This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa File: 5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa (raw, json) Hash identifier: HQ0j4nq/W3psTx/g4+0WB+lGDyMWOahsoBcqu7b7E5o= Subject key identifier: D0:5F:71:69:E5:33:3E:AC:05:A0:D1:4A:63:7B:41:1E:C5:15:F8:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4011597C471449F7BDDB0280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 173.188.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:59:7c:47:14:49:f7:bd:db:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=16dfff1d-b7c2-4dc4-8427-3a35a59671a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:34:3a:30:cf:58:fb:38:a6:0a:75:18:60: 16:f3:79:0a:6f:af:49:36:16:89:95:a7:10:5c:c8: 42:d4:60:1f:16:2a:38:47:3a:36:a4:23:1d:61:7b: f5:2b:24:2a:02:1f:cf:ba:8a:c7:38:a0:7d:6c:ed: 4c:6c:37:1f:d1:dc:9d:4f:91:a8:ba:c6:11:37:52: 0a:cf:8a:77:64:68:dc:61:61:6e:9b:e3:dd:a1:a6: 3c:ab:fe:e3:9d:39:5e:95:f0:93:d4:be:4c:57:cf: ef:7c:af:27:6e:28:8b:78:f0:27:87:93:88:f8:49: 19:7b:46:63:68:15:44:95:09:4c:37:08:8d:85:09: 07:a3:b7:74:ff:d8:ed:31:3f:dc:90:9e:17:61:0e: e3:9c:7c:9f:cd:1f:74:8e:c5:76:e4:cf:3a:62:df: 57:9a:0f:22:3f:60:36:7b:28:c1:db:c5:22:65:d4: 9b:af:ed:69:df:63:63:5f:a8:1b:d3:72:c3:ad:24: 7e:e9:de:a8:76:54:2a:50:ff:7a:e9:68:ff:17:6f: b6:72:e4:e0:4c:f6:84:e1:79:a8:a7:8d:2c:fe:4c: c4:23:bd:74:7e:0d:f7:28:a1:59:00:46:e2:e7:d4: fe:74:1c:55:73:5f:46:54:53:1d:05:b2:2f:79:a0: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:71:69:E5:33:3E:AC:05:A0:D1:4A:63:7B:41:1E:C5:15:F8:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:65:e3:a9:a4:7f:3f:2b:5a:58:04:6a:58:2b:4b:b6:41:4c: 77:d2:04:46:7a:87:7b:b2:81:10:fb:00:d9:63:d0:96:31:8f: 89:e3:14:72:21:3a:b1:8f:b8:02:d1:91:14:6a:63:1c:d4:3d: 20:5d:15:95:83:df:ab:47:14:e3:cd:2d:da:37:b2:fa:c2:3f: 35:df:82:44:b2:61:a5:1a:8f:a9:a3:ba:09:3f:4c:a2:cb:68: 35:9e:fa:74:b9:e8:6a:cc:83:fe:bb:37:ad:83:94:80:4f:5d: a6:89:ba:71:1f:b8:cc:7a:dd:27:0a:09:04:6e:60:f5:98:ec: ca:3c:cb:f8:7b:c0:85:6c:5d:d0:82:b8:20:3a:69:d5:f2:25: 45:e7:7d:f5:87:2c:50:b8:f0:42:cc:60:a9:34:21:42:d4:df: ac:4d:13:4a:e2:c1:24:84:80:67:5f:4c:44:73:aa:21:f8:f7: c0:fe:49:17:29:6e:d3:4e:fb:78:e4:1c:98:f6:27:16:84:f9: 88:97:19:8b:69:02:7c:5f:77:0a:2d:d8:dd:64:0a:dd:24:6e: 93:30:06:d2:ce:06:a5:a3:b5:ee:33:37:50:72:ba:c9:26:c2: df:5c:93:91:16:1d:38:02:43:3d:52:1a:40:26:28:48:02:2b: df:66:12:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEVl8RxRJ973bAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MTZkZmZmMWQtYjdjMi00ZGM0LTg0MjctM2EzNWE1OTY3MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSo0OjDPWPs4pgp1GGAW83kKb69JNhaJlacQ XMhC1GAfFio4Rzo2pCMdYXv1KyQqAh/PuorHOKB9bO1MbDcf0dydT5GousYRN1IK z4p3ZGjcYWFum+PdoaY8q/7jnTlelfCT1L5MV8/vfK8nbiiLePAnh5OI+EkZe0Zj aBVElQlMNwiNhQkHo7d0/9jtMT/ckJ4XYQ7jnHyfzR90jsV25M86Yt9Xmg8iP2A2 eyjB28UiZdSbr+1p32NjX6gb03LDrSR+6d6odlQqUP966Wj/F2+2cuTgTPaE4Xmo p40s/kzEI710fg33KKFZAEbi59T+dBxVc19GVFMdBbIveaD1rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBfcWnlMz6sBaDRSmN7QR7FFfjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRiMTk0MmMtNWNiMi0z OWU5LWFhYWUtNTVjOGJiN2U0OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdl46mkfz8rWlgEalgrS7ZBTHfSBEZ6h3uygRD7ANlj0JYxj4njFHIh OrGPuALRkRRqYxzUPSBdFZWD36tHFOPNLdo3svrCPzXfgkSyYaUaj6mjugk/TKLL aDWe+nS56GrMg/67N62DlIBPXaaJunEfuMx63ScKCQRuYPWY7Mo8y/h7wIVsXdCC uCA6adXyJUXnffWHLFC48ELMYKk0IULU36xNE0riwSSEgGdfTERzqiH498D+SRcp btNO+3jkHJj2JxaE+YiXGYtpAnxfdwot2N1kCt0kbpMwBtLOBqWjte4zN1Byuskm wt9ck5EWHTgCQz1SGkAmKEgCK99mEgc= -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:43 2025 by rpki-client