This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: D/IvTAETi7U1kj231kXF6Uvnnz7ujmteu4nLRaARoxQ= Subject key identifier: C3:79:58:25:CF:59:A5:BF:22:74:0B:E4:B0:B4:63:2F:9C:D7:2F:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1829CB713F4E8F93FB0A8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:82:9c:b7:13:f4:e8:f9:3f:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=c8b99815-873e-4d63-889a-e34473ccbf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:89:53:26:73:de:00:1b:4c:86:51:98:8f: 9a:f1:d6:3d:75:51:dd:6b:b3:05:e2:d3:a9:0c:e3: 2a:01:d1:dd:e9:e9:c6:7e:46:4f:a7:7a:6b:58:b6: 64:66:93:9e:28:9c:99:80:4a:77:8f:97:8c:f8:32: 41:5d:a1:98:a3:5e:bb:aa:bd:f2:25:07:22:c7:f4: 9a:30:46:1c:6a:93:3a:42:0e:6b:3d:02:45:62:eb: e6:b6:8a:a9:46:07:3a:a9:22:9a:b1:c0:11:47:54: 9b:98:08:96:ce:79:36:f8:0c:69:34:39:ad:f8:a7: 06:07:ad:f9:e9:e2:eb:6f:9c:7d:f0:09:14:0f:b7: bc:3c:94:ad:6e:e5:24:54:32:7e:33:39:8b:13:28: 81:90:d4:77:8a:06:7b:01:22:06:36:33:c0:44:a9: 23:73:7d:d5:09:e3:4b:59:dd:d8:2b:ab:c0:b9:d6: cf:43:53:26:3a:a0:81:4e:48:ef:cb:ed:9a:41:82: dd:38:1c:9d:25:a0:7c:80:5d:d7:19:25:b6:23:d8: 2e:61:5e:0a:42:e8:ad:0d:a3:f2:65:70:b7:8f:fd: 3e:f2:e0:63:9f:f2:59:70:48:43:50:86:40:87:eb: 3e:5e:da:e1:83:aa:38:4d:e8:ef:6c:da:77:32:39: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:58:25:CF:59:A5:BF:22:74:0B:E4:B0:B4:63:2F:9C:D7:2F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:15:9e:4c:66:8c:d1:b8:7f:49:4b:e6:f8:bd:f0:60:d2:74: 82:1c:b4:87:19:31:ce:8e:4c:41:c9:1d:9f:7b:26:44:24:8f: 6d:da:a0:c9:cd:fa:46:d8:e4:56:91:77:cd:f4:01:46:9e:a5: 19:07:a4:a9:ba:23:1a:ac:ad:79:db:50:33:71:de:a6:00:6e: 88:f8:44:7d:38:25:23:43:95:e6:30:82:ec:5f:26:db:9e:68: 95:ef:20:52:84:ca:d5:47:34:08:70:71:37:2e:b4:e6:b6:79: 55:c7:8c:0c:7b:73:e5:01:7e:c2:eb:29:97:e2:08:64:35:ed: ae:b7:73:11:6a:71:42:62:bc:55:f4:b7:96:03:50:e2:be:93: 71:f5:12:33:77:4e:eb:3a:5d:b2:f9:57:d5:e2:63:d8:3e:75: 1b:c7:3e:d5:40:e6:37:dc:e8:51:3f:5e:93:4f:0f:f3:ff:fe: 6e:ca:a3:5f:84:a0:01:bd:40:ad:e4:1e:d5:4b:72:6f:c0:83: 03:96:f1:ae:86:33:57:e2:f4:af:bd:4b:7a:8d:69:a0:83:b1: 2a:1b:86:68:38:4b:0c:a9:14:b6:cc:80:4a:be:4c:92:80:13: d9:b6:31:a2:5d:80:1d:33:10:a9:8f:86:dd:0a:86:4f:74:51: ba:6c:8e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0YKctxP06Pk/sKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YzhiOTk4MTUtODczZS00ZDYzLTg4OWEtZTM0NDczY2NiZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BmJUyZz3gAbTIZRmI+a8dY9dVHda7MF4tOp DOMqAdHd6enGfkZPp3prWLZkZpOeKJyZgEp3j5eM+DJBXaGYo167qr3yJQcix/Sa MEYcapM6Qg5rPQJFYuvmtoqpRgc6qSKascARR1SbmAiWznk2+AxpNDmt+KcGB635 6eLrb5x98AkUD7e8PJStbuUkVDJ+MzmLEyiBkNR3igZ7ASIGNjPARKkjc33VCeNL Wd3YK6vAudbPQ1MmOqCBTkjvy+2aQYLdOBydJaB8gF3XGSW2I9guYV4KQuitDaPy ZXC3j/0+8uBjn/JZcEhDUIZAh+s+Xtrhg6o4TejvbNp3MjnrjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN5WCXPWaW/InQL5LC0Yy+c1y+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4VnkxmjNG4f0lL5vi98GDSdIIctIcZMc6OTEHJHZ97JkQkj23aoMnN +kbY5FaRd830AUaepRkHpKm6IxqsrXnbUDNx3qYAboj4RH04JSNDleYwguxfJtue aJXvIFKEytVHNAhwcTcutOa2eVXHjAx7c+UBfsLrKZfiCGQ17a63cxFqcUJivFX0 t5YDUOK+k3H1EjN3Tus6XbL5V9XiY9g+dRvHPtVA5jfc6FE/XpNPD/P//m7Ko1+E oAG9QK3kHtVLcm/AgwOW8a6GM1fi9K+9S3qNaaCDsSobhmg4SwypFLbMgEq+TJKA E9m2MaJdgB0zEKmPht0Khk90Ubpsjgs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:32:32 2026 by rpki-client