This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa File: c77f3968-1e5e-334f-96fa-e76652c76e3c.roa (raw, json) Hash identifier: E/b8Zt1N0kKepeAazgptPL76WRWBF3QH8BoqfVp0Ovg= Subject key identifier: F0:42:FE:66:9D:06:FA:6D:FE:66:BD:BD:71:60:E5:0B:5E:BC:F9:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BEDB5D0306252EC8F7A369000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 7029 IP address blocks: 71.28.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:d0:30:62:52:ec:8f:7a:36:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=58dc0a25-3ff7-4708-b1bf-4ddfd0307f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:89:fa:68:77:43:c9:40:d4:5b:9c:f2:a9: 89:ff:e8:c4:46:4b:df:65:47:7e:17:c4:bf:67:40: d3:f2:87:32:5c:b2:83:51:9f:37:0d:dd:fd:04:42: bc:d5:72:ef:70:9c:ea:04:26:45:43:54:c4:78:6b: 0f:14:ad:06:5a:34:ad:ae:17:f0:7a:01:13:32:1d: 6e:85:93:f3:43:eb:24:9e:bb:34:ca:77:1b:0b:2a: 53:11:45:64:53:5c:0f:0b:2b:46:27:39:eb:74:6c: 70:89:8a:06:90:62:c8:8f:60:0a:8e:f1:02:9c:52: 35:be:b7:1a:89:6f:43:55:34:47:92:8c:58:8c:76: 4f:0f:49:1c:ae:8a:95:f6:5b:b1:d5:18:7c:e4:21: b3:ca:72:5b:0e:6a:29:1a:79:4b:ed:1a:0a:8b:d9: ef:bd:46:5f:09:cd:30:88:44:88:65:65:16:66:16: ca:14:a6:16:9b:a1:05:11:ac:81:15:49:6c:ae:f5: e3:5e:eb:88:08:49:10:6d:b2:37:e3:26:7e:03:8d: 28:36:6d:e9:d1:3f:43:ee:ea:ec:77:21:6e:9c:c5: 51:b8:db:c5:c5:b8:ce:b7:92:15:69:00:52:fc:e5: b1:3b:6c:ad:0a:77:d5:96:6d:2f:6c:d4:04:a3:c0: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:FE:66:9D:06:FA:6D:FE:66:BD:BD:71:60:E5:0B:5E:BC:F9:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:96:1d:ed:d8:83:4a:da:bb:7c:c4:94:30:bf:76:57:88:df: 39:90:fe:b1:27:ec:99:1c:2b:86:d7:5e:04:b8:fc:9b:f9:fd: f0:7c:4b:5f:61:05:65:72:ae:31:e1:07:46:7d:b6:fe:29:b4: 01:58:0a:28:24:8d:f2:99:87:6f:06:7b:8f:b0:d5:4b:42:82: 8e:d2:4e:5f:64:38:16:83:2f:a7:38:fb:7a:97:4b:56:da:89: c8:3b:1e:ab:bd:2b:c6:2b:39:79:81:3f:63:f8:03:66:7e:03: 32:bf:eb:f3:8b:ac:18:e5:a0:91:09:1c:fc:33:39:e1:f6:61: 2c:f7:50:04:a5:22:6d:59:5d:1a:6c:8b:92:0a:9b:1b:5c:19: 95:50:5c:46:e3:35:d0:af:2f:4d:71:59:5e:3b:8b:7a:a5:8e: e8:a7:be:da:89:10:0a:51:9a:68:93:ea:af:fe:b7:27:ba:3a: fc:b6:85:49:23:e1:9e:53:93:2e:c6:62:17:19:43:67:4b:2f: e5:13:20:a8:c8:f7:1f:df:ea:3c:97:24:a6:91:11:93:a8:21: 96:d4:cd:7c:89:4f:a9:ff:ef:be:25:d7:e3:31:94:a4:a7:57: ad:21:4b:7a:ac:45:7c:e9:e6:a1:e2:78:ba:58:4a:84:b7:90: ad:e8:7d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttdAwYlLsj3o2kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk NThkYzBhMjUtM2ZmNy00NzA4LWIxYmYtNGRkZmQwMzA3ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvuJ+mh3Q8lA1Fuc8qmJ/+jERkvfZUd+F8S/ Z0DT8ocyXLKDUZ83Dd39BEK81XLvcJzqBCZFQ1TEeGsPFK0GWjStrhfwegETMh1u hZPzQ+sknrs0yncbCypTEUVkU1wPCytGJznrdGxwiYoGkGLIj2AKjvECnFI1vrca iW9DVTRHkoxYjHZPD0kcroqV9lux1Rh85CGzynJbDmopGnlL7RoKi9nvvUZfCc0w iESIZWUWZhbKFKYWm6EFEayBFUlsrvXjXuuICEkQbbI34yZ+A40oNm3p0T9D7urs dyFunMVRuNvFxbjOt5IVaQBS/OWxO2ytCnfVlm0vbNQEo8BObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBC/madBvpt/ma9vXFg5QtevPn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc3ZjM5NjgtMWU1ZS0z MzRmLTk2ZmEtZTc2NjUyYzc2ZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSWHe3Yg0rau3zElDC/dleI3zmQ/rEn7JkcK4bXXgS4/Jv5/fB8S19h BWVyrjHhB0Z9tv4ptAFYCigkjfKZh28Ge4+w1UtCgo7STl9kOBaDL6c4+3qXS1ba icg7Hqu9K8YrOXmBP2P4A2Z+AzK/6/OLrBjloJEJHPwzOeH2YSz3UASlIm1ZXRps i5IKmxtcGZVQXEbjNdCvL01xWV47i3qljuinvtqJEApRmmiT6q/+tye6Ovy2hUkj 4Z5Tky7GYhcZQ2dLL+UTIKjI9x/f6jyXJKaREZOoIZbUzXyJT6n/774l1+MxlKSn V60hS3qsRXzp5qHieLpYSoS3kK3ofYs= -----END CERTIFICATE-----Generated at Tue Nov 25 06:31:56 2025 by rpki-client