This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa File: 8cff7846-ccfa-30c4-b82d-553692edd563.roa (raw, json) Hash identifier: 8WcjT2cBNl7sJ2XJ32YXeFc2hpb6W2SIl16HHry11F0= Subject key identifier: C4:B4:ED:F1:5F:5A:70:D2:F0:D4:2C:E9:A8:44:DA:FB:75:02:A7:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C13662A1F8BA09841DCDC3C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:2a:1f:8b:a0:98:41:dc:dc:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=1e234f8c-4fd3-46e8-9f77-03dcd72e924f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:ec:df:de:b2:3a:4d:79:4c:5d:da:4f:cb: 9c:8c:ef:9f:ee:ab:0f:c7:ba:9c:40:09:00:e2:03: 86:fa:50:fa:60:36:43:5a:90:aa:1b:78:48:f4:da: d7:05:7e:1e:6e:c0:9f:87:be:f2:3f:5e:b6:09:ed: 40:b1:b8:b2:0a:ee:a6:5b:16:59:ec:63:d0:e5:80: 0f:1e:12:26:91:91:14:a2:d5:c3:8d:97:aa:68:2e: 44:b3:f0:85:aa:68:83:75:4b:b4:27:1b:9b:57:29: 90:78:ba:8c:df:43:80:46:65:7d:4b:23:91:01:18: 3b:85:78:bc:ad:52:67:56:76:4f:5a:8b:d8:c1:33: 55:94:32:2d:b8:95:83:27:4d:da:1d:3c:db:69:c7: 76:c1:e6:56:f7:ee:f3:14:16:a6:a2:5e:5b:22:2b: ef:5d:d4:e8:98:98:75:ed:71:e4:bc:b6:ee:ab:2f: 53:f3:12:1a:08:bb:09:1a:00:24:ac:af:f7:26:3e: c5:4d:cf:dc:b5:69:00:6f:83:9b:44:48:f9:10:eb: f3:18:e6:fa:30:90:c0:43:9e:14:ee:17:5b:dc:07: 37:17:cb:32:b3:e3:5f:03:55:74:9f:51:5b:ce:37: ff:4c:1f:95:1d:5e:43:fb:cb:35:fd:97:7d:3a:95: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B4:ED:F1:5F:5A:70:D2:F0:D4:2C:E9:A8:44:DA:FB:75:02:A7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5c:1b:92:0a:e1:bf:00:2c:d6:1c:51:2e:e1:a1:17:ec:4e: 9a:b9:87:18:a6:7f:e0:b5:15:15:da:9e:0c:63:6c:53:4c:d6: 69:37:23:02:96:4a:c3:60:45:2d:08:c8:68:a5:99:89:57:f8: ec:06:8f:b5:37:c0:6c:b6:0c:bf:fc:e6:20:c9:ec:e0:1d:5c: a3:c0:4f:46:45:8f:54:84:44:3a:fc:59:a8:55:d6:5d:a4:03: f3:41:36:6d:cd:74:7b:9b:80:d1:c3:a4:23:d1:6b:ca:f9:29: f3:b7:f8:96:f4:53:9a:e9:f5:4e:4e:c7:7f:65:7d:b1:bb:c8: 8b:11:57:2d:18:18:05:63:5a:44:1e:74:b6:d0:de:88:1b:93: 73:23:2a:ab:f2:12:9a:c4:b0:0b:de:f3:23:6a:32:79:77:b2: 37:91:5f:34:0b:f0:b3:48:d7:a7:89:18:d0:08:fa:c0:f3:7f: 42:13:64:35:4a:bb:8f:44:3c:b9:90:e3:d2:93:d0:aa:a1:74: 3f:ac:b3:c5:bb:5a:97:e8:42:37:c2:c2:d9:72:95:f5:c4:0f: dd:45:9d:26:b4:b9:b2:ef:6b:53:15:9b:42:5d:d1:cc:39:4c: 5a:a9:75:6c:c1:61:8d:37:54:e9:b8:9f:bb:2f:f9:dd:16:13: d4:8f:a4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwTZiofi6CYQdzcPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk MWUyMzRmOGMtNGZkMy00NmU4LTlmNzctMDNkY2Q3MmU5MjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Ts396yOk15TF3aT8ucjO+f7qsPx7qcQAkA 4gOG+lD6YDZDWpCqG3hI9NrXBX4ebsCfh77yP162Ce1AsbiyCu6mWxZZ7GPQ5YAP HhImkZEUotXDjZeqaC5Es/CFqmiDdUu0JxubVymQeLqM30OARmV9SyORARg7hXi8 rVJnVnZPWovYwTNVlDItuJWDJ03aHTzbacd2weZW9+7zFBamol5bIivvXdTomJh1 7XHkvLbuqy9T8xIaCLsJGgAkrK/3Jj7FTc/ctWkAb4ObREj5EOvzGOb6MJDAQ54U 7hdb3Ac3F8sys+NfA1V0n1Fbzjf/TB+VHV5D+8s1/Zd9OpXqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS07fFfWnDS8NQs6ahE2vt1AqeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmZjc4NDYtY2NmYS0z MGM0LWI4MmQtNTUzNjkyZWRkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhcG5IK4b8ALNYcUS7hoRfsTpq5hximf+C1FRXangxjbFNM1mk3IwKW SsNgRS0IyGilmYlX+OwGj7U3wGy2DL/85iDJ7OAdXKPAT0ZFj1SERDr8WahV1l2k A/NBNm3NdHubgNHDpCPRa8r5KfO3+Jb0U5rp9U5Ox39lfbG7yIsRVy0YGAVjWkQe dLbQ3ogbk3MjKqvyEprEsAve8yNqMnl3sjeRXzQL8LNI16eJGNAI+sDzf0ITZDVK u49EPLmQ49KT0KqhdD+ss8W7WpfoQjfCwtlylfXED91FnSa0ubLva1MVm0Jd0cw5 TFqpdWzBYY03VOm4n7sv+d0WE9SPpOU= -----END CERTIFICATE-----Generated at Sun Dec 7 16:59:11 2025 by rpki-client