This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa File: 677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa (raw, json) Hash identifier: A4M/EgMcmD9siNVOfxopTR3D5ZWOtIXSvGJ3c2fLH2k= Subject key identifier: 9B:92:F8:26:43:49:11:EF:41:F9:3D:C4:85:79:25:69:CC:4E:9D:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B4D11F13B99133C0A4DF2C2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 72.16.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f1:3b:99:13:3c:0a:4d:f2:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=66ffdfb0-c9a0-467c-8ff9-588d51f9d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:31:9e:b2:29:74:45:37:af:00:95:35:d7: 42:7e:c4:73:90:47:ba:e9:fc:2d:c4:ac:b1:d0:b9: 26:f0:30:2c:84:bc:f9:67:fb:27:1b:bf:63:bf:51: e2:4b:10:8e:88:39:48:17:b5:4c:e3:95:9f:1c:16: f8:a1:34:9b:59:95:93:90:03:09:62:a6:cf:1c:1d: 62:74:11:00:03:71:7f:70:03:53:22:24:06:83:c4: 8d:7f:43:85:9a:8b:23:cf:d0:4c:f4:b9:94:08:09: 1a:28:fb:73:c0:e5:38:9f:33:2a:2d:4a:fd:39:72: 2b:7f:1e:ec:02:d2:28:26:9c:a2:be:37:72:d0:05: 48:a8:69:e6:df:4c:01:91:f2:e8:15:a2:48:69:5d: bd:72:97:0f:4c:fd:a6:06:22:2e:f4:db:b1:bb:04: 4f:99:66:76:32:94:0f:03:46:bc:93:6e:4e:64:c6: ca:6f:2d:74:0a:62:05:b4:c6:e3:53:6e:aa:bf:5f: ab:0e:86:16:18:0a:81:c4:07:ec:71:23:d3:75:80: b1:40:ec:8e:ec:6b:17:01:c0:23:af:3c:c9:00:cd: 07:7f:cc:d9:37:1f:4e:93:3e:d3:b3:fb:40:96:58: 2c:5c:d6:4e:c3:da:af:bb:fd:03:9d:f8:0d:a9:36: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:F8:26:43:49:11:EF:41:F9:3D:C4:85:79:25:69:CC:4E:9D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:64:45:28:57:26:7a:24:ce:0e:65:eb:ac:6d:67:52:ec:85: cb:ae:60:14:12:ac:07:b6:2d:9c:da:bd:4d:4a:c0:ee:18:85: ec:32:ad:c5:d6:a9:ed:41:1b:da:cc:12:9b:b3:d9:af:2d:22: 8c:c2:2e:a6:fc:f7:66:02:ee:3f:d0:f2:3f:d3:1f:64:ea:a8: 96:84:38:21:a8:3c:96:f0:bd:0a:cb:15:69:16:88:ce:d6:5d: 7d:12:ea:0f:13:cc:14:27:44:ba:cf:97:24:12:c6:69:98:0d: f5:52:3d:f2:46:1a:76:03:b7:cd:b5:b2:b5:23:42:64:e9:45: 07:19:e6:70:dc:9b:28:b5:c7:58:65:c4:0e:fc:6f:ba:57:7a: d8:1f:71:1a:29:da:c9:98:08:cc:af:77:51:28:cf:23:f3:85: ca:ef:73:0c:1a:c8:1f:ff:ad:52:7e:00:92:f5:b7:a1:ac:61: e6:f2:4d:a1:fa:36:3c:e7:d8:44:58:25:56:cd:53:47:95:9b: 76:59:e7:c7:81:d7:53:8a:e4:e3:6f:20:29:37:1b:e3:ec:19: 18:67:39:6b:1d:f0:8b:20:ab:53:68:8b:bf:64:40:75:c9:bd: 46:a6:15:55:41:b2:18:41:bf:16:7a:db:04:1d:89:02:c0:54: 1c:bc:b8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfE7mRM8Ck3ywsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NjZmZmRmYjAtYzlhMC00NjdjLThmZjktNTg4ZDUxZjlkNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjcxnrIpdEU3rwCVNddCfsRzkEe66fwtxKyx 0Lkm8DAshLz5Z/snG79jv1HiSxCOiDlIF7VM45WfHBb4oTSbWZWTkAMJYqbPHB1i dBEAA3F/cANTIiQGg8SNf0OFmosjz9BM9LmUCAkaKPtzwOU4nzMqLUr9OXIrfx7s AtIoJpyivjdy0AVIqGnm30wBkfLoFaJIaV29cpcPTP2mBiIu9NuxuwRPmWZ2MpQP A0a8k25OZMbKby10CmIFtMbjU26qv1+rDoYWGAqBxAfscSPTdYCxQOyO7GsXAcAj rzzJAM0Hf8zZNx9Okz7Ts/tAllgsXNZOw9qvu/0DnfgNqTYH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuS+CZDSRHvQfk9xIV5JWnMTp1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc3YmY0NDktMTZhMy0z NWY4LWIzY2ItY2FjYWM2YzBiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1kRShXJnokzg5l66xtZ1LshcuuYBQSrAe2LZzavU1KwO4YhewyrcXW qe1BG9rMEpuz2a8tIozCLqb892YC7j/Q8j/TH2TqqJaEOCGoPJbwvQrLFWkWiM7W XX0S6g8TzBQnRLrPlyQSxmmYDfVSPfJGGnYDt821srUjQmTpRQcZ5nDcmyi1x1hl xA78b7pXetgfcRop2smYCMyvd1EozyPzhcrvcwwayB//rVJ+AJL1t6GsYebyTaH6 Njzn2ERYJVbNU0eVm3ZZ58eB11OK5ONvICk3G+PsGRhnOWsd8Isgq1Noi79kQHXJ vUamFVVBshhBvxZ62wQdiQLAVBy8uI0= -----END CERTIFICATE-----Generated at Tue Nov 25 08:21:08 2025 by rpki-client