This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa
File: 08ef01a4-f6bc-372e-94e6-7036094f5449.roa (raw, json)
Hash identifier: wPX6IhfEVsJ6BIoBaDhRHOM+Yurn4mmDB0P+fqAu+6I=
Subject key identifier: 7D:9D:62:78:3A:B9:54:50:7A:53:2F:09:48:25:8D:20:6A:64:CB:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B715CF597D02F394D984C2380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa
Signing time: Tue 07 Oct 2025 13:00:37 +0000
ROA not before: Tue 07 Oct 2025 13:00:37 +0000
ROA not after: Mon 05 Jan 2026 14:00:37 +0000
asID: 7029
IP address blocks: 72.248.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:5c:f5:97:d0:2f:39:4d:98:4c:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 7 13:00:37 2025 GMT
Not After : Jan 5 14:00:37 2026 GMT
Subject: CN=7a0ed796-8447-44f7-bf24-af14d0009494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:ea:c2:c1:8d:53:2b:9e:5d:bb:f4:b3:68:
48:1a:ed:45:be:20:96:ee:82:d5:01:7f:ca:51:ad:
e8:f0:80:fc:eb:73:fd:c0:86:36:ca:8b:33:61:e6:
60:77:c5:50:2a:72:e8:d9:d8:0f:dc:45:2c:40:ad:
cc:5b:56:11:7d:9a:3f:fd:2d:25:8c:9e:81:00:fc:
8e:7a:16:bb:68:c3:2a:e5:8e:97:6e:4e:88:19:2a:
81:83:37:34:74:8e:e5:a7:5d:66:66:65:d5:88:74:
e9:62:e0:6b:1b:fc:9e:52:9d:c7:7c:17:b8:f6:5a:
0d:a4:88:fe:66:b7:5a:e6:26:d6:be:00:de:82:5f:
07:52:2b:c3:f7:59:8d:b5:0e:80:8e:2e:cd:83:7f:
34:fe:44:0e:33:3a:bd:d1:e0:c6:90:e0:00:e3:bb:
99:55:e5:ac:eb:52:35:b1:8a:27:e5:79:23:63:11:
55:b8:19:37:86:21:a3:f8:5c:aa:c2:e8:b3:6f:76:
dd:7e:2a:f7:f9:9f:98:66:d3:32:87:02:98:0f:00:
68:11:c3:00:0b:79:c0:ef:ad:ed:2d:75:f8:4d:65:
cb:8a:28:93:ea:b5:36:60:30:48:55:1f:af:20:86:
39:47:10:82:97:b4:d5:c7:5e:cf:b2:da:e8:b0:08:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:62:78:3A:B9:54:50:7A:53:2F:09:48:25:8D:20:6A:64:CB:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:23:c3:99:44:f8:da:52:c7:c0:3e:8e:0c:cc:57:f2:87:05:
aa:08:69:e6:35:f6:25:cc:86:d2:3b:34:5e:fa:11:e6:e7:ac:
b5:99:47:7c:e7:0c:19:3c:8f:8a:e3:32:d2:16:97:1a:77:cb:
17:68:01:74:cf:45:89:46:2a:61:04:c6:60:72:b7:7d:e2:ae:
97:0b:20:40:05:a7:9f:6c:9f:51:b2:c7:56:e5:8e:9b:48:40:
f6:48:15:be:57:f7:c9:49:aa:33:ea:1a:30:2d:5f:49:00:22:
b7:9a:44:65:ba:14:0c:f3:e1:ca:70:ed:f0:17:92:0d:c9:fb:
35:31:43:22:b8:8d:f3:d6:7f:26:d3:dc:1f:74:e3:25:e5:42:
fc:a3:47:e7:59:48:ed:3a:9a:7e:50:ca:36:84:95:2d:18:1e:
17:d1:b2:54:5d:79:c2:82:f9:e2:b4:69:65:72:b6:53:29:8c:
5a:8b:ce:5a:17:75:23:f3:5b:de:b0:c3:f0:ef:4a:cc:14:d1:
a7:a3:60:80:fd:05:25:cf:26:43:7f:d0:45:6a:94:1c:b4:cc:
29:d3:56:a0:5c:f8:c8:fa:50:ac:f6:33:c8:4c:36:3c:36:a2:
a2:41:dc:0b:f6:60:ea:83:4d:32:bb:4a:01:19:28:67:cc:e8:
e0:53:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 06:34:01 2025 by rpki-client