This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa File: ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa (raw, json) Hash identifier: rc79Lqk5SAiQ/JgfUtVdhFeN/dApOdJWVcfJ0QK9l/w= Subject key identifier: 9C:E2:F2:B3:BB:BA:20:CA:31:41:59:2C:8F:36:A2:7D:58:5F:59:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC7727E19972C85276DDB90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 75.89.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:72:7e:19:97:2c:85:27:6d:db:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f325ead5-f47d-40c6-86aa-d09bad93eba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:fc:14:0a:ec:60:3b:ee:96:03:46:f0:ec: 27:f8:e2:b1:44:73:71:86:e2:8f:7e:20:36:5f:45: 52:00:cc:93:76:93:99:b5:10:80:40:b9:bc:06:63: e9:97:c2:48:c8:fb:2f:96:59:d6:f1:f8:70:51:6c: d2:d4:09:ba:81:fb:15:6b:10:e5:c8:c0:3a:0b:c8: a2:ae:ac:32:28:71:61:b7:01:2a:73:fa:35:6e:69: 3f:e9:29:7c:3a:24:34:51:c3:99:53:c6:6a:1b:21: fc:00:2d:b9:7b:2f:47:97:12:2f:e8:ae:e4:bc:32: e4:ef:b6:c3:e2:95:2e:32:d7:26:b9:81:38:fb:93: 69:cf:09:c4:b0:68:b5:ca:a7:9a:8f:e6:4d:5e:fa: 81:05:b0:f7:2c:2a:ff:ae:d0:02:62:6d:fb:0a:36: 70:d5:22:d4:2f:f1:98:6e:17:b0:43:d5:de:62:8b: b1:6a:6f:7c:53:39:9f:0b:54:e0:6e:50:76:9e:ba: f7:fa:2c:ae:e5:cf:ee:2b:f1:38:50:79:c7:8f:d9: 6d:71:b8:a5:58:c0:1d:35:52:b7:ba:b1:e6:41:16: b4:37:85:07:54:ac:83:73:89:f5:28:ee:96:2a:a2: e8:e6:1c:b5:fa:cd:07:2c:11:46:bc:31:73:18:53: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E2:F2:B3:BB:BA:20:CA:31:41:59:2C:8F:36:A2:7D:58:5F:59:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:61:23:dd:f9:eb:8b:c0:92:09:c9:33:76:85:04:a7:a3:26: b1:a1:36:4b:37:80:d4:69:5d:e3:1c:75:cb:91:4d:7d:b4:f0: 28:78:03:16:4c:0d:6c:88:f6:cc:20:2b:89:86:64:b4:4c:7c: cf:82:a6:85:a4:f3:69:b3:2f:dd:3d:16:ec:5f:ca:4f:1b:1a: 86:7d:5d:64:09:a8:23:dd:60:f4:67:39:d0:a6:23:9b:87:56: ea:dc:b8:1c:8e:fb:57:14:99:ad:db:0d:6c:bb:94:d6:60:7d: 52:81:15:f5:72:43:5d:20:ea:3f:b7:e8:9f:0b:77:8e:df:86: 9c:71:7c:9f:91:3c:31:2c:bf:2a:ca:3c:ae:65:5a:fa:b9:35: 00:d1:20:31:e0:e1:18:83:89:c0:72:18:70:0a:12:6e:38:1f: 70:83:d5:15:5c:e6:85:8a:5b:74:be:46:0a:38:33:f2:72:80: b8:99:5b:48:80:15:e5:38:6d:57:20:e7:b0:a6:5e:87:9a:74: f4:fb:ec:ba:c3:15:36:a7:81:6e:71:65:4e:16:d2:01:13:86: d4:ea:9c:35:28:8f:58:cf:c4:ca:89:90:74:b6:80:53:20:cd: 51:d1:6f:81:e6:93:71:28:d2:e1:49:95:e7:f6:fd:fd:1f:68: 47:1c:1f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3J+GZcshSdt25AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjMyNWVhZDUtZjQ3ZC00MGM2LTg2YWEtZDA5YmFkOTNlYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42f8FArsYDvulgNG8Own+OKxRHNxhuKPfiA2 X0VSAMyTdpOZtRCAQLm8BmPpl8JIyPsvllnW8fhwUWzS1Am6gfsVaxDlyMA6C8ii rqwyKHFhtwEqc/o1bmk/6Sl8OiQ0UcOZU8ZqGyH8AC25ey9HlxIv6K7kvDLk77bD 4pUuMtcmuYE4+5NpzwnEsGi1yqeaj+ZNXvqBBbD3LCr/rtACYm37CjZw1SLUL/GY bhewQ9XeYouxam98UzmfC1TgblB2nrr3+iyu5c/uK/E4UHnHj9ltcbilWMAdNVK3 urHmQRa0N4UHVKyDc4n1KO6WKqLo5hy1+s0HLBFGvDFzGFMi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzi8rO7uiDKMUFZLI82on1YX1k/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE3M2FjZjYtNjZiNi0z ZmI5LTg1YzUtYzRhMzJhZmY2NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVhI93564vAkgnJM3aFBKejJrGhNks3gNRpXeMcdcuRTX208Ch4AxZM DWyI9swgK4mGZLRMfM+CpoWk82mzL909Fuxfyk8bGoZ9XWQJqCPdYPRnOdCmI5uH VurcuByO+1cUma3bDWy7lNZgfVKBFfVyQ10g6j+36J8Ld47fhpxxfJ+RPDEsvyrK PK5lWvq5NQDRIDHg4RiDicByGHAKEm44H3CD1RVc5oWKW3S+Rgo4M/JygLiZW0iA FeU4bVcg57CmXoeadPT77LrDFTangW5xZU4W0gEThtTqnDUoj1jPxMqJkHS2gFMg zVHRb4Hmk3Eo0uFJlef2/f0faEccH3A= -----END CERTIFICATE-----Generated at Tue Nov 25 06:34:05 2025 by rpki-client