This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: rKkuhe5HmurbK5QHTnSA4Nr3Ty77m4f0B/z0A2WvZsA= Subject key identifier: DB:D1:69:9D:07:7A:72:CB:F3:38:6D:BF:3D:57:BB:0B:90:BB:0A:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4051111655158CE10E1600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:11:16:55:15:8c:e1:0e:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0c6edd74-0f75-47ec-b060-7550f972d7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:17:ba:aa:c6:76:59:69:65:b6:42:b5:80: f4:ac:ca:a3:9d:46:0f:c7:bd:28:48:ac:f4:58:fb: 4d:d0:a8:a5:e5:1f:60:42:28:a0:26:3c:c8:a7:39: 37:21:b6:94:62:c6:52:69:9c:44:e1:da:1f:a3:c6: 33:5e:1c:66:dc:08:0e:85:09:ee:66:b2:66:1a:17: 73:e5:b2:72:54:77:51:27:b1:5e:da:fb:df:cb:e0: ad:c6:34:72:ba:f6:98:f8:cc:62:05:51:ae:5e:a6: 2b:cf:a1:33:ba:f6:b9:86:f0:45:71:5d:02:2e:42: 1b:cc:01:53:00:57:45:8d:0d:0c:f5:41:a3:54:bb: a6:6f:37:04:59:a0:4e:4a:93:52:ac:71:1e:e4:3d: 16:0a:25:d0:ad:44:43:18:65:33:bb:d9:ae:74:b1: 1a:b3:a7:ec:30:e5:3b:cd:38:c0:46:08:87:b8:6a: 4e:43:c4:b3:35:c1:72:0e:36:ec:12:e8:31:5c:0b: a6:1b:2f:49:60:65:e4:f1:1e:df:0e:c6:94:11:0d: d4:d9:52:2e:b6:f7:ce:1e:5d:f2:cf:6c:d2:80:2a: 51:3e:64:d5:20:bd:fb:bb:98:89:d0:4f:3d:6e:82: f0:d5:c9:55:22:d7:ed:e4:ba:e6:40:ca:80:62:86: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D1:69:9D:07:7A:72:CB:F3:38:6D:BF:3D:57:BB:0B:90:BB:0A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6c:3b:43:8b:22:30:bc:85:05:07:a0:4c:2b:a4:f6:6d:8c: e2:30:92:19:72:74:d8:50:35:1a:fe:7e:8f:d6:06:51:89:df: 63:ec:de:cd:c4:a7:00:75:c0:da:c7:11:20:99:23:b1:0b:9a: 2e:54:9a:ff:39:5a:77:dd:d5:6e:72:4c:bc:0c:93:41:7c:89: 3d:bf:ea:b7:88:bd:df:6d:47:3b:e4:40:f6:f4:0b:30:e4:2b: 88:ee:a1:8b:1f:2d:0a:26:3c:3a:2c:b3:69:ed:66:c4:6a:28: e8:21:04:b9:b4:92:3e:ef:f3:53:28:e7:af:20:9b:57:2b:45: 91:c5:d5:73:61:ad:95:cd:90:4f:4f:b0:37:82:c9:59:d5:5b: 12:7b:6a:9c:be:07:e2:12:83:e8:02:0b:01:c7:cd:e4:7e:90: 63:1c:e8:20:e8:8c:e2:de:89:dc:30:9b:ad:be:84:0f:5b:62: 2c:aa:cb:8f:84:83:d5:da:4f:00:e0:33:4e:4d:b3:b4:df:fe: 21:26:1f:71:0f:41:c3:7d:11:0a:aa:a1:13:e4:33:98:1b:78: b1:14:45:f3:75:39:8e:4c:4b:1a:19:36:ad:44:f2:14:ba:42: 59:d8:5d:e0:fa:4b:bc:50:80:92:c3:8e:cd:20:48:29:db:3f: 12:72:47:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFERFlUVjOEOFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGM2ZWRkNzQtMGY3NS00N2VjLWIwNjAtNzU1MGY5NzJkN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmIXuqrGdllpZbZCtYD0rMqjnUYPx70oSKz0 WPtN0Kil5R9gQiigJjzIpzk3IbaUYsZSaZxE4dofo8YzXhxm3AgOhQnuZrJmGhdz 5bJyVHdRJ7Fe2vvfy+CtxjRyuvaY+MxiBVGuXqYrz6Ezuva5hvBFcV0CLkIbzAFT AFdFjQ0M9UGjVLumbzcEWaBOSpNSrHEe5D0WCiXQrURDGGUzu9mudLEas6fsMOU7 zTjARgiHuGpOQ8SzNcFyDjbsEugxXAumGy9JYGXk8R7fDsaUEQ3U2VIutvfOHl3y z2zSgCpRPmTVIL37u5iJ0E89boLw1clVItft5LrmQMqAYoZoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvRaZ0HenLL8zhtvz1XuwuQuwreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINsO0OLIjC8hQUHoEwrpPZtjOIwkhlydNhQNRr+fo/WBlGJ32Ps3s3E pwB1wNrHESCZI7ELmi5Umv85Wnfd1W5yTLwMk0F8iT2/6reIvd9tRzvkQPb0CzDk K4juoYsfLQomPDoss2ntZsRqKOghBLm0kj7v81Mo568gm1crRZHF1XNhrZXNkE9P sDeCyVnVWxJ7apy+B+ISg+gCCwHHzeR+kGMc6CDojOLeidwwm62+hA9bYiyqy4+E g9XaTwDgM05Ns7Tf/iEmH3EPQcN9EQqqoRPkM5gbeLEURfN1OY5MSxoZNq1E8hS6 QlnYXeD6S7xQgJLDjs0gSCnbPxJyR4E= -----END CERTIFICATE-----Generated at Tue Nov 25 06:32:58 2025 by rpki-client