This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa File: a2da74c7-e42a-3467-9e54-de2f59929c42.roa (raw, json) Hash identifier: ucM6ZAMHQaoZn3vyRF5mzcDue1JvSmXuEU+1mZuyqIA= Subject key identifier: BD:C8:45:45:1A:E3:82:DB:9E:6D:8A:9B:DF:8F:43:8F:68:56:06:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BE82092486067A8DC571D1700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 7029 IP address blocks: 173.187.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:92:48:60:67:a8:dc:57:1d:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=3d1d51e1-a716-4e4c-ac62-58adfacac43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:38:b6:19:21:1a:e3:ec:4f:78:59:90:60: ca:58:b2:27:ed:9c:7c:b6:0b:7d:42:26:54:b0:26: 05:ed:14:db:6c:5b:77:a6:ec:ed:4f:1d:dd:11:aa: 92:4c:12:15:3c:96:65:aa:80:cd:9a:72:68:83:de: 0b:52:2e:04:b2:84:6b:cb:81:9b:b0:45:ff:0a:1f: 7b:d2:ac:2c:07:89:aa:98:19:a1:99:df:3e:77:4f: 2b:e5:b8:91:9e:9a:36:b1:9d:e0:cc:69:8d:4b:c0: ff:ea:2e:cd:15:e3:e0:57:2d:00:ca:20:0d:7a:fe: 88:f9:e9:14:70:c4:64:73:2d:64:f8:ac:61:2e:98: 69:bc:aa:0f:1c:7a:46:1e:50:34:8f:0f:c2:f0:80: 02:e4:c9:eb:b4:b2:9e:2e:4a:91:a0:82:d2:5d:04: d2:f4:a3:4c:0b:1b:f9:e7:1c:a6:7e:6b:a8:00:ac: 32:2d:b9:e6:32:ce:43:2d:92:18:f5:bd:95:82:45: 6f:fe:54:d9:f0:f0:9b:35:36:77:4b:f0:6a:bb:10: bf:02:15:12:1b:9a:75:5d:fb:f3:59:f2:e4:51:4b: f0:db:c5:60:01:12:71:40:cc:26:03:43:f9:30:c1: 35:58:7d:0c:69:be:ff:19:f9:85:7f:d7:c2:92:95: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:45:45:1A:E3:82:DB:9E:6D:8A:9B:DF:8F:43:8F:68:56:06:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c5:91:b9:e8:f0:ab:28:c7:ab:2f:79:4f:c0:a2:ab:11:ec: 21:43:21:b0:2d:bd:59:a6:46:5c:5b:e1:84:c1:04:40:7e:78: 6d:99:31:7f:82:b6:60:4a:e9:18:e3:03:60:a7:29:e6:9b:35: 10:59:92:0d:58:26:41:5a:b0:cc:d3:cd:c2:4c:c5:64:1f:38: 25:a9:16:b6:47:d5:5f:2e:0a:4c:f4:68:1e:db:87:be:50:a1: d7:be:0a:e5:2f:86:40:86:96:cf:a0:ff:dc:f1:af:8e:ba:df: c5:9b:46:8c:4a:35:4b:0d:be:ef:e6:70:bb:41:58:4d:57:6f: 9e:4f:be:fe:87:d6:8d:74:82:62:ed:59:65:96:b0:9e:d8:cb: 0e:08:97:a6:65:b1:a7:81:7f:03:84:dd:d0:b1:61:16:b5:4e: f9:48:3e:aa:7e:e3:39:a9:1e:85:68:2a:bc:ad:22:6d:2e:ef: e7:1f:f9:93:9a:10:96:f5:89:7f:89:79:0f:bf:51:0b:63:63: 9e:c7:34:9d:15:a5:24:c6:d5:68:e6:3d:d0:3d:66:b7:51:98: 45:d3:2a:90:ac:1e:75:4b:44:69:7a:0b:94:c7:ac:0c:8f:8e: 33:53:3b:70:63:e7:2e:57:78:42:a0:a0:7c:61:b5:d3:83:7e: 75:d1:8a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIJJIYGeo3FcdFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk M2QxZDUxZTEtYTcxNi00ZTRjLWFjNjItNThhZGZhY2FjNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4A4thkhGuPsT3hZkGDKWLIn7Zx8tgt9QiZU sCYF7RTbbFt3puztTx3dEaqSTBIVPJZlqoDNmnJog94LUi4EsoRry4GbsEX/Ch97 0qwsB4mqmBmhmd8+d08r5biRnpo2sZ3gzGmNS8D/6i7NFePgVy0AyiANev6I+ekU cMRkcy1k+KxhLphpvKoPHHpGHlA0jw/C8IAC5MnrtLKeLkqRoILSXQTS9KNMCxv5 5xymfmuoAKwyLbnmMs5DLZIY9b2VgkVv/lTZ8PCbNTZ3S/BquxC/AhUSG5p1Xfvz WfLkUUvw28VgARJxQMwmA0P5MME1WH0Mab7/GfmFf9fCkpX4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3IRUUa44Lbnm2Km9+PQ49oVgYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYTc0YzctZTQyYS0z NDY3LTllNTQtZGUyZjU5OTI5YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXFkbno8Ksox6sveU/AoqsR7CFDIbAtvVmmRlxb4YTBBEB+eG2ZMX+C tmBK6RjjA2CnKeabNRBZkg1YJkFasMzTzcJMxWQfOCWpFrZH1V8uCkz0aB7bh75Q ode+CuUvhkCGls+g/9zxr46638WbRoxKNUsNvu/mcLtBWE1Xb55Pvv6H1o10gmLt WWWWsJ7Yyw4Il6ZlsaeBfwOE3dCxYRa1TvlIPqp+4zmpHoVoKrytIm0u7+cf+ZOa EJb1iX+JeQ+/UQtjY57HNJ0VpSTG1WjmPdA9ZrdRmEXTKpCsHnVLRGl6C5THrAyP jjNTO3Bj5y5XeEKgoHxhtdODfnXRioc= -----END CERTIFICATE-----Generated at Tue Nov 25 08:25:01 2025 by rpki-client