This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa
File: c7fdc099-2cda-3d29-9113-013ca0b1a884.roa (raw, json)
Hash identifier: CjAY1zwTOFxzb8vosER1ILCG/RS/l3ToQiU/f8JZVEE=
Subject key identifier: 9B:5B:05:EF:FD:83:59:58:6B:EB:64:4B:F8:B3:E7:CF:A1:B1:17:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C4E0690629E476CB4EA1250C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa
Signing time: Thu 25 Dec 2025 14:00:39 +0000
ROA not before: Thu 25 Dec 2025 14:00:39 +0000
ROA not after: Wed 25 Mar 2026 13:00:39 +0000
asID: 7029
IP address blocks: 173.189.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4e:06:90:62:9e:47:6c:b4:ea:12:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 25 14:00:39 2025 GMT
Not After : Mar 25 13:00:39 2026 GMT
Subject: CN=ab8729d7-a3d4-44f2-b2ce-1337176cde31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:8a:61:10:ab:b1:33:5c:c9:c6:a0:c8:78:
dd:a4:ac:67:8e:e1:62:29:3f:93:ac:9b:4a:71:ef:
05:c9:05:ca:fb:c0:b8:01:d3:84:ca:6f:3c:0d:c1:
a1:a4:80:ce:24:11:31:ed:13:2c:c8:87:22:95:4d:
db:dd:aa:f9:db:a7:98:a6:67:9f:a8:88:e7:43:29:
b1:9b:bd:5a:1c:0d:7b:11:ad:d0:3e:f0:8b:bc:72:
6a:20:54:86:88:43:67:6f:f7:36:fd:bb:0a:03:7e:
d5:12:37:22:c9:d3:85:8a:f7:74:ae:1d:b0:3c:6b:
e1:79:44:a1:80:de:ed:f5:10:78:1a:fd:96:89:a5:
70:3f:44:11:86:65:c8:26:ca:aa:b1:d9:8d:e2:24:
04:c3:eb:64:3d:06:64:7e:25:70:76:95:a9:9f:66:
d0:59:5b:3f:02:fb:bb:b4:1e:6a:02:f0:ec:fe:e5:
5d:09:7a:8f:5f:49:72:a1:9e:54:b0:f8:b6:03:75:
5d:12:0b:d3:6f:dd:8f:e0:f8:a8:ff:7c:90:88:e3:
ad:33:f5:bf:74:03:a9:08:1e:de:be:d0:d6:25:83:
08:b8:3c:6f:05:73:e1:1d:3f:94:73:7f:bb:e4:36:
42:f4:2a:a0:26:cf:e0:14:da:1b:03:52:df:ef:6a:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:05:EF:FD:83:59:58:6B:EB:64:4B:F8:B3:E7:CF:A1:B1:17:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:dc:94:94:c4:cf:e8:57:cf:29:50:a9:0f:7d:53:05:bb:5c:
c5:f1:17:7d:6a:8a:6a:04:82:7c:94:bc:f3:96:df:4e:5f:62:
dd:6b:ca:74:b6:bf:d9:bc:b1:2f:15:de:7f:c0:aa:8a:1d:3b:
d9:e9:61:5b:62:4d:7a:02:20:2f:90:b4:e4:47:29:da:79:6a:
7b:e2:e5:23:2d:25:5f:a7:6e:76:48:b7:c2:7a:f7:cd:3f:9e:
4f:6d:c6:42:8c:79:b5:0a:76:24:d8:90:34:d0:97:f9:0d:bf:
4e:d3:1a:b5:8e:f7:82:10:c5:28:aa:1b:3c:48:09:c8:d8:41:
83:00:c0:73:fb:ec:fc:89:48:ef:f2:01:56:37:9d:85:fb:7b:
5b:e7:51:d8:c7:f0:51:50:81:87:8b:18:bf:18:96:14:80:b1:
f3:3a:b5:74:80:43:06:94:8e:36:fc:45:77:e8:c8:30:9f:13:
a2:c4:58:ef:1f:52:ee:ed:11:62:90:79:f4:d6:95:46:fc:b5:
e0:79:b3:ff:b6:7c:eb:11:6a:ed:32:52:27:96:7b:89:ee:f2:
08:6a:bc:17:f8:a2:14:ac:b7:13:63:48:c6:fb:9a:19:9d:dd:
f0:f1:6a:f5:aa:c7:ad:53:aa:34:02:87:cc:0a:bf:ed:7d:5d:
67:c5:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:22:59 2026 by rpki-client