This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa File: f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa (raw, json) Hash identifier: lea5rU6+sSrUTEsgaOcbM8jW9aUpQSpMkxvo1E8WJDc= Subject key identifier: 80:E2:DB:E4:63:6F:0C:ED:C4:51:BD:DA:BF:A1:FA:FF:14:91:E5:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4CA11B62DF75F2415D475700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 71.31.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:1b:62:df:75:f2:41:5d:47:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=6f55d4df-4bee-4f46-8cfd-0ff60ac6dce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:41:41:8a:f5:a5:87:1e:b4:54:f5:a8:63: d0:40:3c:88:26:20:4f:d7:dd:9b:f6:a0:08:1d:78: 31:6b:de:fb:82:a7:16:33:00:4b:9f:73:79:b0:68: 08:56:f5:8f:61:4d:64:e8:10:a1:6b:23:31:ab:dd: bf:21:56:2e:37:9d:2e:c3:99:ba:1e:c0:b4:ae:91: 75:0b:89:ec:7e:64:31:e8:ce:6d:24:b9:c0:ed:bc: 96:39:07:68:3c:bb:ed:cb:d2:03:c4:99:b6:16:b3: 61:29:d7:bb:64:64:1c:c6:75:fb:96:a5:9a:fa:9e: 86:c2:4d:74:a0:59:b0:bf:8c:bb:a0:f1:19:a6:ba: 9c:1c:c5:85:4d:90:e2:9a:eb:b4:d7:7a:5b:04:08: 4c:6a:07:bb:ee:dd:24:fe:73:79:da:fe:c5:03:13: a5:66:c5:5d:12:86:3e:8f:80:c1:50:8b:14:be:4d: f4:21:0f:b2:d3:36:30:63:ef:c4:c9:ed:23:45:e1: 12:61:49:a4:cf:0c:6f:1c:2f:31:6d:c1:b6:4e:7c: 4c:62:6b:dc:17:a8:11:9e:cc:f1:57:3b:47:e5:1c: 1c:b3:74:3d:1f:ae:72:5e:23:e9:33:ba:5d:b5:5b: d1:7b:97:c4:16:9e:91:21:b9:9f:3c:25:5f:62:be: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:DB:E4:63:6F:0C:ED:C4:51:BD:DA:BF:A1:FA:FF:14:91:E5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:31:4a:41:5d:de:ba:13:26:76:00:dc:b3:8d:d6:53:e7:3e: 66:2a:5b:a1:70:76:dc:5a:4d:2c:fe:f9:50:c0:96:5a:78:67: 77:d1:25:c6:0a:4e:dd:2d:8e:54:0f:c5:46:b1:be:d2:be:09: ce:13:88:53:85:63:1d:59:45:1f:b8:1e:e6:ce:67:56:c6:ae: 28:23:1b:0a:be:84:39:9f:9f:42:2f:95:14:cb:ea:9a:16:a1: 0d:aa:a4:bd:cb:7d:ae:58:0c:cc:ed:0e:82:8a:24:a3:60:45: 42:e1:ec:fc:19:17:8f:48:cf:4a:26:66:7e:67:a1:89:22:0e: 41:6f:c7:21:3c:18:51:1a:66:6c:d9:bc:60:35:5a:28:15:69: 97:5f:00:a8:12:c1:ab:c2:96:19:61:5f:88:7e:30:11:c6:4b: b8:75:c1:5e:7b:e3:02:f8:99:77:87:96:ed:8b:e1:bb:cb:a2: 4b:2b:ef:a0:71:4c:89:61:f3:2e:8d:9c:0d:de:98:cc:7f:99: 40:2f:e9:9c:ad:35:cb:7a:e8:ce:3b:a8:f9:6a:e3:dd:c5:75: 37:50:64:12:d5:77:2c:2a:9e:62:22:aa:d3:a5:f7:c8:a0:2c: 49:d7:7a:ed:ef:fe:e8:b1:49:c1:fa:db:a1:89:81:c6:f0:15: 0d:16:b9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoRti33XyQV1HVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmY1NWQ0ZGYtNGJlZS00ZjQ2LThjZmQtMGZmNjBhYzZkY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhglBQYr1pYcetFT1qGPQQDyIJiBP192b9qAI HXgxa977gqcWMwBLn3N5sGgIVvWPYU1k6BChayMxq92/IVYuN50uw5m6HsC0rpF1 C4nsfmQx6M5tJLnA7byWOQdoPLvty9IDxJm2FrNhKde7ZGQcxnX7lqWa+p6Gwk10 oFmwv4y7oPEZprqcHMWFTZDimuu013pbBAhMage77t0k/nN52v7FAxOlZsVdEoY+ j4DBUIsUvk30IQ+y0zYwY+/Eye0jReESYUmkzwxvHC8xbcG2TnxMYmvcF6gRnszx VztH5Rwcs3Q9H65yXiPpM7pdtVvRe5fEFp6RIbmfPCVfYr7OmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDi2+RjbwztxFG92r+h+v8UkeUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQzYmUzYTktNzFjNi0z NGFkLWIwZDMtZWRkMzljZWUzMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcxSkFd3roTJnYA3LON1lPnPmYqW6FwdtxaTSz++VDAllp4Z3fRJcYK Tt0tjlQPxUaxvtK+Cc4TiFOFYx1ZRR+4HubOZ1bGrigjGwq+hDmfn0IvlRTL6poW oQ2qpL3Lfa5YDMztDoKKJKNgRULh7PwZF49Iz0omZn5noYkiDkFvxyE8GFEaZmzZ vGA1WigVaZdfAKgSwavClhlhX4h+MBHGS7h1wV574wL4mXeHlu2L4bvLoksr76Bx TIlh8y6NnA3emMx/mUAv6ZytNct66M47qPlq493FdTdQZBLVdywqnmIiqtOl98ig LEnXeu3v/uixScH626GJgcbwFQ0WuZE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:42 2026 by rpki-client