This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa File: 95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa (raw, json) Hash identifier: OJN+iSc8Fatn2FiohfPl0q6tgbAUNA9d96LbzHtvgqw= Subject key identifier: 58:D8:C1:0C:82:86:74:CD:F5:EF:E3:C2:BE:99:CF:B7:3D:6A:08:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404D54D36BC290B7667980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.189.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4d:54:d3:6b:c2:90:b7:66:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f9a3c197-f5e4-4eb2-89e5-a4b3c14aa1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:e2:2f:4e:13:aa:c2:3c:9d:2c:a6:78:75: e2:69:6d:35:db:49:91:92:d4:b4:72:bb:61:19:ab: d3:59:5b:8a:d8:fd:a0:e9:ed:66:a1:2f:89:1a:30: 47:95:54:9a:09:85:4b:d1:22:6d:81:45:9f:8a:50: 44:64:56:8d:61:3f:92:c9:48:52:c7:9c:2f:7f:48: f4:66:d6:24:93:b7:9a:10:53:8a:7d:86:4f:79:08: 15:19:b6:dc:c5:a8:36:c3:09:29:ec:16:cf:bf:93: cc:ca:f8:55:4b:1f:3e:e7:f6:6a:8c:04:b5:6b:24: 94:af:0e:e2:29:02:11:6c:32:7b:d6:06:cc:29:af: f2:9b:01:91:50:34:53:04:01:a2:f1:3b:89:3a:7a: 08:6a:e2:c9:9f:e1:c6:f6:e0:6b:bb:1f:ba:40:95: 08:c8:b9:6b:c6:5d:17:e2:6e:4d:1e:72:8a:d6:f9: b3:ab:1c:a6:0a:fd:c9:ff:21:cc:2b:ea:ee:88:7d: 4e:01:89:a4:b7:81:48:23:9b:19:7e:70:f0:e9:fa: 51:e5:3c:35:5c:d4:14:7e:f1:dd:e7:cb:fe:8c:2d: 53:21:b2:d1:8b:38:1e:d5:01:3e:a1:1c:f9:d4:14: bf:43:23:7a:fe:72:16:6c:b5:ce:eb:96:65:66:55: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:C1:0C:82:86:74:CD:F5:EF:E3:C2:BE:99:CF:B7:3D:6A:08:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:52:a6:35:2d:c5:cb:83:2d:d3:8a:08:e7:7e:9d:14:e1:d5: 8e:27:9a:04:67:e2:b9:98:94:97:cb:c2:ae:8e:4b:28:21:c8: c3:5a:73:75:0f:29:c3:72:54:49:20:07:92:5b:a5:37:5c:c7: 32:e1:ff:88:ae:10:3f:48:8d:7c:c9:75:c3:8e:55:a7:af:94: ef:aa:b3:26:14:2c:73:ac:10:8c:6b:e8:bf:a7:16:41:96:b7: 6a:c0:29:97:c5:ae:ce:6b:1d:b0:34:a8:8e:e7:a6:56:3b:36: df:00:e5:ea:ef:e5:07:54:1b:63:27:fe:8f:84:9d:67:5f:ef: ab:cb:e5:fa:d4:03:a1:1a:13:4b:06:ef:bb:90:51:73:61:e6: fb:3c:35:af:9d:69:5b:38:8d:3f:b1:cf:ae:e0:f4:37:af:54: 19:b6:44:74:c4:7a:a9:d3:67:d4:7b:9b:47:82:0a:ec:78:1c: 31:de:b5:a5:24:86:03:88:52:75:d9:6a:d9:43:56:2e:ef:3a: 81:25:8f:44:18:4e:d1:b3:25:61:55:23:78:7d:b9:ac:a1:89: 36:f9:03:4b:61:35:c6:94:b5:86:ed:41:ec:44:5d:fe:cc:83: aa:ff:d8:fb:c4:0e:cd:b6:07:30:14:b0:39:5f:fb:04:42:b6: 20:87:e5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE1U02vCkLdmeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjlhM2MxOTctZjVlNC00ZWIyLTg5ZTUtYTRiM2MxNGFhMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbiL04TqsI8nSymeHXiaW0120mRktS0crth GavTWVuK2P2g6e1moS+JGjBHlVSaCYVL0SJtgUWfilBEZFaNYT+SyUhSx5wvf0j0 ZtYkk7eaEFOKfYZPeQgVGbbcxag2wwkp7BbPv5PMyvhVSx8+5/ZqjAS1aySUrw7i KQIRbDJ71gbMKa/ymwGRUDRTBAGi8TuJOnoIauLJn+HG9uBrux+6QJUIyLlrxl0X 4m5NHnKK1vmzqxymCv3J/yHMK+ruiH1OAYmkt4FII5sZfnDw6fpR5Tw1XNQUfvHd 58v+jC1TIbLRizge1QE+oRz51BS/QyN6/nIWbLXO65ZlZlVqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjYwQyChnTN9e/jwr6Zz7c9agiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVjN2FmZDctYWMwYy0z YzRhLWIzNDctN2I0M2M4YThkYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtSpjUtxcuDLdOKCOd+nRTh1Y4nmgRn4rmYlJfLwq6OSyghyMNac3UP KcNyVEkgB5JbpTdcxzLh/4iuED9IjXzJdcOOVaevlO+qsyYULHOsEIxr6L+nFkGW t2rAKZfFrs5rHbA0qI7nplY7Nt8A5erv5QdUG2Mn/o+EnWdf76vL5frUA6EaE0sG 77uQUXNh5vs8Na+daVs4jT+xz67g9DevVBm2RHTEeqnTZ9R7m0eCCux4HDHetaUk hgOIUnXZatlDVi7vOoElj0QYTtGzJWFVI3h9uayhiTb5A0thNcaUtYbtQexEXf7M g6r/2PvEDs22BzAUsDlf+wRCtiCH5Us= -----END CERTIFICATE-----Generated at Tue Nov 25 06:32:45 2025 by rpki-client