This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8122b0d3-d83b-391e-a145-33d9b0f8f558.roa
File: 8122b0d3-d83b-391e-a145-33d9b0f8f558.roa (raw, json)
Hash identifier: smGEGsXGESFRUcEBOp8ZjFfWhSxBX7C4ZP+vmT16Cwg=
Subject key identifier: 28:01:56:F3:52:FA:3F:2E:EC:34:FE:31:60:88:07:28:82:F7:94:E8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C751C063E9311B7FFB79D0260
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8122b0d3-d83b-391e-a145-33d9b0f8f558.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 7029
IP address blocks: 50.96.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:06:3e:93:11:b7:ff:b7:9d:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=7a39786a-180f-4495-9add-567471d2c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:fd:5b:44:53:16:e0:7a:a8:19:1a:53:3b:
e4:97:3e:e2:88:aa:b7:bd:7f:a0:38:29:bb:ae:50:
6c:eb:62:c3:d9:cb:f9:d4:fa:b0:fe:ed:dd:e3:d0:
78:d5:7f:87:0e:e5:f0:c3:66:92:2f:4c:70:85:fc:
67:55:32:f8:6f:1c:12:a0:24:89:9a:05:f9:99:66:
dc:80:a6:b8:17:05:0b:11:8a:e8:5d:e2:90:3b:c1:
52:dc:27:a3:05:d3:fb:18:f2:5f:ab:4f:f4:c0:6d:
b7:79:8c:fd:8a:30:67:cb:75:01:20:5f:85:cd:7a:
b5:dc:33:91:f0:26:a5:8b:ad:a2:dc:a3:89:4a:6a:
9a:e6:4b:79:37:4c:03:61:da:20:7b:23:9c:b4:89:
65:da:c4:a0:1b:1a:27:61:0b:db:dd:30:53:45:8b:
04:70:cd:43:5f:98:c9:2b:45:fd:2e:81:72:54:ad:
ff:ba:0d:2b:1f:94:e0:22:48:ae:77:34:f9:93:b5:
24:0e:24:f8:3d:d2:1c:bf:c0:6a:3d:94:bb:99:20:
83:64:ec:ba:1e:8a:97:89:6e:f6:98:6f:f4:87:0a:
4a:bc:05:a3:f4:44:ca:a7:8c:3c:a7:aa:a7:6f:ae:
fe:b1:7e:09:0e:dc:f5:05:be:41:c1:41:97:3f:70:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:56:F3:52:FA:3F:2E:EC:34:FE:31:60:88:07:28:82:F7:94:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8122b0d3-d83b-391e-a145-33d9b0f8f558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:89:23:2a:e4:a7:b8:19:7b:af:12:2a:17:cf:20:9b:5b:02:
b0:25:43:dd:f5:2d:8c:1d:fa:ae:29:77:97:24:42:5b:c0:59:
e9:34:94:23:19:9e:4d:b7:7d:38:ba:bc:43:8e:ca:09:fe:15:
79:f1:fd:38:7a:32:6f:91:5e:22:57:c2:16:64:a4:fa:be:76:
de:ba:8c:1a:f5:e8:7f:2d:c7:b4:50:73:73:cb:68:e9:9f:b5:
6a:ae:0d:2f:c5:8c:a3:3f:62:07:c5:49:62:8b:af:2f:8f:14:
d2:3c:e2:b8:b8:d4:4a:1e:14:ed:ab:93:90:c4:95:a3:1f:38:
c8:93:f5:85:cb:45:17:35:ac:17:40:2f:e9:e2:c4:76:86:3d:
9f:7a:3a:d2:02:45:30:29:02:4d:03:80:aa:29:9f:72:30:1c:
a5:54:8f:bb:53:a4:1e:46:fb:be:83:bd:75:30:fd:7d:8c:20:
1b:cc:cc:ea:83:19:f2:87:78:d1:0d:1e:81:10:ae:bc:96:38:
64:39:8b:e8:86:97:71:27:54:19:3b:b5:ec:f2:44:bc:88:cd:
25:09:64:56:9a:c9:7d:8b:f7:59:de:4f:ce:f8:24:a3:6d:52:
d2:2f:dc:14:99:47:4b:6c:41:18:f2:51:2e:45:cd:17:47:40:
02:ba:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:22:57 2026 by rpki-client