This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa File: 9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa (raw, json) Hash identifier: 5PRxngtsoyBL4YevcT5Wjcq0/C7ylkJ0Ok1jtecP844= Subject key identifier: B2:14:AF:74:9C:E4:3F:73:2A:4B:ED:19:90:E3:7B:08:36:B5:04:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BF77B406F439A15AA6F0FDC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa Signing time: Mon 24 Nov 2025 14:00:37 +0000 ROA not before: Mon 24 Nov 2025 14:00:37 +0000 ROA not after: Sun 22 Feb 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.29.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:7b:40:6f:43:9a:15:aa:6f:0f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 24 14:00:37 2025 GMT Not After : Feb 22 14:00:37 2026 GMT Subject: CN=e8fb8265-afae-4c9b-8366-01107a9d8c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:2a:e5:51:e5:5a:a8:04:29:fc:5e:5f:0d: ab:87:80:f6:a1:3f:89:5d:f3:81:98:10:cf:74:1e: fd:5d:77:38:d3:83:49:63:38:90:ab:f6:33:c7:ec: dd:fb:03:c7:46:63:fa:4f:43:bf:9b:f4:f1:2f:e0: f4:89:de:d9:b0:6b:bc:1b:cf:f3:1f:7b:18:16:27: 24:1c:9a:ac:8d:fa:96:c9:33:81:e7:a8:ed:24:cd: c6:5c:71:fc:b8:36:f3:2c:06:6f:dd:88:29:58:f9: d7:fb:87:60:d1:71:e0:97:a6:54:be:98:e0:38:8f: a9:14:3d:8e:0c:75:5e:e1:db:2b:b1:34:da:08:f2: e1:4d:40:67:e2:ec:e9:4c:24:e5:b6:e8:26:d3:a5: f4:02:49:cd:2d:eb:40:b8:6e:ec:1b:bb:b1:a2:7e: c9:a4:9d:1c:a4:34:d4:9b:6f:1e:03:1b:02:58:7c: 02:51:80:b6:12:20:65:79:3f:cc:97:94:a7:ea:68: 89:29:17:db:9f:fe:67:94:a1:e1:88:c2:d7:22:7f: 9d:c7:9e:8f:7a:07:a9:ee:57:28:76:35:b8:16:30: 85:f4:09:7f:a4:4a:89:05:10:5b:24:46:5a:ff:d8: 50:cc:6a:a3:66:a1:6e:ca:ae:8f:42:5a:3a:d3:90: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:14:AF:74:9C:E4:3F:73:2A:4B:ED:19:90:E3:7B:08:36:B5:04:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d1:38:d1:59:76:34:e9:e5:a6:b9:09:1a:2f:98:e3:73:28: b3:16:0e:57:38:95:52:9f:43:36:c0:78:e4:89:a8:77:e0:b6: 5f:8a:d9:54:12:6f:22:bd:fa:8d:d7:d9:64:ed:32:f5:23:98: 64:ad:cf:5b:1d:5b:f8:96:58:98:bb:23:40:49:af:4f:2b:ba: 42:8f:f8:92:56:23:80:8b:d3:60:d2:8e:05:51:2f:ad:4b:b2: 0e:e0:88:97:5c:06:8a:2a:48:76:9b:4f:a1:59:88:bf:08:29: 65:b2:21:f7:bc:97:3c:8b:10:0d:03:f2:9d:b4:ec:1d:4e:35: bd:a0:83:9d:84:95:3a:4d:eb:35:95:79:85:dd:82:92:8c:20: 68:09:dc:8e:64:5a:6a:7c:b3:6c:de:af:f0:d4:bd:a7:a3:9a: 36:6c:6f:99:ae:5f:0d:40:a9:36:ee:35:34:e6:70:22:c8:9a: 89:b3:0e:8a:9d:16:8c:33:3e:64:19:09:05:47:38:f6:b8:8a: 41:c5:d5:56:3d:11:37:46:0f:35:43:1b:cf:75:c2:be:81:45: b2:12:3f:a3:d5:90:f9:60:81:66:49:5f:97:77:ad:42:59:c2: cb:88:66:5f:1d:24:0d:5f:76:28:0f:e8:da:2a:8b:df:f3:df: 4d:37:fd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv3e0BvQ5oVqm8P3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEyNDE0MDAzN1oXDTI2MDIyMjE0MDAzN1owLzEtMCsGA1UEAxMk ZThmYjgyNjUtYWZhZS00YzliLTgzNjYtMDExMDdhOWQ4YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSQq5VHlWqgEKfxeXw2rh4D2oT+JXfOBmBDP dB79XXc404NJYziQq/Yzx+zd+wPHRmP6T0O/m/TxL+D0id7ZsGu8G8/zH3sYFick HJqsjfqWyTOB56jtJM3GXHH8uDbzLAZv3YgpWPnX+4dg0XHgl6ZUvpjgOI+pFD2O DHVe4dsrsTTaCPLhTUBn4uzpTCTltugm06X0AknNLetAuG7sG7uxon7JpJ0cpDTU m28eAxsCWHwCUYC2EiBleT/Ml5Sn6miJKRfbn/5nlKHhiMLXIn+dx56Pegep7lco djW4FjCF9Al/pEqJBRBbJEZa/9hQzGqjZqFuyq6PQlo605AbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIUr3Sc5D9zKkvtGZDjewg2tQQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNiZjgwMjgtYzg3MS0z M2ZiLTllMmMtYzMwZTU0ZjAzMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzRONFZdjTp5aa5CRovmONzKLMWDlc4lVKfQzbAeOSJqHfgtl+K2VQS byK9+o3X2WTtMvUjmGStz1sdW/iWWJi7I0BJr08rukKP+JJWI4CL02DSjgVRL61L sg7giJdcBooqSHabT6FZiL8IKWWyIfe8lzyLEA0D8p207B1ONb2gg52ElTpN6zWV eYXdgpKMIGgJ3I5kWmp8s2zer/DUvaejmjZsb5muXw1AqTbuNTTmcCLImomzDoqd FowzPmQZCQVHOPa4ikHF1VY9ETdGDzVDG891wr6BRbISP6PVkPlggWZJX5d3rUJZ wsuIZl8dJA1fdigP6Noqi9/z3003/dQ= -----END CERTIFICATE-----Generated at Tue Nov 25 08:17:15 2025 by rpki-client