This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cd451b4-5ff1-3557-a065-8037e5caf7a1.roa
File: 8cd451b4-5ff1-3557-a065-8037e5caf7a1.roa (raw, json)
Hash identifier: BvrIIqigKJx6rqZPlAAYPMH8hpvG0bdePzjopzjacJY=
Subject key identifier: 27:D4:2E:EE:E5:48:6C:5D:5D:4B:49:81:C0:44:77:5E:6F:C9:C9:15
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C735074A458C647D8D0658F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cd451b4-5ff1-3557-a065-8037e5caf7a1.roa
Signing time: Wed 07 Jan 2026 22:34:42 +0000
ROA not before: Wed 07 Jan 2026 22:34:42 +0000
ROA not after: Tue 07 Apr 2026 21:34:42 +0000
asID: 0
IP address blocks: 216.176.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:73:50:74:a4:58:c6:47:d8:d0:65:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 22:34:42 2026 GMT
Not After : Apr 7 21:34:42 2026 GMT
Subject: CN=b8df6483-6d6b-42f9-83be-97e77b6f65f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:fc:8f:a4:d4:3e:f4:09:ea:65:45:eb:27:
4a:46:88:13:82:96:bc:c7:c8:a4:07:61:a4:f2:69:
2d:5b:12:f0:da:d6:86:b3:6b:4b:de:a9:1e:91:4d:
61:e5:33:b3:bf:3c:22:32:c7:f1:5d:63:db:a6:29:
e0:ff:2b:d5:50:e1:b9:1b:97:7d:09:ff:75:43:54:
53:29:2a:05:6f:45:9b:ad:38:84:05:a6:53:16:8c:
de:95:0c:83:65:d2:1e:22:ec:6a:c3:5b:25:2d:ac:
a9:4a:50:e7:ee:47:96:95:11:f5:cb:27:2f:ad:bb:
fa:7e:b8:8e:e2:ca:c0:bf:0a:a9:aa:1a:0d:21:3b:
38:7f:58:ba:2b:44:4c:38:6a:3d:a7:d7:1a:e6:20:
fd:1a:dd:f9:cc:17:2b:87:f5:d6:0a:75:af:72:66:
d0:36:96:c8:68:75:07:71:00:d9:29:0e:4d:d2:67:
ec:60:a7:dd:71:ea:30:b2:fc:46:10:70:31:3a:fc:
01:2a:5a:61:9b:9a:09:ba:d4:79:e3:c1:3b:7a:c3:
2f:60:9f:b3:72:bf:57:5f:68:be:8a:93:03:be:b8:
a5:15:3f:83:f2:2c:60:48:30:c5:c0:3f:a0:b8:15:
05:c5:ed:98:c1:2e:d4:b0:21:5d:4c:68:14:d0:36:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:2E:EE:E5:48:6C:5D:5D:4B:49:81:C0:44:77:5E:6F:C9:C9:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cd451b4-5ff1-3557-a065-8037e5caf7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.176.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:13:7c:c8:2d:98:4d:da:44:04:53:2f:e0:2f:39:6c:2b:61:
07:55:e5:06:3b:73:b6:73:91:56:73:86:36:69:8d:61:93:2f:
da:e6:f6:47:d0:8c:6c:18:52:ca:64:90:87:7a:b3:20:eb:34:
42:57:31:aa:2b:5b:c3:64:35:31:2a:16:12:b8:e1:40:ab:c9:
9f:97:26:ae:2c:04:b2:1d:c0:a1:32:8a:da:35:72:c4:4a:ae:
21:84:a0:4c:ed:06:e0:ad:b2:6c:9b:8e:14:ce:7f:97:d0:18:
87:b6:4d:aa:5c:fe:47:67:15:b9:48:b7:15:24:79:1f:de:84:
57:03:88:df:96:64:a6:bd:c9:77:d4:36:dd:34:6e:86:bb:0d:
8c:80:24:da:c6:0b:6f:e1:45:f1:8d:ce:ff:bd:80:74:03:f3:
0f:1e:b3:b5:0a:8c:2a:1b:91:53:1f:33:5a:6d:fc:a7:6f:bd:
ef:43:81:a4:f6:76:7e:f6:2a:96:db:b0:c6:11:bd:23:04:81:
14:c1:a7:12:27:15:6a:d1:94:7b:85:9b:c5:b5:14:57:a2:8b:
2f:89:98:96:d9:d3:54:eb:44:4c:47:b5:de:e3:48:08:ce:82:
12:44:dd:47:4c:9b:a5:30:02:e9:43:70:8e:ec:71:71:87:9a:
e8:ed:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:20:49 2026 by rpki-client