIFICATE-----Generated at Sun Jan 25 11:28:43 2026 by rpki-client