This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa File: c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa (raw, json) Hash identifier: XHTs3BWFnU4mC7E4n/48zvJbbvPTDPSBo7EAjNjDzXQ= Subject key identifier: 37:A1:B5:92:49:0C:B8:5D:49:81:DF:C2:34:B1:FD:82:E2:20:75:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9536D00AEE5E7555C432C700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 7029 IP address blocks: 71.29.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:d0:0a:ee:5e:75:55:c4:32:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=df67902c-6267-4be5-b67e-98bc804ee98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:a7:be:b2:57:6e:e0:eb:18:6f:e3:f9:7e: 54:46:fa:ad:ad:40:78:de:a4:a5:e4:49:70:e4:7c: a8:d2:00:d2:f9:36:7f:87:e0:a6:24:cb:dd:fb:4a: 05:c2:eb:ec:00:17:d6:4d:20:74:a3:9b:0d:20:17: 41:90:dc:ce:f8:da:b1:45:63:2d:cc:4c:b3:09:8a: 32:04:b5:29:76:ec:35:51:67:c9:b7:f4:f1:45:42: 0c:fc:68:63:1e:85:4d:40:44:8c:33:94:4e:b7:64: c0:3f:43:62:87:21:f6:a8:0b:73:1c:25:54:3e:dd: 10:e0:3e:89:80:18:9b:8f:a8:83:d7:74:eb:3d:a6: 8c:75:67:f3:8e:b6:90:1b:64:4c:a7:e4:33:c6:c8: 50:42:57:07:2f:0a:a3:a0:00:e9:a3:11:c1:27:20: f3:29:f2:a2:dd:09:a5:3a:e2:29:1a:fc:31:8d:11: 76:4d:1c:8a:a0:86:36:9b:9e:57:f5:94:c2:f3:18: 04:04:3e:fd:ae:ff:58:fa:84:86:1e:0a:f9:0d:5a: 2e:e7:d6:5d:cd:42:61:d2:c7:d2:e2:76:7b:ba:36: 68:c3:76:51:5a:23:39:3b:c5:b7:22:9a:a7:80:14: 04:66:2d:12:2d:8a:d9:3e:3c:3c:18:66:d2:8e:4e: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A1:B5:92:49:0C:B8:5D:49:81:DF:C2:34:B1:FD:82:E2:20:75:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8a:94:70:f5:c9:af:7a:45:39:4a:08:ce:ac:91:e6:10:75: fe:8b:f7:38:78:b5:f4:32:5c:df:7e:63:a7:11:3b:c3:e7:2a: c9:c2:45:ad:17:a0:4f:50:f8:59:2f:d5:f8:c1:5a:ec:af:e3: a2:9b:cb:ec:27:07:39:15:08:15:bd:60:5c:35:8d:79:14:81: 2d:89:e6:1c:78:f2:a7:81:1e:9c:ea:43:83:07:3b:75:f0:8a: 6e:44:4d:e3:3d:b2:52:d4:86:88:0a:77:ea:2c:64:06:47:ef: 94:14:1a:14:fa:46:b6:ff:3b:16:d2:fe:ff:25:df:97:34:17: 32:6c:8b:0c:2e:10:c8:1d:ba:0e:5a:29:dd:f8:d4:2b:4d:15: b0:b0:52:6e:5b:d4:83:b1:67:84:84:0b:85:7a:fb:0a:88:59: b2:3b:6d:da:0c:d4:c7:fc:d9:e9:0e:28:6a:b5:2f:9e:ef:a1: e3:97:80:81:3d:8c:cc:e8:9c:bb:d9:aa:58:41:a6:8d:e3:0a: f3:95:5d:ee:10:91:8e:7a:d7:89:90:4a:c0:b1:76:9c:47:4b: 84:1b:36:54:35:90:f6:ca:6d:0f:36:e5:65:d2:66:e2:3c:96: 49:62:dd:bc:ed:26:fa:3f:1a:0a:62:50:84:34:43:87:0a:51: f4:e7:25:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNtAK7l51VcQyxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk ZGY2NzkwMmMtNjI2Ny00YmU1LWI2N2UtOThiYzgwNGVlOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfGnvrJXbuDrGG/j+X5URvqtrUB43qSl5Elw 5Hyo0gDS+TZ/h+CmJMvd+0oFwuvsABfWTSB0o5sNIBdBkNzO+NqxRWMtzEyzCYoy BLUpduw1UWfJt/TxRUIM/GhjHoVNQESMM5ROt2TAP0NihyH2qAtzHCVUPt0Q4D6J gBibj6iD13TrPaaMdWfzjraQG2RMp+QzxshQQlcHLwqjoADpoxHBJyDzKfKi3Qml OuIpGvwxjRF2TRyKoIY2m55X9ZTC8xgEBD79rv9Y+oSGHgr5DVou59ZdzUJh0sfS 4nZ7ujZow3ZRWiM5O8W3IpqngBQEZi0SLYrZPjw8GGbSjk7AtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDehtZJJDLhdSYHfwjSx/YLiIHVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMmVhOWQtNDZlMS0z NTU2LWExOGMtMTdjZTczZTQ4MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOKlHD1ya96RTlKCM6skeYQdf6L9zh4tfQyXN9+Y6cRO8PnKsnCRa0X oE9Q+Fkv1fjBWuyv46Kby+wnBzkVCBW9YFw1jXkUgS2J5hx48qeBHpzqQ4MHO3Xw im5ETeM9slLUhogKd+osZAZH75QUGhT6Rrb/OxbS/v8l35c0FzJsiwwuEMgdug5a Kd341CtNFbCwUm5b1IOxZ4SEC4V6+wqIWbI7bdoM1Mf82ekOKGq1L57voeOXgIE9 jMzonLvZqlhBpo3jCvOVXe4QkY5614mQSsCxdpxHS4QbNlQ1kPbKbQ825WXSZuI8 lkli3bztJvo/GgpiUIQ0Q4cKUfTnJQE= -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:43 2026 by rpki-client