This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa File: a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa (raw, json) Hash identifier: TNtjzXDqMMKpvKc0jtQyvu/CgONAc7KSbm6qfv9Y3NI= Subject key identifier: CC:B1:05:AD:C4:68:F0:A5:5E:77:D4:4A:D9:10:DB:9D:E6:0C:1F:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C59315BBADA63C77FF337F900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 139.55.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:5b:ba:da:63:c7:7f:f3:37:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=4d8352ce-f160-46b2-a227-69b806013433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:17:e7:5b:5f:4f:39:e3:dc:f3:7b:ff:11: 0f:a9:ab:db:1f:27:00:44:d8:fc:01:5e:8e:a0:e3: e8:6a:8b:99:ef:a5:fd:24:47:a4:e6:9d:23:96:8c: 5f:47:9a:33:4a:fd:26:36:f3:b9:52:4b:54:72:b4: fd:ea:c9:68:2e:5f:2e:48:63:d9:be:2d:23:ba:be: 8a:e4:f0:90:9d:43:d4:d5:66:bd:25:2f:91:72:1a: 10:5b:de:9b:50:ee:8d:3a:a0:77:bf:9a:0a:e7:6f: b3:67:a2:02:e7:45:b7:5c:61:65:a2:b4:0d:6f:b2: 7f:93:cc:37:8c:a9:54:b1:88:08:b3:82:cf:ff:13: 06:e7:e0:20:eb:3d:b1:ab:06:c1:6f:b3:80:2b:9b: 13:22:82:60:f8:4e:e1:34:46:6a:e6:70:97:8d:98: c9:a5:a3:7f:76:18:11:02:72:c6:88:7d:f8:c3:69: 5c:6c:a7:e5:09:a5:dd:7e:6a:e0:70:99:ea:a0:c7: b6:56:a5:17:f7:79:a6:90:dc:24:34:3e:6f:b4:60: de:77:bc:eb:a8:62:63:05:f5:6d:8f:dd:d0:70:0d: a9:b3:ef:20:51:22:d0:1c:13:a0:9e:e2:cc:74:11: 4c:76:87:9b:fc:03:81:aa:e3:73:90:00:27:3d:0d: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:05:AD:C4:68:F0:A5:5E:77:D4:4A:D9:10:DB:9D:E6:0C:1F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:5d:ae:63:e1:af:51:70:63:7f:38:e4:2e:11:01:01:91:e5: 63:26:8a:7e:d1:2a:90:3d:d1:5d:87:d7:8c:c0:32:d5:ad:f3: 28:d0:a8:4d:b6:48:08:26:1e:b5:42:e9:f4:7f:0b:d1:9c:4d: c1:56:c7:26:4b:42:69:74:78:0f:1e:54:b4:1e:4d:38:dc:5f: 5c:03:b5:38:d7:0f:f4:25:8c:65:65:24:5c:a4:ee:0c:d5:0e: d0:ae:06:d6:0f:ba:c8:85:0a:b4:fc:18:b6:dd:ab:fb:69:b6: ae:f9:97:0d:ca:83:d6:bd:8d:0c:b4:2f:f8:f3:c2:7b:25:ea: 15:5b:43:78:88:7a:85:f9:5d:17:ac:3b:25:08:0f:e9:86:06: b5:ee:8f:87:f2:6b:d8:dc:bf:dc:6f:a5:c1:06:62:ed:d1:35: 9a:58:89:9c:80:90:f1:9a:d8:64:f2:6a:d0:85:f4:e2:63:1a: e6:6c:99:03:7b:f1:86:b5:38:9f:ae:b2:c2:a2:f8:2f:24:6a: 5b:3f:de:91:8e:56:de:f5:dc:e7:fe:65:83:d6:95:2d:92:35: f7:89:7c:e1:3d:77:6a:f0:ec:d2:dc:f9:9f:0e:6a:99:da:ce: 16:cd:02:b5:f8:c5:e0:5a:35:cf:24:ba:21:cd:5c:00:b0:00: c2:d8:c0:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVu62mPHf/M3+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk NGQ4MzUyY2UtZjE2MC00NmIyLWEyMjctNjliODA2MDEzNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprAX51tfTznj3PN7/xEPqavbHycARNj8AV6O oOPoaouZ76X9JEek5p0jloxfR5ozSv0mNvO5UktUcrT96sloLl8uSGPZvi0jur6K 5PCQnUPU1Wa9JS+RchoQW96bUO6NOqB3v5oK52+zZ6IC50W3XGFlorQNb7J/k8w3 jKlUsYgIs4LP/xMG5+Ag6z2xqwbBb7OAK5sTIoJg+E7hNEZq5nCXjZjJpaN/dhgR AnLGiH34w2lcbKflCaXdfmrgcJnqoMe2VqUX93mmkNwkND5vtGDed7zrqGJjBfVt j93QcA2ps+8gUSLQHBOgnuLMdBFMdoeb/AOBquNzkAAnPQ3FhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyxBa3EaPClXnfUStkQ253mDB+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY1ZTVjYTEtN2U0My0z ZmVmLTg5MTctNzNjNGVmNGY1MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRdrmPhr1FwY3845C4RAQGR5WMmin7RKpA90V2H14zAMtWt8yjQqE22 SAgmHrVC6fR/C9GcTcFWxyZLQml0eA8eVLQeTTjcX1wDtTjXD/QljGVlJFyk7gzV DtCuBtYPusiFCrT8GLbdq/tptq75lw3Kg9a9jQy0L/jzwnsl6hVbQ3iIeoX5XRes OyUID+mGBrXuj4fya9jcv9xvpcEGYu3RNZpYiZyAkPGa2GTyatCF9OJjGuZsmQN7 8Ya1OJ+ussKi+C8kals/3pGOVt713Of+ZYPWlS2SNfeJfOE9d2rw7NLc+Z8Oapna zhbNArX4xeBaNc8kuiHNXACwAMLYwAI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:21 2026 by rpki-client