This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa File: 8b588a9d-9551-354d-b984-2a6745fa9392.roa (raw, json) Hash identifier: zltifVSXsG2P/jr5yKG1J6FOUpC6PrfAcAX2FRufYF8= Subject key identifier: CF:90:AA:8F:3B:B5:2B:DE:2C:6B:15:7D:40:14:4E:13:A5:4A:0E:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0694A553ABF515E4B98540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.31.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:94:a5:53:ab:f5:15:e4:b9:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=d1cf1bd2-814d-4117-968c-081a89449b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:a6:1b:4e:92:63:44:9a:ad:af:19:c4:a1: 61:a9:f9:cc:4e:fd:20:85:3b:32:81:7a:c8:37:20: 11:17:c3:90:eb:45:68:13:f7:70:b5:20:b9:12:59: ac:2b:ea:77:76:80:97:4c:0d:9b:29:3e:a2:6d:0f: e0:26:f4:b0:99:d6:f7:bd:e5:3a:e1:99:ee:b6:83: db:af:73:bd:5f:e4:f4:e4:2d:ab:df:a8:a4:47:81: e1:ab:d3:19:97:1a:0c:0e:32:2e:a2:d7:41:4c:5e: 1e:d3:ca:ec:23:1b:24:91:ea:36:88:fa:48:73:ab: 7a:9b:4a:1e:0c:54:3a:99:05:89:f1:ca:27:42:6a: 3c:11:3e:0e:e0:c6:cb:c4:1a:82:e8:b7:0d:2f:aa: 87:21:84:5d:d5:8a:2f:c8:db:4f:61:03:ab:9c:dc: 77:55:88:e7:9f:ac:97:47:cb:b3:bf:e3:23:4e:4d: 72:45:ea:fd:cc:33:5d:18:a7:a1:a3:a3:91:89:8d: 68:aa:79:17:01:48:18:b2:54:76:91:70:ab:5e:ba: 0d:ef:1b:1c:20:01:77:9d:37:d4:f9:8f:ba:01:97: 90:ff:95:33:48:0c:ea:f9:0e:7d:72:49:f8:16:c1: 1a:74:a6:68:bc:ea:fb:63:7f:5a:db:a5:25:cf:6c: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:90:AA:8F:3B:B5:2B:DE:2C:6B:15:7D:40:14:4E:13:A5:4A:0E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:fd:2a:e1:c9:97:74:d6:0b:de:19:e0:ed:18:fa:bf:91:07: 8a:fb:30:f9:11:87:c0:48:ad:ef:af:e0:6e:2e:27:6a:94:bf: 00:3e:8f:5e:46:9a:23:27:bd:a1:ee:86:25:f4:b1:7e:10:fc: 2e:25:f0:ea:9a:64:80:86:fa:fe:7c:41:29:23:d0:9c:10:4f: 21:b5:1c:14:ae:3f:b6:2a:62:85:96:73:34:8a:03:70:85:f3: e8:45:b7:64:4a:fa:63:04:e2:bb:41:8b:88:99:4a:f8:89:54: f2:9c:de:a0:cf:08:00:07:54:d6:e9:01:ce:82:9b:bb:85:e0: 1e:0d:36:5b:00:de:64:5e:50:95:ae:29:96:b0:06:60:74:8f: 57:26:b3:86:0f:d2:da:65:23:44:a1:e7:78:1c:46:96:b5:ac: 1d:b5:c2:d5:b4:b5:62:7b:5a:fb:52:2c:e9:2f:b6:42:63:40: 2e:46:26:2b:48:d8:72:76:9f:cf:ac:8c:7e:57:ac:93:fe:64: 1b:21:d0:45:03:16:7a:b3:74:60:7a:6d:e3:af:66:4e:0d:21: 3b:da:98:c6:56:99:a3:e7:f7:45:ef:07:54:87:c2:09:2a:21: 9b:ec:99:9b:48:1f:d6:4a:1f:40:9f:c8:33:e6:20:4d:bf:5e: 0d:c7:2c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpSlU6v1FeS5hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZDFjZjFiZDItODE0ZC00MTE3LTk2OGMtMDgxYTg5NDQ5YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN6mG06SY0Sara8ZxKFhqfnMTv0ghTsygXrI NyARF8OQ60VoE/dwtSC5ElmsK+p3doCXTA2bKT6ibQ/gJvSwmdb3veU64ZnutoPb r3O9X+T05C2r36ikR4Hhq9MZlxoMDjIuotdBTF4e08rsIxskkeo2iPpIc6t6m0oe DFQ6mQWJ8conQmo8ET4O4MbLxBqC6LcNL6qHIYRd1YovyNtPYQOrnNx3VYjnn6yX R8uzv+MjTk1yRer9zDNdGKeho6ORiY1oqnkXAUgYslR2kXCrXroN7xscIAF3nTfU +Y+6AZeQ/5UzSAzq+Q59ckn4FsEadKZovOr7Y39a26Ulz2wzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Qqo87tSveLGsVfUAUThOlSg7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI1ODhhOWQtOTU1MS0z NTRkLWI5ODQtMmE2NzQ1ZmE5MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf9KuHJl3TWC94Z4O0Y+r+RB4r7MPkRh8BIre+v4G4uJ2qUvwA+j15G miMnvaHuhiX0sX4Q/C4l8OqaZICG+v58QSkj0JwQTyG1HBSuP7YqYoWWczSKA3CF 8+hFt2RK+mME4rtBi4iZSviJVPKc3qDPCAAHVNbpAc6Cm7uF4B4NNlsA3mReUJWu KZawBmB0j1cms4YP0tplI0Sh53gcRpa1rB21wtW0tWJ7WvtSLOkvtkJjQC5GJitI 2HJ2n8+sjH5XrJP+ZBsh0EUDFnqzdGB6beOvZk4NITvamMZWmaPn90XvB1SHwgkq IZvsmZtIH9ZKH0CfyDPmIE2/Xg3HLJA= -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:44 2025 by rpki-client