This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
File: fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa (raw, json)
Hash identifier: vu8SR0ABU4FslcDa9lwii8PiRZl3xWomQ/WJo9dEH1U=
Subject key identifier: 14:0D:FA:E0:E7:E9:D3:E7:3D:73:C4:AF:73:27:72:E7:A4:B4:3E:78
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C50D188183726934FA589C82C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 22050
IP address blocks: 173.188.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:88:18:37:26:93:4f:a5:89:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=e5d2521f-804e-40a1-9cef-78260665d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:6e:da:6c:54:c0:c4:bc:aa:da:05:ca:0d:
1b:be:7a:c1:57:0b:3a:a2:36:ff:8b:57:13:80:a2:
30:e0:5d:ba:35:ce:7a:96:69:06:85:b3:f2:31:03:
f9:ae:54:30:a1:dc:23:02:83:39:7a:74:57:6a:4e:
6e:42:f1:08:10:b4:be:8f:15:28:41:37:57:16:80:
02:b7:c2:91:dc:bd:22:03:28:2f:99:24:c1:32:3b:
32:44:b4:74:36:83:45:7d:e3:38:a5:31:7f:f1:26:
93:34:8f:59:43:fb:fd:61:52:5b:ff:4d:80:0d:b7:
34:e1:48:d5:e8:2c:15:d7:60:a6:84:cd:2f:f6:0a:
ab:27:fd:c9:ac:b7:c5:77:29:f2:38:48:01:23:b5:
9a:a0:aa:05:6a:0a:12:fd:33:5a:b4:42:8b:95:83:
8f:65:4d:6c:b8:39:a1:1a:9c:62:4b:32:ce:a3:72:
c9:61:8e:30:b1:86:b2:3f:ac:67:7e:45:5d:40:ed:
00:16:2d:15:ff:1b:2a:ef:8d:5a:6a:ab:24:16:db:
87:57:da:60:f0:c8:3e:9b:2b:56:50:90:e8:a4:af:
c9:c1:50:57:ed:26:ee:97:1b:57:bc:f8:5b:ec:70:
e2:c8:98:6e:5b:d2:9e:c5:fe:7e:1d:7c:a5:09:9e:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:FA:E0:E7:E9:D3:E7:3D:73:C4:AF:73:27:72:E7:A4:B4:3E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:84:25:2c:e6:42:81:47:7e:78:f7:ff:e6:fb:48:1e:49:d5:
2c:d4:94:9e:e0:75:7d:a0:cd:ca:ae:ac:40:9d:b5:e0:63:11:
54:8a:9a:f0:ab:3f:f2:dc:15:05:88:d4:c6:6c:0f:a6:b0:b6:
d5:25:ce:03:67:8e:44:10:e8:49:a6:29:3f:fd:30:20:68:4a:
ab:08:9e:56:d5:49:ce:b2:c8:6e:53:0c:9b:61:c2:d8:c5:7a:
09:5d:cb:42:1e:45:67:76:04:4d:d0:40:79:69:c5:9f:be:ff:
32:f4:3a:67:f1:65:42:d7:73:56:bd:2f:36:a8:59:47:94:63:
fc:c5:d1:df:3a:28:19:04:71:17:14:f5:bf:9c:99:76:ae:4d:
ee:ed:48:aa:94:3c:68:ae:e7:43:2d:b3:1a:34:d0:8f:78:c6:
3e:6c:3a:87:46:63:97:e5:77:77:89:dc:c0:3e:97:65:fb:75:
c1:5a:5c:49:88:9b:55:07:5c:04:69:1e:56:94:69:a3:d7:2b:
11:98:88:7a:2a:5c:14:9a:93:b6:24:f6:2b:37:68:b5:56:d1:
04:09:e4:ef:e7:a1:88:b7:99:a3:95:83:00:62:4f:06:70:02:
87:ba:fd:f1:13:4a:35:e1:88:bc:f6:e2:76:0e:7b:63:c7:98:
29:e1:01:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0YgYNyaTT6WJyCwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ZTVkMjUyMWYtODA0ZS00MGExLTljZWYtNzgyNjA2NjVkN2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Nu2mxUwMS8qtoFyg0bvnrBVws6ojb/i1cT
gKIw4F26Nc56lmkGhbPyMQP5rlQwodwjAoM5enRXak5uQvEIELS+jxUoQTdXFoAC
t8KR3L0iAygvmSTBMjsyRLR0NoNFfeM4pTF/8SaTNI9ZQ/v9YVJb/02ADbc04UjV
6CwV12CmhM0v9gqrJ/3JrLfFdynyOEgBI7WaoKoFagoS/TNatEKLlYOPZU1suDmh
GpxiSzLOo3LJYY4wsYayP6xnfkVdQO0AFi0V/xsq741aaqskFtuHV9pg8Mg+mytW
UJDopK/JwVBX7SbulxtXvPhb7HDiyJhuW9Kexf5+HXylCZ6rsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQN+uDn6dPnPXPEr3MncuektD54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiMGE1ODAtMmZiNC0z
ODlmLWE2OGEtOTgzZjk3NmZhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqEJSzmQoFHfnj3/+b7SB5J1SzUlJ7gdX2gzcqurECdteBjEVSKmvCr
P/LcFQWI1MZsD6awttUlzgNnjkQQ6EmmKT/9MCBoSqsInlbVSc6yyG5TDJthwtjF
egldy0IeRWd2BE3QQHlpxZ++/zL0OmfxZULXc1a9LzaoWUeUY/zF0d86KBkEcRcU
9b+cmXauTe7tSKqUPGiu50Mtsxo00I94xj5sOodGY5fld3eJ3MA+l2X7dcFaXEmI
m1UHXARpHlaUaaPXKxGYiHoqXBSak7Yk9is3aLVW0QQJ5O/noYi3maOVgwBiTwZw
Aoe6/fETSjXhiLz24nYOe2PHmCnhAfM=
-----END CERTIFICATE-----
Generated at Sat Jan 10 04:22:17 2026 by rpki-client