This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa File: 0a90a390-d0a5-365f-9730-fddae514051e.roa (raw, json) Hash identifier: aLvS59sn+NgtqsW9me+kyKmhKr1jCS8JA5rI7Av5KxY= Subject key identifier: 55:54:68:0E:69:C5:F8:36:0E:04:B5:42:A4:F6:AA:36:AC:47:0C:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D17F384DE4FA78500B6480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 199.195.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:7f:38:4d:e4:fa:78:50:0b:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=8706edec-2425-49b6-9bec-aa8f05975827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:73:af:ce:cc:f1:ca:ee:ef:2e:89:45:f1: 32:b2:16:2f:28:b2:05:2a:72:e9:90:f7:87:a4:b9: 16:5a:dd:c9:ab:02:20:e7:5e:d4:e5:d6:a6:e2:14: e5:1c:cc:98:11:fc:c4:13:00:2c:cc:7a:ec:d7:39: a8:17:ea:79:64:76:6a:3f:7e:af:6b:d3:b8:30:06: cd:75:2d:c9:81:69:e4:98:9e:ed:94:13:ac:f7:3b: 82:58:ea:bf:2f:1b:c5:3f:cf:0c:10:2d:38:5f:be: eb:4a:0a:32:c4:27:3c:b5:21:32:34:be:8e:a7:7f: 44:8c:48:04:e5:7e:19:a5:b6:61:66:4c:5e:ed:f3: 4a:e5:7b:22:bf:9a:f9:95:1c:8e:df:48:c9:03:73: 9e:3b:55:23:a1:89:4a:36:8c:0c:4e:89:12:b4:98: 63:45:15:d6:c3:d4:da:b9:b0:0c:f0:60:34:e3:ef: b0:e1:35:81:41:24:48:c3:9d:58:30:68:a9:bf:a0: 17:68:02:15:64:71:a3:9b:5d:1a:73:84:a0:c5:d8: 13:93:fc:94:d6:23:13:7d:ff:25:97:a6:ed:87:7b: 2a:5d:34:76:44:1a:0c:94:c9:eb:99:85:0f:12:5c: a5:50:fc:6b:99:bd:cc:37:97:ba:ca:b7:76:f0:77: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:68:0E:69:C5:F8:36:0E:04:B5:42:A4:F6:AA:36:AC:47:0C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0e:e7:2e:e2:e5:ae:ee:29:14:aa:63:f8:bd:a9:05:17:a1: 8f:0c:e7:4a:c8:88:7c:a7:c4:c7:ff:87:9c:e2:a1:89:b8:46: b8:d3:74:92:ff:3b:e1:e8:52:8a:03:8c:5a:77:46:36:a3:f2: 31:5f:65:2a:c2:2a:fa:72:7a:41:94:64:a0:89:e3:b5:84:4a: 2a:3a:b1:9e:76:1e:3c:e4:bf:d9:69:7c:c7:f1:22:92:58:17: 0e:23:28:5a:a7:ae:35:31:8a:b7:ec:7d:01:41:0f:37:58:07: 8b:09:a9:4a:b7:95:30:d2:03:b9:12:0d:c3:45:39:66:6c:a2: 5e:0f:1d:d3:92:27:8d:59:ca:c9:0d:0b:6d:58:c3:07:18:16: 31:b7:bd:92:69:cb:ba:85:e2:b7:48:bf:67:97:28:69:af:ec: 9b:c3:ac:bb:88:c4:66:c6:28:73:b6:de:21:65:eb:f2:a7:9c: b7:d6:24:fd:77:97:d3:cf:f9:f2:4d:b7:cd:95:88:c3:80:c6: 23:35:bf:e4:2d:20:5a:ca:8a:89:e7:95:60:a3:9e:bf:7b:0a: 40:bc:90:ea:9d:cf:6f:38:60:60:5d:5d:62:8b:40:25:43:61: 00:d2:b0:33:84:5c:7b:a8:f6:d2:9c:de:57:63:49:59:e0:cb: 3b:a2:66:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0X84TeT6eFALZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODcwNmVkZWMtMjQyNS00OWI2LTliZWMtYWE4ZjA1OTc1ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Jzr87M8cru7y6JRfEyshYvKLIFKnLpkPeH pLkWWt3JqwIg517U5dam4hTlHMyYEfzEEwAszHrs1zmoF+p5ZHZqP36va9O4MAbN dS3JgWnkmJ7tlBOs9zuCWOq/LxvFP88MEC04X77rSgoyxCc8tSEyNL6Op39EjEgE 5X4ZpbZhZkxe7fNK5Xsiv5r5lRyO30jJA3OeO1UjoYlKNowMTokStJhjRRXWw9Ta ubAM8GA04++w4TWBQSRIw51YMGipv6AXaAIVZHGjm10ac4SgxdgTk/yU1iMTff8l l6bth3sqXTR2RBoMlMnrmYUPElylUPxrmb3MN5e6yrd28HeW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVUaA5pxfg2DgS1QqT2qjasRwzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE5MGEzOTAtZDBhNS0z NjVmLTk3MzAtZmRkYWU1MTQwNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAO5y7i5a7uKRSqY/i9qQUXoY8M50rIiHynxMf/h5zioYm4RrjTdJL/ O+HoUooDjFp3Rjaj8jFfZSrCKvpyekGUZKCJ47WESio6sZ52Hjzkv9lpfMfxIpJY Fw4jKFqnrjUxirfsfQFBDzdYB4sJqUq3lTDSA7kSDcNFOWZsol4PHdOSJ41ZyskN C21YwwcYFjG3vZJpy7qF4rdIv2eXKGmv7JvDrLuIxGbGKHO23iFl6/KnnLfWJP13 l9PP+fJNt82ViMOAxiM1v+QtIFrKionnlWCjnr97CkC8kOqdz284YGBdXWKLQCVD YQDSsDOEXHuo9tKc3ldjSVngyzuiZtI= -----END CERTIFICATE-----Generated at Sun Dec 28 03:14:08 2025 by rpki-client