This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa File: 88348225-4e15-3a0e-bde2-822861e71616.roa (raw, json) Hash identifier: /aU8G5wac7A6Aqr99CCXQS+b3y+PdWMsLwEve+CzKPI= Subject key identifier: DC:89:20:EC:D7:DF:44:CC:42:18:B0:DF:27:9B:48:DE:12:26:DF:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D15BD0E91073AB5CF374C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 36471 IP address blocks: 209.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:5b:d0:e9:10:73:ab:5c:f3:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=4c330d93-f5e1-4de6-a520-f70013dd45ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c2:ab:a2:bb:f7:00:09:da:39:47:16:87:81: 7d:9a:98:ba:49:9b:6c:53:25:bb:40:14:30:0d:e3: af:14:6f:50:f1:10:dc:35:b9:01:8c:64:f4:04:e9: 29:49:55:0b:94:e4:8f:fb:50:c8:77:f3:d0:80:6f: 16:59:8c:5e:37:ec:0d:2c:97:a6:16:18:70:da:c9: a9:ad:a6:13:04:be:b2:cd:b4:df:da:86:6b:d1:a9: cc:f5:27:3e:33:fc:e5:b4:83:fe:7a:24:23:45:2f: 35:a4:83:b7:25:b3:0b:69:95:7b:7b:56:87:b3:18: 71:a5:08:db:33:e0:14:46:64:78:b6:af:07:c4:43: 64:03:6f:0f:f0:d1:e8:64:a8:83:50:7c:18:80:8e: 99:93:fc:cc:c2:de:ee:93:d4:f3:9f:f0:fa:2a:97: 59:9a:90:92:1e:ef:30:51:03:a6:f3:13:44:32:80: 3b:4d:a6:a2:ee:9f:ec:b9:c7:f4:84:34:46:aa:b9: 93:e9:da:0c:8c:56:7e:62:83:90:ae:2f:d2:5e:d6: b7:1c:13:81:e3:0b:7b:a6:58:a8:b8:69:4e:4d:46: 85:57:13:f6:36:44:55:b3:0b:16:cd:bb:c7:e3:9e: b5:3b:66:87:a9:a4:83:51:1f:eb:72:89:69:8d:53: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:20:EC:D7:DF:44:CC:42:18:B0:DF:27:9B:48:DE:12:26:DF:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d4:b9:e5:3d:46:09:b3:dd:d7:63:9f:90:07:59:67:a0:9b: fd:39:5e:5a:cd:46:c2:59:36:ee:6c:4f:2b:3d:a5:22:73:0e: bd:e1:24:80:73:25:93:21:27:e3:e0:16:94:87:d5:ff:56:4a: 8e:10:e0:01:84:de:7d:34:b0:71:0f:40:aa:ce:4f:ff:d5:b4: 01:df:a4:5c:ae:a4:b1:3e:1f:09:5a:04:d6:8b:c7:de:87:a9: 21:07:39:ab:af:10:a3:17:82:63:60:05:11:b0:ca:89:60:1d: 58:9a:a0:fc:33:ba:9d:a5:bc:fe:84:46:48:4e:9b:9b:09:1d: e5:24:4a:52:4d:bf:3b:75:75:d8:e0:8b:69:c3:2a:ee:cb:d5: c6:32:de:1b:c4:eb:2c:8d:54:12:6d:9b:ea:80:1a:71:18:ba: 01:81:86:15:d0:ea:4b:1f:19:69:b3:ae:4a:66:7e:2d:02:1e: c2:0f:bb:07:49:66:7b:18:7c:4f:81:76:7d:c1:4f:2a:e5:8a: b8:26:fb:70:6b:46:f2:6f:f0:c5:f5:f3:ef:7c:c7:3f:c5:7e: 80:f3:75:59:5a:31:8d:84:59:82:c8:4f:e7:83:98:a3:a7:88: bb:5a:12:ec:28:57:28:90:09:c5:0e:44:74:56:c4:1e:6e:45: a2:67:75:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0VvQ6RBzq1zzdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NGMzMzBkOTMtZjVlMS00ZGU2LWE1MjAtZjcwMDEzZGQ0NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsKrorv3AAnaOUcWh4F9mpi6SZtsUyW7QBQw DeOvFG9Q8RDcNbkBjGT0BOkpSVULlOSP+1DId/PQgG8WWYxeN+wNLJemFhhw2smp raYTBL6yzbTf2oZr0anM9Sc+M/zltIP+eiQjRS81pIO3JbMLaZV7e1aHsxhxpQjb M+AURmR4tq8HxENkA28P8NHoZKiDUHwYgI6Zk/zMwt7uk9Tzn/D6KpdZmpCSHu8w UQOm8xNEMoA7Taai7p/sucf0hDRGqrmT6doMjFZ+YoOQri/SXta3HBOB4wt7plio uGlOTUaFVxP2NkRVswsWzbvH4561O2aHqaSDUR/rcolpjVOH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyJIOzX30TMQhiw3yebSN4SJt8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgzNDgyMjUtNGUxNS0z YTBlLWJkZTItODIyODYxZTcxNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/UueU9Rgmz3ddjn5AHWWegm/05XlrNRsJZNu5sTys9pSJzDr3hJIBz JZMhJ+PgFpSH1f9WSo4Q4AGE3n00sHEPQKrOT//VtAHfpFyupLE+HwlaBNaLx96H qSEHOauvEKMXgmNgBRGwyolgHViaoPwzup2lvP6ERkhOm5sJHeUkSlJNvzt1ddjg i2nDKu7L1cYy3hvE6yyNVBJtm+qAGnEYugGBhhXQ6ksfGWmzrkpmfi0CHsIPuwdJ ZnsYfE+Bdn3BTyrlirgm+3BrRvJv8MX18+98xz/FfoDzdVlaMY2EWYLIT+eDmKOn iLtaEuwoVyiQCcUORHRWxB5uRaJndW0= -----END CERTIFICATE-----Generated at Tue Dec 30 07:05:36 2025 by rpki-client