This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa File: 4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa (raw, json) Hash identifier: 2YzbVOiZbZ7wF12VimeDDizowqZnFkHAVr5mMti2CN0= Subject key identifier: 4F:87:EC:43:21:4D:1C:4C:6F:30:0E:F3:D8:3E:32:6D:37:7C:32:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C24263BA7DF5FF57307ABDD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 0 IP address blocks: 209.50.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:3b:a7:df:5f:f5:73:07:ab:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=20ec29aa-e840-42e2-ab27-81d49ea88fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:0c:36:8f:44:56:87:c9:9b:57:fc:84:7c: ac:ff:dd:96:5e:9b:d7:b5:5f:49:cd:d4:f5:66:9a: 2d:1a:7c:ef:f1:99:49:f1:cb:72:61:dc:88:1b:15: 55:96:c1:82:e1:e8:95:7b:ca:d3:0a:e9:de:3c:89: ad:ba:db:e3:cd:67:cf:6a:17:54:ab:a3:c6:80:e5: 49:8b:ad:a7:89:e8:d1:18:2d:38:a8:81:90:c2:06: b1:2a:84:86:a1:3f:bf:9f:d2:02:94:d7:b8:89:70: ba:5c:ce:5e:7e:ea:71:43:c2:24:73:4a:1a:a7:ab: 57:ad:8a:1e:c0:0d:13:81:24:af:dc:98:15:6d:8d: d0:59:06:e8:47:46:40:79:53:40:3b:4c:b7:43:18: e8:0c:34:cb:23:b7:de:b5:66:e5:35:c0:1e:bf:3e: 7b:36:27:2a:05:30:47:2b:83:da:0b:c7:3c:ee:9c: ca:58:cf:85:31:15:68:f0:6b:5e:be:9d:4e:44:3c: 43:f0:65:86:66:c0:e5:de:b4:fb:ee:84:c7:68:f8: 66:d2:d6:a9:3d:b7:49:30:79:d0:be:d9:78:f9:52: 48:79:0c:da:a0:8c:b6:db:91:cc:af:6d:80:5b:51: a7:12:dc:7f:f5:40:16:9d:76:8d:12:b2:3a:3c:e2: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:EC:43:21:4D:1C:4C:6F:30:0E:F3:D8:3E:32:6D:37:7C:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.50.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6c:aa:57:e4:ae:e9:1f:24:eb:0a:4f:15:01:30:20:3a:e6: 51:c0:df:d7:ee:7d:c3:21:d9:3e:bf:9a:32:fa:e7:4c:8e:b8: 69:d6:f0:b0:6d:37:2f:79:91:a1:ad:06:0e:30:4c:82:e8:0b: 4a:cb:25:e2:31:6f:a9:4f:99:73:91:4d:08:fd:ef:72:d6:57: d5:3c:1b:97:53:aa:3b:5a:df:9a:fc:9e:b7:5e:1b:f7:dc:93: 00:40:7f:f2:52:06:5f:66:d6:b1:41:2f:fa:9f:ea:2c:49:35: c0:c8:30:bc:cd:44:ae:1e:60:bb:20:43:1f:10:ea:db:b9:8a: 5e:d7:b5:91:20:72:0d:e4:52:bb:2a:99:a1:fe:10:fe:45:e7: 9d:21:b0:af:e1:57:8c:4c:50:3a:6f:c5:d7:cb:24:97:ef:d6: f2:10:b9:d1:2f:5d:24:84:97:de:ad:d2:07:43:c1:33:c1:09: 9f:53:d0:89:b3:54:e1:76:e5:b5:46:15:7c:c1:82:c9:7e:41: f2:f1:94:b5:11:4c:ba:8b:ea:fb:b8:87:ed:32:bc:4e:c1:22: 9b:3c:b2:54:d2:9d:2d:fb:fe:b3:52:d3:c2:bb:73:43:d1:3d: 3b:39:6e:8c:97:8d:be:f7:b9:68:2f:71:e0:13:14:3b:77:e4: d6:d0:35:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJjun31/1cwer3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MjBlYzI5YWEtZTg0MC00MmUyLWFiMjctODFkNDllYTg4ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TAMNo9EVofJm1f8hHys/92WXpvXtV9JzdT1 ZpotGnzv8ZlJ8ctyYdyIGxVVlsGC4eiVe8rTCunePImtutvjzWfPahdUq6PGgOVJ i62niejRGC04qIGQwgaxKoSGoT+/n9IClNe4iXC6XM5efupxQ8Ikc0oap6tXrYoe wA0TgSSv3JgVbY3QWQboR0ZAeVNAO0y3QxjoDDTLI7fetWblNcAevz57NicqBTBH K4PaC8c87pzKWM+FMRVo8Gtevp1ORDxD8GWGZsDl3rT77oTHaPhm0tapPbdJMHnQ vtl4+VJIeQzaoIy225HMr22AW1GnEtx/9UAWnXaNErI6POKafQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+H7EMhTRxMbzAO89g+Mm03fDKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjNWE1ZWEtNThmOS0z NmM1LWExMGQtYTU1MmRiNGJhOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClsqlfkrukfJOsKTxUBMCA65lHA39fufcMh2T6/mjL650yOuGnW8LBt Ny95kaGtBg4wTILoC0rLJeIxb6lPmXORTQj973LWV9U8G5dTqjta35r8nrdeG/fc kwBAf/JSBl9m1rFBL/qf6ixJNcDIMLzNRK4eYLsgQx8Q6tu5il7XtZEgcg3kUrsq maH+EP5F550hsK/hV4xMUDpvxdfLJJfv1vIQudEvXSSEl96t0gdDwTPBCZ9T0Imz VOF25bVGFXzBgsl+QfLxlLURTLqL6vu4h+0yvE7BIps8slTSnS37/rNS08K7c0PR PTs5boyXjb73uWgvceATFDt35NbQNTg= -----END CERTIFICATE-----Generated at Sat Dec 20 19:55:39 2025 by rpki-client