This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json) Hash identifier: dfR8mUGwb21i+TMpV8LXBDR4Uxt2g2IjUzDg8QMBdOQ= Subject key identifier: 7A:C7:71:18:15:AD:0B:17:B8:9C:C2:8D:A4:D8:E2:76:68:3F:89:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0693BA0F7883E9B7A4D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 67.140.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:93:ba:0f:78:83:e9:b7:a4:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=db55709f-e15b-4ff9-ba33-8ab82494624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:e0:72:9f:50:ff:4b:45:65:d4:3c:c3:cd: a6:24:bb:a5:82:d9:30:37:9c:ea:aa:0c:2b:6b:3c: 6b:36:c5:a1:e7:9d:e6:0f:3b:01:7c:d4:5f:78:d8: d5:e3:ad:6f:7d:a2:5a:d3:f1:c0:49:ec:40:e5:32: af:da:a3:45:b3:32:6d:3b:48:ac:a3:9c:d9:58:13: 20:a0:b9:fe:c7:af:15:61:b5:ee:ff:8d:7a:92:80: 25:e7:58:cd:db:ed:2a:11:26:e7:74:65:2a:35:06: 81:40:02:59:4d:6a:c1:36:a4:63:6a:a2:93:ce:e0: 07:71:62:82:c1:f5:bd:08:40:bf:b0:13:7d:53:55: 50:f1:85:82:28:00:c1:44:af:d8:8f:7e:ab:73:a0: ab:cb:c4:65:e5:b2:22:4a:e3:5f:f9:b9:32:8b:b7: 07:51:d0:b6:41:98:0c:dd:3c:63:08:1b:37:09:5a: 79:93:d9:10:e5:88:fd:a2:c3:36:d8:68:75:f4:3a: 90:16:d5:b1:ee:29:09:84:b8:dd:ef:83:d9:0c:24: 4e:7a:3e:26:be:1b:cd:a6:56:c4:a1:23:c4:76:5c: 99:c9:f3:01:50:3d:8a:d1:6a:a9:9d:78:a7:8d:50: 4d:e0:27:f6:1c:d4:1b:65:08:97:49:ac:4c:fe:0b: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:71:18:15:AD:0B:17:B8:9C:C2:8D:A4:D8:E2:76:68:3F:89:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e2:f4:6c:3f:37:be:c1:8b:be:fd:b1:4d:7e:3c:c2:4c:a0: 01:7f:54:23:9f:de:86:9d:69:0d:6b:65:91:40:e1:15:a7:3d: f0:b2:1d:a0:b2:06:75:4f:8b:fe:51:c6:7c:75:76:ca:f4:69: f3:3e:91:8e:4c:7d:5b:19:3a:66:a9:1f:86:25:91:6f:e6:5e: 1d:78:d1:5e:e1:b2:c2:83:c0:15:b4:c8:bd:8c:65:e9:d7:b3: 7e:4a:bb:8a:88:ae:6a:f3:ec:ef:a0:a4:89:97:06:1a:87:20: a5:9e:7f:25:b9:4d:6e:a9:1b:d7:9d:c2:eb:e7:6a:9c:b7:3d: b6:c1:dc:d8:e7:d1:43:e0:a2:57:e0:5e:06:42:68:e6:ba:8e: 5d:61:f4:74:95:77:12:04:11:02:e0:9f:dd:e0:77:cb:71:36: 9f:a7:1d:29:2a:3e:0e:86:c3:2f:bb:e1:06:99:03:4c:1d:34: 12:29:18:0a:8e:7b:f6:88:2e:a1:f1:45:f8:81:26:8e:56:b9: f1:90:68:7b:01:4d:0b:e5:3d:5a:fd:f1:a4:0b:69:cf:a7:19: 87:85:81:c3:32:ba:e9:93:80:a0:ce:40:f5:ba:10:0a:7f:da: 53:62:2b:b1:fe:e0:e3:29:29:e1:fa:f4:6b:72:4a:01:cf:a5: 16:d7:7b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpO6D3iD6bek1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZGI1NTcwOWYtZTE1Yi00ZmY5LWJhMzMtOGFiODI0OTQ2MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrPgcp9Q/0tFZdQ8w82mJLulgtkwN5zqqgwr azxrNsWh553mDzsBfNRfeNjV461vfaJa0/HASexA5TKv2qNFszJtO0iso5zZWBMg oLn+x68VYbXu/416koAl51jN2+0qESbndGUqNQaBQAJZTWrBNqRjaqKTzuAHcWKC wfW9CEC/sBN9U1VQ8YWCKADBRK/Yj36rc6Cry8Rl5bIiSuNf+bkyi7cHUdC2QZgM 3TxjCBs3CVp5k9kQ5Yj9osM22Gh19DqQFtWx7ikJhLjd74PZDCROej4mvhvNplbE oSPEdlyZyfMBUD2K0WqpnXinjVBN4Cf2HNQbZQiXSaxM/guCTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrHcRgVrQsXuJzCjaTY4nZoP4nMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE5YjhkMWMtZmQwOS0z ZWY2LWFlNWYtZTZjZjBhNDZlNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/i9Gw/N77Bi779sU1+PMJMoAF/VCOf3oadaQ1rZZFA4RWnPfCyHaCy BnVPi/5Rxnx1dsr0afM+kY5MfVsZOmapH4YlkW/mXh140V7hssKDwBW0yL2MZenX s35Ku4qIrmrz7O+gpImXBhqHIKWefyW5TW6pG9edwuvnapy3PbbB3Njn0UPgolfg XgZCaOa6jl1h9HSVdxIEEQLgn93gd8txNp+nHSkqPg6Gwy+74QaZA0wdNBIpGAqO e/aILqHxRfiBJo5WufGQaHsBTQvlPVr98aQLac+nGYeFgcMyuumTgKDOQPW6EAp/ 2lNiK7H+4OMpKeH69GtySgHPpRbXexQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:47 2026 by rpki-client