This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa File: 1acc8c5b-1d39-3e1e-886a-120184f0d402.roa (raw, json) Hash identifier: qBi1WsWhzzb3H0vZSZE4lM6NnzfXyFexC/ZJ0DvVtAU= Subject key identifier: 15:D5:38:91:76:8A:0D:DE:10:C0:63:AD:07:0D:19:EB:54:83:A4:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C321BCF9DEA8FDCE5D075C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa Signing time: Mon 15 Dec 2025 14:00:38 +0000 ROA not before: Mon 15 Dec 2025 14:00:38 +0000 ROA not after: Sun 15 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 173.187.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:1b:cf:9d:ea:8f:dc:e5:d0:75:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 15 14:00:38 2025 GMT Not After : Mar 15 13:00:38 2026 GMT Subject: CN=64b17676-99c1-462f-82c7-43741056f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:fe:87:6a:5b:90:0a:96:ac:21:67:a2:77: f9:5c:d1:45:3f:01:e7:57:bf:ba:da:d9:77:6c:f4: 85:f1:60:b2:31:e8:d9:e6:d6:a5:dc:eb:b6:50:6a: c5:8e:41:ab:f9:82:7f:e0:fc:a9:3f:1f:f9:75:9f: 2c:77:7d:7a:a5:09:b5:fd:ab:f3:8a:39:07:e9:a5: 4b:c4:6f:20:22:86:9f:c9:b1:71:8e:32:89:cd:26: 7a:be:25:1a:ae:ce:60:20:33:0a:67:4c:9b:c4:db: 39:bf:60:b0:b5:aa:c6:df:a5:b8:f1:ee:b2:88:20: c1:a4:9d:fa:12:70:f8:e1:a8:e3:c9:63:2d:99:f2: c4:56:c6:5e:1a:2a:a1:6f:76:fd:e1:de:df:7e:c0: bf:ce:21:35:f4:ed:11:a5:cf:01:7f:2f:f5:99:f3: 5e:06:06:53:64:7a:8a:45:06:26:c8:ba:48:5a:8c: 8b:e4:49:13:82:8e:49:e3:05:1f:ef:03:d5:74:2d: 92:fd:5b:3c:a6:35:aa:30:c2:39:1e:a1:34:79:d5: f2:66:01:d4:be:54:be:74:b0:68:c9:e4:28:7a:58: 53:60:8f:03:5c:6f:c4:78:d6:91:fe:86:96:74:db: 97:4b:70:09:58:d8:25:1f:45:d8:44:49:81:a2:76: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D5:38:91:76:8A:0D:DE:10:C0:63:AD:07:0D:19:EB:54:83:A4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:8f:8e:05:94:3f:26:95:40:43:54:93:44:2d:d2:bd:77: d9:45:54:98:9f:ec:fa:55:6b:7f:b9:81:f9:35:a3:68:12:21: b1:5a:f6:d6:d8:c2:29:18:0d:14:7e:17:4c:dd:32:33:80:e7: a7:3f:49:63:39:ed:ab:e1:e7:bc:8d:03:55:d2:8f:4e:43:20: 04:22:4c:9b:eb:f2:27:32:5b:74:b4:56:89:e6:59:e7:6a:49: bc:d0:6c:e2:fc:2e:16:11:5b:c0:f0:54:ff:0d:ea:57:0f:1f: 05:28:50:d3:3d:d2:b7:c2:c1:07:09:1b:d2:3e:7b:da:9c:1a: 59:84:1f:5f:a4:7b:1b:9c:c8:70:1a:36:c3:0f:24:b0:f8:cd: 53:78:30:b5:5e:34:27:30:9c:7d:83:92:58:93:b4:5c:f6:fa: 35:12:75:62:d0:e8:50:52:5c:36:cc:56:3e:5c:07:b4:7f:8c: 82:71:46:21:0b:51:ab:15:09:a8:19:13:c6:16:35:20:f3:92: fe:5f:52:70:b8:72:e7:4e:65:76:bb:4a:30:35:f5:0f:b9:b3: ce:5a:c4:c7:50:cf:25:f3:b3:ad:79:a6:34:de:78:cb:64:4d: 2f:90:ba:51:d3:84:c0:79:d5:3a:e3:ca:dd:b1:e4:cc:0f:51: c6:ab:47:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwyG8+d6o/c5dB1yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk NjRiMTc2NzYtOTljMS00NjJmLTgyYzctNDM3NDEwNTZmOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2v+h2pbkAqWrCFnonf5XNFFPwHnV7+62tl3 bPSF8WCyMejZ5tal3Ou2UGrFjkGr+YJ/4PypPx/5dZ8sd316pQm1/avzijkH6aVL xG8gIoafybFxjjKJzSZ6viUars5gIDMKZ0ybxNs5v2CwtarG36W48e6yiCDBpJ36 EnD44ajjyWMtmfLEVsZeGiqhb3b94d7ffsC/ziE19O0Rpc8Bfy/1mfNeBgZTZHqK RQYmyLpIWoyL5EkTgo5J4wUf7wPVdC2S/Vs8pjWqMMI5HqE0edXyZgHUvlS+dLBo yeQoelhTYI8DXG/EeNaR/oaWdNuXS3AJWNglH0XYREmBonaWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXVOJF2ig3eEMBjrQcNGetUg6QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjYzhjNWItMWQzOS0z ZTFlLTg4NmEtMTIwMTg0ZjBkNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzWj44FlD8mlUBDVJNELdK9d9lFVJif7PpVa3+5gfk1o2gSIbFa9tbY wikYDRR+F0zdMjOA56c/SWM57avh57yNA1XSj05DIAQiTJvr8icyW3S0VonmWedq SbzQbOL8LhYRW8DwVP8N6lcPHwUoUNM90rfCwQcJG9I+e9qcGlmEH1+kexucyHAa NsMPJLD4zVN4MLVeNCcwnH2DkliTtFz2+jUSdWLQ6FBSXDbMVj5cB7R/jIJxRiEL UasVCagZE8YWNSDzkv5fUnC4cudOZXa7SjA19Q+5s85axMdQzyXzs615pjTeeMtk TS+QulHThMB51Trjyt2x5MwPUcarR5w= -----END CERTIFICATE-----Generated at Sat Dec 20 18:08:11 2025 by rpki-client