This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa
File: 958402c9-3b0d-36b2-be3e-11fd05143ae2.roa (raw, json)
Hash identifier: yVhFQTsIR7yywfcg5OBsVLuqw9o3f8dux2t4DGrp6ck=
Subject key identifier: BA:2E:00:1A:BA:41:C8:36:26:5B:74:64:D8:4B:4F:AE:F8:A7:91:02
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C4E068F3652DC48A96D0D0080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa
Signing time: Thu 25 Dec 2025 14:00:39 +0000
ROA not before: Thu 25 Dec 2025 14:00:39 +0000
ROA not after: Wed 25 Mar 2026 13:00:39 +0000
asID: 7029
IP address blocks: 174.131.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4e:06:8f:36:52:dc:48:a9:6d:0d:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 25 14:00:39 2025 GMT
Not After : Mar 25 13:00:39 2026 GMT
Subject: CN=894e1370-1ffd-472a-b680-69c7301798c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:25:ac:3e:a1:60:3b:ee:93:c4:81:5c:97:
26:71:fa:05:21:a0:75:d6:a6:78:c1:d5:25:3c:71:
4a:78:d4:f0:d2:16:86:61:53:72:03:97:76:84:29:
87:cb:af:b6:22:a4:db:60:b8:b8:c1:fa:54:e0:52:
67:34:cb:43:bf:77:c4:1a:9e:b7:73:a3:6b:b2:3d:
ea:c7:df:30:c2:2a:7a:19:69:b7:c5:d8:03:de:d6:
89:32:58:7f:73:13:c0:c0:d9:c6:70:5d:9e:a5:cc:
97:cd:01:7c:e7:f0:e3:c9:ff:0a:0c:21:54:6a:64:
58:d1:23:12:d7:79:7c:32:b0:0a:b0:29:64:27:1b:
dc:56:1b:f7:7a:7c:63:e7:83:2b:b1:fc:d6:08:4c:
30:df:c6:2e:82:a3:d9:1a:6b:c1:97:77:df:56:4d:
ed:23:d8:53:b2:e6:07:49:a3:ff:55:9e:4f:65:a5:
dd:2a:08:31:db:03:69:94:4a:32:c9:8c:64:c3:c3:
75:09:a3:35:57:fd:31:13:ea:c1:11:22:58:f0:0a:
eb:cc:44:17:b1:44:e6:39:0c:73:13:c7:21:b8:d8:
c6:84:56:f7:15:e8:eb:da:3f:34:45:f2:28:be:e4:
74:1a:fb:b6:25:23:d8:92:c4:3f:69:5e:d4:bd:23:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:00:1A:BA:41:C8:36:26:5B:74:64:D8:4B:4F:AE:F8:A7:91:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6a:8b:5e:22:4b:df:29:38:8e:19:01:54:dc:86:ff:3d:da:
43:eb:ee:03:b0:d6:dc:77:9e:8b:20:bf:90:94:0f:6d:96:a8:
99:f8:88:25:cb:d7:91:8f:b4:81:2e:80:2d:63:6a:f4:46:c0:
81:78:28:53:b9:db:c8:fa:36:74:ab:99:b5:1c:4b:d4:ee:e3:
b5:c6:4f:fb:b2:04:89:36:15:40:3b:c4:06:bf:c0:f9:da:0a:
eb:fc:65:fe:d0:78:4b:dd:3f:f5:dd:0c:c9:4b:fb:b1:33:78:
d7:45:5d:ee:b7:1f:c5:b1:bc:45:61:81:a8:b2:c4:89:5d:d9:
f5:02:93:2c:76:33:ed:45:d4:9a:b4:9c:7e:3c:e7:a5:d4:34:
93:83:3c:04:81:f6:21:65:e5:e6:4d:8f:2c:59:5c:9f:7a:1c:
d3:69:1d:fe:1f:a7:04:23:f9:b9:c5:46:af:73:db:03:6e:af:
09:fe:ee:30:01:98:e8:36:43:a8:03:e2:6e:74:60:0c:33:26:
7e:75:e0:7f:93:3f:37:a7:b3:c8:f1:c4:9b:21:63:a0:c5:4b:
b5:58:d2:b6:4b:46:ab:36:37:2c:58:df:c5:6c:ed:87:5a:99:
d2:55:f1:69:79:04:ff:90:27:68:67:09:08:39:74:e1:0b:17:
09:74:08:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo82UtxIqW0NAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk
ODk0ZTEzNzAtMWZmZC00NzJhLWI2ODAtNjljNzMwMTc5OGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAlrD6hYDvuk8SBXJcmcfoFIaB11qZ4wdUl
PHFKeNTw0haGYVNyA5d2hCmHy6+2IqTbYLi4wfpU4FJnNMtDv3fEGp63c6Nrsj3q
x98wwip6GWm3xdgD3taJMlh/cxPAwNnGcF2epcyXzQF85/Djyf8KDCFUamRY0SMS
13l8MrAKsClkJxvcVhv3enxj54MrsfzWCEww38YugqPZGmvBl3ffVk3tI9hTsuYH
SaP/VZ5PZaXdKggx2wNplEoyyYxkw8N1CaM1V/0xE+rBESJY8ArrzEQXsUTmOQxz
E8chuNjGhFb3Fejr2j80RfIovuR0Gvu2JSPYksQ/aV7UvSNKSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLouABq6Qcg2Jlt0ZNhLT674p5ECMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU4NDAyYzktM2IwZC0z
NmIyLWJlM2UtMTFmZDA1MTQzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdqi14iS98pOI4ZAVTchv892kPr7gOw1tx3nosgv5CUD22WqJn4iCXL
15GPtIEugC1javRGwIF4KFO528j6NnSrmbUcS9Tu47XGT/uyBIk2FUA7xAa/wPna
Cuv8Zf7QeEvdP/XdDMlL+7EzeNdFXe63H8WxvEVhgaiyxIld2fUCkyx2M+1F1Jq0
nH4856XUNJODPASB9iFl5eZNjyxZXJ96HNNpHf4fpwQj+bnFRq9z2wNurwn+7jAB
mOg2Q6gD4m50YAwzJn514H+TPzens8jxxJshY6DFS7VY0rZLRqs2NyxY38Vs7Yda
mdJV8Wl5BP+QJ2hnCQg5dOELFwl0CM8=
-----END CERTIFICATE-----
Generated at Sat Jan 10 20:55:10 2026 by rpki-client