This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa
File: c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa (raw, json)
Hash identifier: 1T5o+3XDA2gpZH44dWFOJeixBUsg7yqHk0ToZ8Fn05g=
Subject key identifier: A8:BA:4D:15:F8:41:00:DF:C0:4F:09:B1:EC:C4:67:E3:BB:93:EC:0E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B715CCFA816972AA2C94EE880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa
Signing time: Tue 07 Oct 2025 13:00:37 +0000
ROA not before: Tue 07 Oct 2025 13:00:37 +0000
ROA not after: Mon 05 Jan 2026 14:00:37 +0000
asID: 7029
IP address blocks: 2607:f560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:5c:cf:a8:16:97:2a:a2:c9:4e:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 7 13:00:37 2025 GMT
Not After : Jan 5 14:00:37 2026 GMT
Subject: CN=bd58df4a-4861-415c-b798-6cabcd593f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:ba:46:db:71:39:ba:c1:1f:73:60:39:21:
86:5d:03:76:28:69:b2:3b:b9:7e:19:84:09:46:a2:
ab:c7:dd:cd:05:cf:0e:e7:1d:71:99:81:dc:f6:ba:
a7:eb:58:ea:6a:c3:bc:12:90:37:46:5b:8e:9b:83:
b4:45:03:1a:03:aa:48:30:ba:3e:14:f1:fd:27:9b:
81:69:d8:06:98:33:ab:f5:7a:3d:c2:2f:13:85:aa:
77:e5:70:db:1d:ab:84:99:6e:b3:ea:a9:10:ce:7f:
65:67:06:f5:e3:d7:f8:92:26:19:b9:87:46:6b:ce:
fb:eb:eb:f3:b5:30:17:0e:d8:a1:8c:1d:3d:c8:41:
2a:b5:1b:71:2e:85:2d:62:65:94:e8:00:32:ef:c3:
78:8f:24:72:e0:ec:ba:e8:45:81:b8:58:43:db:f9:
3d:e9:ad:0c:d2:f3:7b:2a:ea:9f:3e:18:b2:cb:12:
f9:d0:0b:4b:93:28:d7:a1:14:94:9f:d4:45:53:58:
b0:4f:58:fe:95:94:13:33:f3:fc:5a:99:f7:33:18:
e3:05:34:d0:40:51:a9:bb:7d:5b:93:20:78:3b:4e:
b9:3d:ad:5e:50:7a:17:98:02:ea:bf:a8:bf:d3:b8:
32:0b:b3:3c:6d:36:5c:6c:8a:43:d7:0d:16:b1:38:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BA:4D:15:F8:41:00:DF:C0:4F:09:B1:EC:C4:67:E3:BB:93:EC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f560::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c0:58:ee:21:69:5c:0f:b6:3b:bf:00:3b:31:cc:d0:b0:65:
86:8e:c5:5b:91:53:14:a9:a0:61:0c:b8:90:9a:1b:9a:1d:49:
e2:59:76:e4:a5:03:04:44:a5:ec:2e:d1:34:28:64:c1:5a:8e:
ba:7f:e1:3d:c5:4e:78:49:e4:78:e7:86:d1:51:58:29:8d:cb:
04:4f:f1:00:c2:72:dd:b4:1a:0e:9d:f2:85:f2:93:98:67:b4:
b5:bf:98:cd:6a:17:17:23:8a:74:86:d1:9a:03:9b:58:d2:13:
bf:bf:34:f5:15:d8:c0:d0:a4:c3:c5:2f:a1:8d:12:e3:3d:de:
65:e5:a6:96:64:ba:1c:7d:e6:f2:8d:fa:11:d4:bb:ae:ad:25:
99:c0:b7:1e:8f:26:0d:80:d5:dd:75:db:1e:0f:28:e4:83:ff:
40:5a:d2:bf:2e:e2:e3:38:95:d1:4e:ab:77:61:26:b3:b9:15:
a9:f8:27:06:03:4f:bd:13:40:55:b0:5d:76:c0:93:02:89:3a:
b8:dc:f0:b7:f6:44:57:36:af:8a:32:3b:1c:27:5e:77:bf:ed:
56:14:6a:21:06:4b:60:b4:58:1c:75:2e:2a:0a:71:8e:7d:4a:
45:c6:0c:52:b5:46:4c:e5:86:3c:88:c6:85:d1:6f:1f:ba:03:
bb:01:b4:96
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXM+oFpcqoslO6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YmQ1OGRmNGEtNDg2MS00MTVjLWI3OTgtNmNhYmNkNTkzZjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH66RttxObrBH3NgOSGGXQN2KGmyO7l+GYQJ
RqKrx93NBc8O5x1xmYHc9rqn61jqasO8EpA3RluOm4O0RQMaA6pIMLo+FPH9J5uB
adgGmDOr9Xo9wi8Thap35XDbHauEmW6z6qkQzn9lZwb149f4kiYZuYdGa8776+vz
tTAXDtihjB09yEEqtRtxLoUtYmWU6AAy78N4jyRy4Oy66EWBuFhD2/k96a0M0vN7
KuqfPhiyyxL50AtLkyjXoRSUn9RFU1iwT1j+lZQTM/P8Wpn3MxjjBTTQQFGpu31b
kyB4O065Pa1eUHoXmALqv6i/07gyC7M8bTZcbIpD1w0WsThllwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKi6TRX4QQDfwE8JsezEZ+O7k+wOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdmZjQ2ODMtZDU2YS0z
OThiLWJmN2YtYTA2MTdmN2Q5NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1YDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBRwFjuIWlcD7Y7vwA7MczQsGWGjsVbkVMUqaBhDLiQmhuaHUniWXbk
pQMERKXsLtE0KGTBWo66f+E9xU54SeR454bRUVgpjcsET/EAwnLdtBoOnfKF8pOY
Z7S1v5jNahcXI4p0htGaA5tY0hO/vzT1FdjA0KTDxS+hjRLjPd5l5aaWZLocfeby
jfoR1LuurSWZwLcejyYNgNXdddseDyjkg/9AWtK/LuLjOJXRTqt3YSazuRWp+CcG
A0+9E0BVsF12wJMCiTq43PC39kRXNq+KMjscJ153v+1WFGohBktgtFgcdS4qCnGO
fUpFxgxStUZM5YY8iMaF0W8fugO7AbSW
-----END CERTIFICATE-----
Generated at Tue Nov 25 06:33:07 2025 by rpki-client