This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa
File: 5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa (raw, json)
Hash identifier: vtI4K3LuOc8pHlz4GCe+FbSWVs/WC3Mw7e9lUzYwPwg=
Subject key identifier: 00:40:AB:21:A3:A5:30:0C:03:02:EF:09:89:73:DB:84:29:09:BA:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C50D17BD6942266C56975C480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 7029
IP address blocks: 97.66.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:7b:d6:94:22:66:c5:69:75:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=6bcd4602-49c9-4eff-b3ae-b3e5d91245f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:76:62:b8:e1:55:c0:03:7d:9a:39:7c:a1:
d7:27:e7:6d:c3:74:28:e5:28:56:f6:ae:07:c2:73:
06:4c:4a:1f:27:62:90:45:bf:b5:74:9b:b4:9e:10:
ad:9f:f3:13:ec:83:26:e3:72:f3:ee:31:cf:09:e0:
f8:82:f5:c4:04:1b:b9:59:5f:db:e9:67:e4:41:e4:
bb:ac:45:d5:7d:8c:6e:d4:43:08:fe:7a:2d:46:79:
57:c3:71:3e:13:c9:94:05:76:b0:48:57:85:f2:bc:
fc:a7:95:2d:d0:86:33:4b:48:1c:d0:72:f9:6e:53:
11:37:c3:ba:08:45:08:05:12:2c:81:c7:28:76:03:
33:f7:87:36:93:44:07:2d:dd:58:d8:81:5b:79:cf:
70:7c:0a:69:84:bb:59:af:61:27:32:fc:af:db:ee:
46:93:42:ac:a4:bb:67:15:56:b6:ae:54:ad:57:a0:
c6:3c:74:6b:0e:41:21:d2:63:f5:ea:dc:1e:14:3c:
8a:15:ea:3c:9e:ac:aa:cf:fd:88:47:52:41:d4:73:
74:99:4c:04:d8:85:3d:87:86:ba:03:14:6c:25:6c:
cb:bc:7e:8b:fa:08:49:11:41:50:8d:47:9f:01:f4:
cc:5a:78:c7:4f:26:cd:76:e5:1d:d7:f3:61:a6:2f:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:AB:21:A3:A5:30:0C:03:02:EF:09:89:73:DB:84:29:09:BA:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.66.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b8:11:6f:72:4f:81:5b:18:65:89:13:56:0a:56:96:c7:94:
bc:14:b6:50:23:39:67:7f:93:5f:62:c4:68:99:d2:4e:e5:b2:
ff:1b:0e:c3:31:ec:74:74:b3:ee:be:cc:a0:6e:e0:95:28:82:
d5:de:63:8b:80:4e:a4:2b:ef:a1:72:29:db:17:1b:56:f2:48:
54:71:61:36:be:1c:12:11:c4:c0:31:32:f7:60:28:9a:b8:12:
93:73:47:06:ed:f1:7a:3a:e3:16:94:d5:f2:93:6f:34:91:c2:
39:35:fb:6f:ec:c2:47:b3:a4:a4:3a:a7:2d:5f:01:c6:5d:a3:
55:60:65:be:34:b9:98:1f:54:4e:d2:3b:88:3d:b9:4b:37:cf:
85:bb:c4:e0:43:df:54:0a:c1:3a:d1:c5:3f:76:16:43:dc:ad:
76:f1:30:8b:21:ce:0a:8a:bf:13:1a:17:d1:40:d2:55:0b:b6:
04:be:ec:13:3e:76:5f:e4:0e:98:07:4f:5a:9d:79:20:bc:d2:
bf:db:d3:0f:49:51:60:c2:a2:e6:1c:fd:36:d8:28:81:53:b7:
ab:bb:5c:42:eb:75:c9:15:c7:a1:35:59:bf:95:ea:17:51:87:
50:72:cd:da:a3:ee:61:d3:06:23:18:7d:af:44:d0:82:41:f8:
37:4c:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:24:36 2026 by rpki-client