This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa
File: 0aaab681-3551-3e6d-bdad-a8f966c205ec.roa (raw, json)
Hash identifier: AczR+QSHEHo2pIJx6Kp9UA7BmW9v8HSpIAqdDrb6W+o=
Subject key identifier: 1E:E2:A4:B3:E9:11:CE:30:7A:CF:AB:D4:46:8C:84:DC:EE:4E:40:E7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C50D1854372F3371CBA5F7540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 7029
IP address blocks: 2604:cb00:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:85:43:72:f3:37:1c:ba:5f:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=a9527e0f-abda-4709-9b20-219e54df805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:57:7d:07:5b:ce:c5:ca:af:e2:23:5f:b3:
ee:bc:78:8a:b1:5a:aa:2f:23:fd:9a:e0:08:f7:16:
25:f1:42:16:9c:a7:ac:6a:11:61:8d:61:4f:df:50:
e8:2d:bf:32:8f:8e:e8:01:c6:a7:5a:fa:9a:63:cc:
a2:75:9a:fa:56:02:1a:be:2b:27:ba:7d:9c:0d:4c:
db:b4:d1:3d:2b:fb:90:56:1f:dd:20:aa:7b:8f:e8:
7a:ea:36:0a:73:98:9b:99:2a:12:44:ac:6d:25:ba:
f5:35:5d:7d:cb:16:b5:7c:ee:16:36:d1:b4:90:ac:
8f:7d:40:db:6b:01:1f:5f:d2:f9:97:4f:9d:46:c9:
44:92:39:26:4e:ba:be:8b:56:5f:98:f5:ab:c9:cf:
09:a5:42:07:7c:b6:8b:ef:6c:4d:65:94:26:4b:48:
a8:05:67:c7:55:8f:51:b9:bb:70:8c:01:e7:d7:e6:
0e:31:3d:7c:08:1b:73:8c:bc:b5:10:7d:b8:9f:3f:
d2:71:e8:57:c6:85:77:1c:a8:12:15:f9:3c:d5:25:
e2:7e:2a:cb:a5:0e:97:93:9c:60:24:10:50:b8:1d:
6f:95:99:df:5e:be:eb:e2:66:3a:fe:d8:10:26:8f:
62:04:00:91:73:39:78:46:9c:01:4d:7c:37:41:c9:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:A4:B3:E9:11:CE:30:7A:CF:AB:D4:46:8C:84:DC:EE:4E:40:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:7b:11:5d:47:b9:06:45:eb:95:b6:ff:a8:bb:f7:0d:02:21:
dc:23:c7:d6:14:6a:84:1e:11:fd:1f:15:d1:28:2e:20:94:db:
b5:32:16:e8:1a:84:e7:e5:ed:7f:e4:54:01:b9:53:54:66:2e:
95:d9:d5:6c:64:77:da:4a:5b:7b:12:8e:a7:a2:d6:92:7b:c4:
7a:49:ff:c2:91:f7:2c:6e:69:f0:5d:49:cd:e3:fe:1f:92:41:
26:f5:1d:f9:84:68:a7:df:a8:f3:d3:05:39:9c:f5:01:a5:af:
ac:70:01:2e:12:b4:5b:77:d8:aa:10:9b:14:74:aa:68:2d:22:
08:8a:49:82:9d:9f:a2:50:64:ca:87:ca:70:4c:fd:95:83:dd:
20:dc:e1:f7:10:f4:69:50:bf:a6:0a:7a:ce:40:22:ff:29:6c:
bf:9c:4e:b2:2d:da:36:8a:6c:c4:48:67:ca:a5:a6:6c:80:40:
25:d7:a0:83:2f:cc:ea:b6:8d:fc:df:0d:86:4a:74:66:ea:2a:
b4:02:67:7d:9e:68:70:85:73:c4:9e:ca:3f:13:e9:eb:42:29:
13:ac:7c:ac:21:24:cf:98:1c:66:4d:18:dc:87:fd:88:42:ab:
18:29:75:47:44:eb:ff:1c:68:10:8d:df:85:24:5d:f7:f5:f3:
a1:f0:e3:9f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YVDcvM3HLpfdUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk
YTk1MjdlMGYtYWJkYS00NzA5LTliMjAtMjE5ZTU0ZGY4MDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6FXfQdbzsXKr+IjX7PuvHiKsVqqLyP9muAI
9xYl8UIWnKesahFhjWFP31DoLb8yj47oAcanWvqaY8yidZr6VgIavisnun2cDUzb
tNE9K/uQVh/dIKp7j+h66jYKc5ibmSoSRKxtJbr1NV19yxa1fO4WNtG0kKyPfUDb
awEfX9L5l0+dRslEkjkmTrq+i1ZfmPWryc8JpUIHfLaL72xNZZQmS0ioBWfHVY9R
ubtwjAHn1+YOMT18CBtzjLy1EH24nz/ScehXxoV3HKgSFfk81SXifirLpQ6Xk5xg
JBBQuB1vlZnfXr7r4mY6/tgQJo9iBACRczl4RpwBTXw3QcmNYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB7ipLPpEc4wes+r1EaMhNzuTkDnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFhYWI2ODEtMzU1MS0z
ZTZkLWJkYWQtYThmOTY2YzIwNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS3sRXUe5BkXrlbb/qLv3DQIh3CPH1hRqhB4R/R8V0SguIJTbtTIW
6BqE5+Xtf+RUAblTVGYuldnVbGR32kpbexKOp6LWknvEekn/wpH3LG5p8F1JzeP+
H5JBJvUd+YRop9+o89MFOZz1AaWvrHABLhK0W3fYqhCbFHSqaC0iCIpJgp2folBk
yofKcEz9lYPdINzh9xD0aVC/pgp6zkAi/ylsv5xOsi3aNopsxEhnyqWmbIBAJdeg
gy/M6raN/N8Nhkp0ZuoqtAJnfZ5ocIVzxJ7KPxPp60IpE6x8rCEkz5gcZk0Y3If9
iEKrGCl1R0Tr/xxoEI3fhSRd9/XzofDjnw==
-----END CERTIFICATE-----
Generated at Sat Dec 27 07:18:30 2025 by rpki-client