This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa File: b96c2879-d5cd-3541-b67a-a108443d0500.roa (raw, json) Hash identifier: KAhkKF5Ts1+Pr4Bz/czKsCPvUw7aDTY9LtuTIXOR84Q= Subject key identifier: D7:4C:B2:1B:D7:DA:53:37:14:A6:47:71:96:9F:7C:B0:59:B6:D8:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C8FA17360578238E8050D6580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa Signing time: Sun 18 Jan 2026 02:00:31 +0000 ROA not before: Sun 18 Jan 2026 02:00:31 +0000 ROA not after: Sat 18 Apr 2026 01:00:31 +0000 asID: 7029 IP address blocks: 216.96.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8f:a1:73:60:57:82:38:e8:05:0d:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 18 02:00:31 2026 GMT Not After : Apr 18 01:00:31 2026 GMT Subject: CN=ca8c1464-62c9-45af-a2de-2c14e0732c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7a:dd:6c:f7:54:60:51:c6:d6:2f:b1:e4:fb: b8:06:a3:bc:af:33:8b:d2:d6:69:52:bb:4f:68:b8: ad:cd:ab:48:65:a8:9c:75:ea:2d:b9:79:46:6e:19: 94:c9:ec:22:71:2e:4f:d0:f5:8b:37:1a:fa:b5:ac: 8e:c3:58:b7:3f:43:4b:93:f2:3a:c4:2e:1f:89:df: ad:57:65:55:1e:54:d6:f1:50:6f:3b:05:9d:d1:18: e9:79:66:4e:6c:02:2f:5d:2a:e1:39:8b:60:9b:82: 31:d0:86:d9:10:86:06:2b:ec:e3:07:48:d7:b5:b4: 4a:9f:d7:a8:c7:e2:89:a8:a1:da:64:ca:4e:18:47: e8:fc:12:61:3f:98:2a:e3:0c:03:97:a3:39:b4:f2: 98:cd:1f:7d:07:b4:fa:a9:93:48:e8:18:a4:6c:d8: 7d:90:14:6d:19:4a:47:8c:d5:3c:09:76:94:4e:b9: 27:b0:91:be:f4:7d:f3:9b:08:fa:a3:3b:db:22:24: 3d:7a:62:97:5d:c3:5e:e8:83:18:6a:ba:b4:a2:9b: e2:de:ef:21:66:01:c4:3e:87:cf:e9:39:a7:2a:7b: da:fd:ac:ae:62:2f:24:aa:4a:b1:fd:8d:68:26:3e: 63:d0:05:e5:f4:24:eb:b5:56:a8:bb:49:0e:3c:08: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:B2:1B:D7:DA:53:37:14:A6:47:71:96:9F:7C:B0:59:B6:D8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2a:35:e3:45:65:3a:80:84:9e:b5:f8:1a:82:0a:15:be:83: 8c:ee:68:75:b3:e9:a2:d9:f3:df:50:db:0a:bf:15:d3:30:54: 3c:f0:e3:d3:fc:9e:a7:e1:55:6e:2a:8f:f0:52:56:ee:32:77: db:a6:99:2e:e0:36:cd:c9:e1:08:23:69:fa:5d:d0:c6:21:6a: 94:70:92:36:92:2f:5b:f7:2e:6b:70:2d:59:57:13:1c:51:ce: 5e:eb:76:95:67:26:6c:d2:b5:d2:5b:22:06:d3:86:27:16:6c: 7a:76:e7:5c:5e:2f:b2:3b:7a:f6:36:6f:c9:1f:60:5d:cb:0c: 6f:cc:0b:ec:1d:88:13:69:12:32:ea:96:28:76:d7:f5:17:97: 04:c5:78:70:d4:81:26:19:6d:e5:0d:89:bd:a9:99:d3:bc:33: fb:3e:83:1f:d0:8d:31:e8:ef:9b:5e:25:87:5c:86:de:91:ab: 7d:ee:ca:ee:b9:7e:04:c4:77:ee:4c:b2:86:ac:db:ae:78:37: 17:f6:a6:cd:6b:30:24:2e:bc:91:4d:e8:5d:2c:5f:f7:3a:91: 36:0d:e8:07:51:11:9e:aa:25:15:3c:c9:7c:fb:1c:8a:52:a9: 29:00:12:c9:eb:1a:f5:8e:40:4f:fe:23:3b:6b:f9:50:96:a5: 19:58:b4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyPoXNgV4I46AUNZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDExODAyMDAzMVoXDTI2MDQxODAxMDAzMVowLzEtMCsGA1UEAxMk Y2E4YzE0NjQtNjJjOS00NWFmLWEyZGUtMmMxNGUwNzMyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHrdbPdUYFHG1i+x5Pu4BqO8rzOL0tZpUrtP aLitzatIZaicdeotuXlGbhmUyewicS5P0PWLNxr6tayOw1i3P0NLk/I6xC4fid+t V2VVHlTW8VBvOwWd0RjpeWZObAIvXSrhOYtgm4Ix0IbZEIYGK+zjB0jXtbRKn9eo x+KJqKHaZMpOGEfo/BJhP5gq4wwDl6M5tPKYzR99B7T6qZNI6BikbNh9kBRtGUpH jNU8CXaUTrknsJG+9H3zmwj6ozvbIiQ9emKXXcNe6IMYarq0opvi3u8hZgHEPofP 6TmnKnva/ayuYi8kqkqx/Y1oJj5j0AXl9CTrtVaou0kOPAiNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdMshvX2lM3FKZHcZaffLBZtthJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjk2YzI4NzktZDVjZC0z NTQxLWI2N2EtYTEwODQ0M2QwNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYqNeNFZTqAhJ61+BqCChW+g4zuaHWz6aLZ899Q2wq/FdMwVDzw49P8 nqfhVW4qj/BSVu4yd9ummS7gNs3J4Qgjafpd0MYhapRwkjaSL1v3LmtwLVlXExxR zl7rdpVnJmzStdJbIgbThicWbHp251xeL7I7evY2b8kfYF3LDG/MC+wdiBNpEjLq lih21/UXlwTFeHDUgSYZbeUNib2pmdO8M/s+gx/QjTHo75teJYdcht6Rq33uyu65 fgTEd+5Msoas2654Nxf2ps1rMCQuvJFN6F0sX/c6kTYN6AdREZ6qJRU8yXz7HIpS qSkAEsnrGvWOQE/+Iztr+VCWpRlYtP0= -----END CERTIFICATE-----Generated at Sun Jan 25 11:20:12 2026 by rpki-client