This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa File: a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa (raw, json) Hash identifier: 3+oQCinofGqd9P6aoCS10doJ455cGsDh7h1N+kO6gP4= Subject key identifier: 7B:72:9D:5C:F5:39:35:22:2C:6E:C2:1F:2A:2D:D3:E4:5B:9D:48:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E06904F16B80E57FF10C780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.187.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:90:4f:16:b8:0e:57:ff:10:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=d4959389-9e31-4f5f-b964-5ceb234e5c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:fc:16:5a:53:92:bb:32:e3:a0:6f:2d:a5: 1c:b2:13:15:6c:8c:1c:c5:bb:2f:cd:0c:ae:38:e1: 2c:15:d0:a2:a8:38:eb:9c:b6:30:d7:22:5f:ab:a4: fb:ea:31:e7:25:91:a7:66:54:f8:83:06:6a:00:62: 56:57:12:de:48:16:49:f4:cb:4b:6b:67:ee:d7:b7: 9b:94:83:77:9e:e0:47:9f:09:a4:79:9f:87:0e:12: 1b:6d:87:07:5f:45:5d:7d:e0:5d:26:9d:47:bc:7c: 7f:93:70:55:77:9d:3e:b2:ac:f5:92:ee:93:2a:bc: b0:32:67:e2:3a:66:e2:48:75:94:8a:25:0a:c6:ee: 42:ad:22:9e:56:a8:02:45:1e:45:55:af:aa:c7:2e: 3c:d2:97:43:39:ae:ec:65:55:be:44:ce:b3:26:54: a8:89:d1:da:01:dd:73:3a:bc:8c:5d:42:60:93:ce: 32:bd:4d:2c:a8:7e:2e:02:0b:9b:7c:45:b7:49:02: a3:52:a9:93:66:75:78:08:2b:eb:8c:fc:d8:d4:fc: d6:67:30:de:62:e5:e9:8a:32:37:6b:af:91:6a:72: f2:85:49:cf:73:ca:2d:c5:08:cb:ef:69:02:73:d9: cf:5f:92:a8:b1:47:17:03:1f:f4:29:5b:86:98:81: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:9D:5C:F5:39:35:22:2C:6E:C2:1F:2A:2D:D3:E4:5B:9D:48:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c2:34:b9:fd:4b:ed:c7:b8:2d:8a:a3:32:5c:df:38:c9:b8: 22:bc:58:02:9c:7f:f0:62:40:54:61:92:98:8d:72:b4:72:a3: 89:9e:b9:f4:6f:f8:9e:ba:f8:3e:77:8a:66:ba:37:e1:6c:f4: 29:9b:f7:d6:dc:8a:13:85:7d:86:8c:80:7e:d1:39:0e:13:63: e6:4c:76:3a:30:9e:ac:c6:fd:ee:58:62:6d:b7:31:42:49:2b: 09:93:93:c0:c7:d3:46:04:7a:31:c0:5b:d6:b2:ab:fe:8b:19: a0:e8:83:bc:e6:ca:87:86:bf:5f:f0:81:4b:2f:4b:ee:91:cd: 19:e0:d8:0a:49:96:9d:92:ee:f4:85:b9:ff:64:00:1f:66:7c: fd:fb:85:ed:ee:f3:36:95:b3:2b:36:d7:fb:78:d6:ce:3c:60: 55:c0:c0:3d:18:fa:90:19:17:b4:e9:17:96:48:38:cc:3a:54: 61:d7:9d:33:1d:85:22:e3:04:e4:62:88:5a:76:5c:80:20:ee: 96:55:e0:ca:fc:72:ba:0a:e8:d7:d5:26:28:67:81:f0:58:4e: aa:9e:0c:43:6a:3d:49:a1:e2:80:2c:d7:15:a0:b2:e5:03:85: fd:d9:ea:bb:b6:bc:fd:6b:b7:46:45:73:43:e8:50:ea:21:7c: f9:de:19:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpBPFrgOV/8Qx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZDQ5NTkzODktOWUzMS00ZjVmLWI5NjQtNWNlYjIzNGU1YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH/8FlpTkrsy46BvLaUcshMVbIwcxbsvzQyu OOEsFdCiqDjrnLYw1yJfq6T76jHnJZGnZlT4gwZqAGJWVxLeSBZJ9MtLa2fu17eb lIN3nuBHnwmkeZ+HDhIbbYcHX0VdfeBdJp1HvHx/k3BVd50+sqz1ku6TKrywMmfi OmbiSHWUiiUKxu5CrSKeVqgCRR5FVa+qxy480pdDOa7sZVW+RM6zJlSoidHaAd1z OryMXUJgk84yvU0sqH4uAgubfEW3SQKjUqmTZnV4CCvrjPzY1PzWZzDeYuXpijI3 a6+RanLyhUnPc8otxQjL72kCc9nPX5KosUcXAx/0KVuGmIERGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtynVz1OTUiLG7CHyot0+RbnUj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlmYWI5YTEtYjdiOS0z YjdmLTlmZmYtYTI0MGVlNjU4YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfCNLn9S+3HuC2KozJc3zjJuCK8WAKcf/BiQFRhkpiNcrRyo4meufRv +J66+D53ima6N+Fs9Cmb99bcihOFfYaMgH7ROQ4TY+ZMdjownqzG/e5YYm23MUJJ KwmTk8DH00YEejHAW9ayq/6LGaDog7zmyoeGv1/wgUsvS+6RzRng2ApJlp2S7vSF uf9kAB9mfP37he3u8zaVsys21/t41s48YFXAwD0Y+pAZF7TpF5ZIOMw6VGHXnTMd hSLjBORiiFp2XIAg7pZV4Mr8croK6NfVJihngfBYTqqeDENqPUmh4oAs1xWgsuUD hf3Z6ru2vP1rt0ZFc0PoUOohfPneGfY= -----END CERTIFICATE-----Generated at Sun Jan 25 09:28:41 2026 by rpki-client