This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
File: 2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa (raw, json)
Hash identifier: 21oVwIG4cKnkVGHcXhUtGzCZr+IXcMK71AcsnPeXx1w=
Subject key identifier: B0:14:3F:E0:42:1A:46:7E:90:90:E7:F8:3E:60:94:4D:41:89:7D:0F
Certificate issuer: /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Certificate serial: 010D0C9F4328584BEDB5C5BFCFA7E5E9BCD5BC80
Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 63023
IP address blocks: 45.42.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:c5:bf:cf:a7:e5:e9:bc:d5:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=83e059e2-0b95-45dd-a104-61d7e32035c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:26:96:0e:1a:fe:0d:a9:09:af:a6:d4:73:
fb:50:a2:79:f5:2b:72:21:41:50:94:a9:15:4a:b4:
2d:9b:8c:5b:ba:14:79:e1:5d:c4:a6:87:bf:90:ff:
b6:2e:99:d6:0e:3e:23:04:d6:56:21:c6:c3:42:18:
89:64:34:27:d1:20:7c:42:bb:a0:45:e9:66:31:ca:
f4:fe:9e:f4:f7:e1:4c:69:22:c2:ca:28:3e:4f:98:
84:0a:c2:e0:49:b3:f7:2b:cf:79:11:4e:a6:c6:99:
df:57:c0:0d:a4:25:b7:5c:36:69:82:1a:66:dc:16:
d1:f3:16:d7:3e:4d:92:84:2f:9f:e3:df:b6:fd:3c:
74:72:f7:e7:99:62:06:d7:47:15:40:8b:71:2b:8b:
d0:79:be:3e:c5:5c:34:b1:e2:54:6f:e5:ff:9a:94:
0f:ba:27:e5:98:51:87:6e:c8:43:c1:cf:a0:ea:0a:
20:f9:e8:80:9d:e1:ee:10:83:57:64:01:b7:68:f1:
c3:9f:b5:7d:1c:96:52:1b:d8:11:d4:54:07:93:7d:
37:c4:ec:94:e1:ae:59:96:36:b6:0b:65:31:fc:3a:
81:f7:a4:a3:44:6f:5f:42:f1:82:ff:88:91:72:bf:
e1:ae:8a:47:f7:24:17:67:e7:98:5f:83:ce:26:bf:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:14:3F:E0:42:1A:46:7E:90:90:E7:F8:3E:60:94:4D:41:89:7D:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl
X509v3 Authority Key Identifier:
keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:90:d0:90:2f:a2:ce:76:c3:c6:f8:41:91:74:cf:2d:84:cf:
33:eb:47:4f:e5:a6:20:8e:fe:48:b7:e0:ed:b2:2b:51:4e:77:
92:4e:d6:51:b0:10:9b:b5:20:1a:2b:66:6d:19:7e:ef:e2:61:
d2:03:a3:bb:59:b6:34:5b:f5:33:4a:83:7f:2c:73:24:0c:ad:
e6:fa:09:7c:9c:87:2e:e0:b6:97:61:4b:0b:1c:6f:fd:ac:2e:
c2:d6:9f:26:14:14:87:01:de:2a:7d:47:7e:71:b5:00:02:e5:
28:16:f4:32:40:27:88:6d:e9:91:d2:3b:1a:28:68:82:5f:d2:
00:b7:75:3f:45:47:b1:30:dd:5b:cd:78:4e:24:e1:55:6f:69:
7c:bc:6b:a5:67:1a:f5:12:11:66:bb:33:e0:e9:f9:d0:94:6a:
6b:34:fc:d7:a5:19:be:4c:e3:33:f0:22:ea:cf:15:4d:88:d1:
4f:cb:01:46:c5:be:84:15:5a:94:68:9f:f2:1f:46:fe:61:2a:
42:4f:d5:d8:03:c2:64:6c:e4:a8:0b:a8:62:ef:d8:5d:86:e6:
ec:d8:53:f5:dd:fe:cf:15:07:d4:d9:1f:a9:cc:ff:76:3e:d8:
34:03:b6:b6:4d:20:6f:3f:87:47:8f:d8:f5:eb:e8:e5:3e:3f:
ee:0d:d3:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttcW/z6fl6bzVvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlhYTM2NjEtMGZhNy00M2E4LTkzN2ItM2RiY2MyOGIz
OWQ1MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk
ODNlMDU5ZTItMGI5NS00NWRkLWExMDQtNjFkN2UzMjAzNWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4gmlg4a/g2pCa+m1HP7UKJ59StyIUFQlKkV
SrQtm4xbuhR54V3Epoe/kP+2LpnWDj4jBNZWIcbDQhiJZDQn0SB8QrugRelmMcr0
/p709+FMaSLCyig+T5iECsLgSbP3K895EU6mxpnfV8ANpCW3XDZpghpm3BbR8xbX
Pk2ShC+f49+2/Tx0cvfnmWIG10cVQItxK4vQeb4+xVw0seJUb+X/mpQPuiflmFGH
bshDwc+g6gog+eiAneHuEINXZAG3aPHDn7V9HJZSG9gR1FQHk303xOyU4a5Zlja2
C2Ux/DqB96SjRG9fQvGC/4iRcr/hropH9yQXZ+eYX4POJr+JQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAUP+BCGkZ+kJDn+D5glE1BiX0PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFh
MzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJjYzI4YjM5ZDUvMmFiZWRmNmItYWEzMi0z
MDgwLWE5ZmMtMGJjYmE1ZjJmOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDlhYTM2NjEtMGZhNy00M2E4LTkz
N2ItM2RiY2MyOGIzOWQ1LzQ5YWEzNjYxLTBmYTctNDNhOC05MzdiLTNkYmNjMjhi
MzlkNS5jcmwwHwYDVR0jBBgwFoAUvNFb3EzxJ1bUDs/wzsbserWx3SEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFhMzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJj
YzI4YjM5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSruMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyQ0JAvos52w8b4QZF0zy2EzzPrR0/lpiCO/ki34O2yK1FOd5JO1lGw
EJu1IBorZm0Zfu/iYdIDo7tZtjRb9TNKg38scyQMreb6CXychy7gtpdhSwscb/2s
LsLWnyYUFIcB3ip9R35xtQAC5SgW9DJAJ4ht6ZHSOxooaIJf0gC3dT9FR7Ew3VvN
eE4k4VVvaXy8a6VnGvUSEWa7M+Dp+dCUams0/NelGb5M4zPwIurPFU2I0U/LAUbF
voQVWpRon/IfRv5hKkJP1dgDwmRs5KgLqGLv2F2G5uzYU/Xd/s8VB9TZH6nM/3Y+
2DQDtrZNIG8/h0eP2PXr6OU+P+4N0xs=
-----END CERTIFICATE-----
Generated at Mon Nov 24 00:09:58 2025 by rpki-client