This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa
File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json)
Hash identifier: otNi83IUI/wI9v45yLpNMqYyKOHhBthskqPFQ3oHyoA=
Subject key identifier: 8F:A1:9B:BF:6C:E6:76:90:6E:D5:64:F4:8F:B7:A1:48:3A:8E:DF:7D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C72520CBE96ACEF7DCCAE0580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa
Signing time: Wed 07 Jan 2026 14:00:39 +0000
ROA not before: Wed 07 Jan 2026 14:00:39 +0000
ROA not after: Tue 07 Apr 2026 13:00:39 +0000
asID: 7029
IP address blocks: 40.142.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:52:0c:be:96:ac:ef:7d:cc:ae:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 14:00:39 2026 GMT
Not After : Apr 7 13:00:39 2026 GMT
Subject: CN=f67b086d-e212-47e4-b17e-fd9dd9eb239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:55:06:0a:64:df:cc:43:7c:d2:cd:e2:ec:
c0:35:83:16:7a:77:c0:d2:ce:0c:af:92:f0:c0:51:
00:b0:96:a7:78:22:08:1c:10:ca:90:3d:7a:e1:09:
6b:1e:1b:c0:51:7b:e6:d5:3e:7d:eb:68:8d:7b:5b:
f3:ed:45:a7:09:0b:2a:54:4d:8b:58:b0:13:97:dc:
29:1a:9c:95:b7:98:37:9d:e9:86:9d:46:cd:56:b1:
a9:47:08:78:35:ba:1f:d8:02:95:fa:e5:56:a2:fc:
4f:ca:73:83:a2:ab:f4:7f:ce:9d:f8:6c:8a:6c:54:
64:49:9f:99:5e:31:bd:1c:5b:be:b4:e5:e8:d5:35:
4b:8e:94:2d:c1:95:cf:1e:aa:ab:c2:eb:f3:4a:e9:
37:49:df:8a:91:22:22:6b:40:17:71:95:49:9a:a4:
f4:15:5e:ce:f4:cf:19:ff:94:ac:aa:4a:bc:e2:bf:
b5:e5:36:4a:26:e4:48:e5:79:56:cc:41:00:a1:eb:
da:2c:b3:3a:d2:00:08:2a:a2:95:3a:5f:be:76:12:
9a:bb:2b:9a:c1:21:e9:28:fe:17:a8:ca:14:67:26:
74:21:a2:62:ab:d8:d2:9d:b3:fa:c2:5f:cf:18:f5:
b9:93:79:bd:80:5b:f0:fc:0a:7c:86:f6:08:b3:14:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:9B:BF:6C:E6:76:90:6E:D5:64:F4:8F:B7:A1:48:3A:8E:DF:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:5e:37:a2:dd:a4:b1:ca:f2:d9:4e:94:6b:1f:ec:44:2b:ec:
18:66:46:5e:8c:96:dd:93:6a:1b:be:75:09:af:a6:da:93:38:
9a:bc:4c:11:c8:31:32:68:10:0f:8a:08:2f:bf:f3:1d:1c:2d:
6c:c3:26:04:54:87:b6:32:a9:33:f8:ba:a8:1e:99:de:bc:90:
e3:a8:bd:5b:2d:70:1b:c9:6e:f2:55:ee:f3:78:ef:7f:45:40:
be:32:dc:01:2f:14:55:17:da:7a:62:1c:fc:1c:c0:ca:fe:b5:
8a:f7:4b:f9:32:7c:de:33:61:34:ba:2c:44:8c:03:f0:ad:be:
74:67:ae:c6:99:d9:2b:54:ba:e7:22:1b:9d:26:03:75:f9:d5:
c9:60:16:58:ea:37:e4:59:1c:55:5a:38:df:0e:9d:41:83:b8:
ac:49:57:cd:48:88:3e:5e:3b:88:5d:95:5f:b1:55:72:25:99:
ae:c4:25:aa:06:44:ae:ec:16:dc:a2:52:90:e5:7b:ea:7a:93:
96:d7:cf:09:44:45:e6:97:05:dc:cb:cb:55:18:69:44:4b:3e:
d6:34:4d:67:9b:d7:7a:85:49:74:ff:2b:7e:30:a2:e3:31:61:
52:3a:c0:1d:c1:b2:f1:a9:48:0a:ce:d3:4e:f5:39:23:4e:c2:
18:1e:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:26:06 2026 by rpki-client