This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa File: d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa (raw, json) Hash identifier: MMshe1gPExlc3RF+Xl8xSIaIS00Ka/7yt9T2Z7PKYH4= Subject key identifier: 5D:A0:EE:EF:C6:E3:69:E2:7C:A9:B8:70:D6:07:F8:81:F0:2B:42:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0C6B5DFFE2A74C80AB537200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 7029 IP address blocks: 66.16.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:5d:ff:e2:a7:4c:80:ab:53:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=d42d6a9b-3aab-4906-877d-c356a9cfb0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:65:34:27:cf:e1:7b:e8:80:76:35:9c:93: ff:74:61:45:69:c5:13:2b:2e:a3:b2:a4:ee:69:06: 21:aa:65:6c:5d:2d:a4:a4:87:3c:72:18:d6:d9:1e: 0d:63:3e:f1:38:25:7a:fb:f2:90:c3:30:b2:ec:06: 61:65:97:e3:e8:1d:52:4c:6f:54:44:41:68:ae:c5: ba:b7:14:f6:31:99:8d:fb:e7:ff:02:39:f1:d6:9b: f3:79:14:55:5d:12:17:0a:e1:8c:73:6e:d0:31:dd: 8d:f1:fa:5d:d9:d3:e6:8e:3c:ee:25:ac:dd:1d:99: ae:38:0b:71:69:11:0d:17:d9:ae:60:f2:e8:6c:2c: d0:96:30:7d:3c:04:87:a3:d2:2d:14:80:d5:41:bc: bb:d6:ba:e0:a1:4d:9b:23:3e:eb:85:08:17:0d:a3: 02:56:4a:23:3e:59:d6:61:82:b0:fd:dd:30:24:27: 02:ef:69:70:af:54:5e:63:d0:e8:a7:a6:f2:7d:2f: b2:67:c4:38:b5:ce:48:93:7c:ab:4b:36:35:4a:02: f8:7d:4a:8e:76:53:7e:a1:45:02:39:9f:ba:69:0c: 35:55:86:66:d7:6a:cf:48:22:d4:97:c7:2c:a3:7a: 79:c2:99:57:3c:ed:b3:18:a7:a6:28:b1:b1:a6:96: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A0:EE:EF:C6:E3:69:E2:7C:A9:B8:70:D6:07:F8:81:F0:2B:42:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:75:59:06:7d:f9:fe:94:81:3e:bd:77:4f:6d:4c:0e:e4:5e: af:39:94:f7:09:02:f0:71:6e:e8:d9:58:1c:c3:0b:4a:2f:14: 6b:9f:ba:71:4a:35:d7:c9:72:b8:62:53:ae:a2:a0:46:94:9a: 71:01:59:d2:8e:6d:85:14:e2:9f:05:0c:dc:5c:7f:8c:5c:93: a4:33:5f:13:d6:05:d2:8c:28:4a:76:9c:68:0a:f2:26:1c:a7: a0:e1:f1:61:b5:14:d2:cd:f9:15:c2:eb:06:e6:fa:e7:33:5a: 17:2c:ba:8a:e7:b0:ec:75:67:5f:00:f0:34:64:98:91:a2:84: 18:9a:68:06:92:9d:f4:1e:15:69:68:c3:7b:65:f9:0f:ef:40: 56:42:86:a2:cc:33:fc:b6:ed:18:eb:80:7f:32:0b:72:26:bc: 44:e6:7c:73:a2:6e:5b:fd:a7:a8:a2:22:4d:35:36:f3:e0:3d: 43:ae:c6:11:6e:16:a2:01:8e:85:9e:c0:6f:fe:3f:7b:f3:9f: d7:67:80:a0:f3:69:0c:d6:83:42:ec:2f:8c:49:11:8e:64:b5: 0d:59:5d:d2:c6:aa:d1:f4:9f:09:dc:17:29:e2:82:b6:78:88: f6:86:43:d7:aa:7f:c6:c8:8e:05:5e:55:ee:fd:90:01:b0:f0: da:ec:00:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa13/4qdMgKtTcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk ZDQyZDZhOWItM2FhYi00OTA2LTg3N2QtYzM1NmE5Y2ZiMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinRlNCfP4XvogHY1nJP/dGFFacUTKy6jsqTu aQYhqmVsXS2kpIc8chjW2R4NYz7xOCV6+/KQwzCy7AZhZZfj6B1STG9UREForsW6 txT2MZmN++f/Ajnx1pvzeRRVXRIXCuGMc27QMd2N8fpd2dPmjjzuJazdHZmuOAtx aRENF9muYPLobCzQljB9PASHo9ItFIDVQby71rrgoU2bIz7rhQgXDaMCVkojPlnW YYKw/d0wJCcC72lwr1ReY9Dop6byfS+yZ8Q4tc5Ik3yrSzY1SgL4fUqOdlN+oUUC OZ+6aQw1VYZm12rPSCLUl8cso3p5wplXPO2zGKemKLGxppaP+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2g7u/G42nifKm4cNYH+IHwK0JVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRlMjU0ODgtMTQ5ZC0z YjllLWI4ZWYtN2NmNGQ3ODVjMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhDRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI11WQZ9+f6UgT69d09tTA7kXq85lPcJAvBxbujZWBzDC0ovFGufunFK NdfJcrhiU66ioEaUmnEBWdKObYUU4p8FDNxcf4xck6QzXxPWBdKMKEp2nGgK8iYc p6Dh8WG1FNLN+RXC6wbm+uczWhcsuornsOx1Z18A8DRkmJGihBiaaAaSnfQeFWlo w3tl+Q/vQFZChqLMM/y27RjrgH8yC3ImvETmfHOiblv9p6iiIk01NvPgPUOuxhFu FqIBjoWewG/+P3vzn9dngKDzaQzWg0LsL4xJEY5ktQ1ZXdLGqtH0nwncFynigrZ4 iPaGQ9eqf8bIjgVeVe79kAGw8NrsAAU= -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:26 2025 by rpki-client