This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa
File: 35790ca9-e5d7-31bf-8055-490fad2a9429.roa (raw, json)
Hash identifier: L/7DY+oDVdsYRqHUo+XyCBlr0kvvgRyWFOGOBTPfb8k=
Subject key identifier: 67:06:DF:6F:81:46:63:ED:AA:ED:4F:CB:C2:A4:EB:38:13:3C:D3:C5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C470BBE6BE04EA93CA4C84740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 7029
IP address blocks: 71.28.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:be:6b:e0:4e:a9:3c:a4:c8:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=43992ca6-324c-45e0-bcee-f960fd61c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:c0:80:1e:20:bd:77:72:8d:66:6b:40:46:
f9:e4:3f:f9:8c:73:43:1d:1c:5b:c2:ca:1f:f1:bc:
97:63:72:da:67:35:c7:de:a8:ba:50:b9:e7:c6:50:
80:d5:7c:b8:ef:b3:ad:b9:9b:fb:8f:5f:9a:22:34:
82:c9:82:fe:aa:21:d0:96:96:b7:43:d9:88:0e:02:
48:b3:a1:2c:fb:a2:11:70:ab:a6:eb:e3:79:ac:3a:
ce:ab:3b:8c:1f:14:4d:7b:f2:1f:d3:c0:12:b8:55:
d2:37:10:fc:73:0e:4f:67:0e:05:83:fc:45:dc:ab:
a2:c2:42:73:7a:ae:72:32:44:a2:e0:75:06:46:6a:
12:de:0d:39:97:93:15:4f:05:f9:2a:00:19:0d:60:
ad:74:25:fd:32:64:92:9d:a1:1e:87:0a:68:bf:c8:
a7:ba:ba:90:71:15:75:0d:df:fb:74:5e:a4:5c:2f:
93:cc:46:1f:35:75:ed:fa:4b:4c:15:4d:bd:6e:5b:
97:24:e4:fa:67:1d:42:9b:15:fe:a1:c2:2f:8a:42:
84:70:7f:58:81:2d:03:ff:33:50:70:e1:68:40:d9:
a3:d7:aa:65:03:df:87:20:bb:60:7c:bc:3b:54:c8:
a7:0a:ac:7b:af:06:5c:9c:31:72:a1:00:16:03:35:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:DF:6F:81:46:63:ED:AA:ED:4F:CB:C2:A4:EB:38:13:3C:D3:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0c:1f:5c:a4:93:b0:33:56:d0:c8:2c:68:1e:2a:9a:3a:8e:
bd:0a:b0:5e:ac:1a:32:92:18:e7:cd:c2:dc:38:46:3a:76:a8:
e0:4b:70:14:00:6d:33:e0:70:5a:c3:db:5a:5e:cc:dc:33:1f:
71:5e:2c:f6:07:37:c6:f6:3f:99:b2:58:d6:aa:0b:58:16:54:
2d:9a:fb:eb:d2:1e:88:8c:03:3b:ac:6f:97:73:52:0a:30:71:
6b:33:94:c3:4f:6a:62:95:c5:17:63:d3:65:25:73:bb:be:2d:
8b:a8:cf:22:ae:f8:0d:5f:9d:9e:50:f8:f6:99:9b:e1:32:82:
d9:0f:ab:5a:e5:72:70:72:90:89:07:e7:99:a5:97:70:e4:82:
bc:1d:6e:35:20:28:a9:29:53:c6:53:b4:45:d3:66:d1:1c:cc:
e3:0e:e7:17:c3:b5:b9:cb:51:67:55:7d:34:fb:14:50:3c:4f:
d1:1f:18:56:57:42:82:51:40:4b:a1:33:ff:64:75:9d:25:d1:
04:c9:69:83:24:5c:87:ee:5c:69:47:f4:b4:6d:61:a6:86:6c:
ac:1f:fd:b6:3c:f5:76:94:76:c1:f5:cd:13:83:77:91:fb:c3:
ad:cd:1c:1d:67:2e:14:78:d8:47:bd:07:e3:db:b4:86:9a:80:
03:32:c0:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC75r4E6pPKTIR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk
NDM5OTJjYTYtMzI0Yy00NWUwLWJjZWUtZjk2MGZkNjFjNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g/AgB4gvXdyjWZrQEb55D/5jHNDHRxbwsof
8byXY3LaZzXH3qi6ULnnxlCA1Xy477OtuZv7j1+aIjSCyYL+qiHQlpa3Q9mIDgJI
s6Es+6IRcKum6+N5rDrOqzuMHxRNe/If08ASuFXSNxD8cw5PZw4Fg/xF3KuiwkJz
eq5yMkSi4HUGRmoS3g05l5MVTwX5KgAZDWCtdCX9MmSSnaEehwpov8inurqQcRV1
Dd/7dF6kXC+TzEYfNXXt+ktMFU29bluXJOT6Zx1CmxX+ocIvikKEcH9YgS0D/zNQ
cOFoQNmj16plA9+HILtgfLw7VMinCqx7rwZcnDFyoQAWAzVwaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcG32+BRmPtqu1Py8Kk6zgTPNPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU3OTBjYTktZTVkNy0z
MWJmLTgwNTUtNDkwZmFkMmE5NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxx8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoMH1ykk7AzVtDILGgeKpo6jr0KsF6sGjKSGOfNwtw4Rjp2qOBLcBQA
bTPgcFrD21pezNwzH3FeLPYHN8b2P5myWNaqC1gWVC2a++vSHoiMAzusb5dzUgow
cWszlMNPamKVxRdj02Ulc7u+LYuozyKu+A1fnZ5Q+PaZm+EygtkPq1rlcnBykIkH
55mll3DkgrwdbjUgKKkpU8ZTtEXTZtEczOMO5xfDtbnLUWdVfTT7FFA8T9EfGFZX
QoJRQEuhM/9kdZ0l0QTJaYMkXIfuXGlH9LRtYaaGbKwf/bY89XaUdsH1zRODd5H7
w63NHB1nLhR42Ee9B+PbtIaagAMywI0=
-----END CERTIFICATE-----
Generated at Sat Jan 10 04:22:46 2026 by rpki-client