This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3507d52e-eb6d-301b-8f9c-311800d0bcc6.roa File: 3507d52e-eb6d-301b-8f9c-311800d0bcc6.roa (raw, json) Hash identifier: t3sSqAWs7ho1Z/9JPqH+7PiQTy8QLsinLzRq1Bys4NE= Subject key identifier: 90:53:4C:13:CB:F0:80:2B:1B:DD:B3:DB:69:30:15:FA:40:94:5A:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A42488AD095A1E08EA8A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3507d52e-eb6d-301b-8f9c-311800d0bcc6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.29.192.0/20 maxlen: 20 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:42:48:8a:d0:95:a1:e0:8e:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=841552ca-ccfa-422e-8838-900aaa84d7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:42:96:d3:52:a2:ca:c6:a4:27:ec:3f:e8: 4a:a4:96:1c:07:28:e3:49:7d:8e:46:35:6d:02:ee: 55:1e:4b:4c:57:9d:e5:0c:b0:1a:bb:24:d2:a8:18: b9:38:41:0a:23:47:72:b1:76:91:aa:30:08:2a:03: e5:98:93:70:ec:ae:5a:73:a3:7e:8d:80:11:2e:57: 45:92:bb:5f:e5:12:9f:12:64:28:6a:da:f5:ea:4b: 94:f0:94:8d:6a:3f:30:a3:23:16:8a:61:a7:82:97: 08:91:f5:88:c0:05:04:d5:27:b1:1f:68:19:8e:3d: 13:b7:84:f1:2f:69:88:fa:65:6e:43:ef:c4:0d:46: b9:33:27:9f:01:5b:03:74:a6:e7:1d:b3:6b:4d:b4: 70:4c:19:90:ec:eb:3d:53:d2:0b:3b:8e:81:87:22: 83:9a:ca:09:51:c9:3e:50:a1:a7:69:33:1b:52:0d: 13:dc:62:65:3d:bc:26:c3:bc:e6:d0:a5:84:0d:0c: 1f:1b:89:cc:0b:68:87:f9:20:d3:dc:24:16:e4:1f: ff:11:97:10:c6:4b:0f:85:0c:1c:49:d5:5b:af:44: 12:55:7e:b6:65:e4:c9:54:3c:d4:bb:10:a7:c0:0a: 32:71:3a:c3:18:bc:7d:b3:95:8b:8b:dc:b8:5b:b2: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:53:4C:13:CB:F0:80:2B:1B:DD:B3:DB:69:30:15:FA:40:94:5A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3507d52e-eb6d-301b-8f9c-311800d0bcc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.29.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0d:ee:75:3d:b3:82:ff:ca:a5:6b:f5:76:ee:fe:d2:57:23: 52:1c:3b:87:95:b0:0c:40:26:71:1b:c9:3e:cd:a2:96:ff:a7: 44:5c:e1:84:5c:0f:90:d5:52:eb:e4:7a:2b:17:6e:b1:6e:d0: 7a:c8:fe:c1:aa:d7:e7:e9:16:95:9f:f5:68:3f:b0:34:1d:df: 98:56:c2:b9:32:b1:1c:10:ff:39:b3:e1:4a:21:29:99:46:d7: 53:a2:07:0c:a5:e3:63:0d:88:74:93:74:40:c9:11:fa:f3:09: 6a:2e:5d:7b:d4:40:8e:b6:05:e4:97:79:2a:a0:1d:8b:38:d6: e3:53:b3:77:5e:f0:de:f0:be:9b:fa:ab:32:7d:65:3b:b8:69: c6:80:b2:8c:4a:4c:d9:48:00:40:83:f9:f2:ec:ce:bd:a4:07: 1a:e2:26:dc:28:f9:5d:d8:f6:1f:f2:39:a7:16:9e:08:98:eb: a6:5f:5a:5f:75:a3:fa:2d:19:92:c5:fb:23:4b:96:09:55:83: a8:b0:33:63:c0:e8:e0:82:96:9f:9b:88:56:4b:5c:ec:48:90: 4f:55:c1:f6:ef:fc:68:93:77:c1:cd:bf:9f:8c:e5:0c:b0:20: 24:69:46:32:a8:c5:12:c1:e0:8f:0e:0c:b2:e6:bc:72:37:15: 4c:4e:3a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkJIitCVoeCOqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODQxNTUyY2EtY2NmYS00MjJlLTg4MzgtOTAwYWFhODRkN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHhCltNSosrGpCfsP+hKpJYcByjjSX2ORjVt Au5VHktMV53lDLAauyTSqBi5OEEKI0dysXaRqjAIKgPlmJNw7K5ac6N+jYARLldF krtf5RKfEmQoatr16kuU8JSNaj8woyMWimGngpcIkfWIwAUE1SexH2gZjj0Tt4Tx L2mI+mVuQ+/EDUa5MyefAVsDdKbnHbNrTbRwTBmQ7Os9U9ILO46BhyKDmsoJUck+ UKGnaTMbUg0T3GJlPbwmw7zm0KWEDQwfG4nMC2iH+SDT3CQW5B//EZcQxksPhQwc SdVbr0QSVX62ZeTJVDzUuxCnwAoycTrDGLx9s5WLi9y4W7IfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBTTBPL8IArG92z22kwFfpAlFoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzUwN2Q1MmUtZWI2ZC0z MDFiLThmOWMtMzExODAwZDBiY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzx3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsN7nU9s4L/yqVr9Xbu/tJXI1IcO4eVsAxAJnEbyT7Nopb/p0Rc4YRc D5DVUuvkeisXbrFu0HrI/sGq1+fpFpWf9Wg/sDQd35hWwrkysRwQ/zmz4UohKZlG 11OiBwyl42MNiHSTdEDJEfrzCWouXXvUQI62BeSXeSqgHYs41uNTs3de8N7wvpv6 qzJ9ZTu4acaAsoxKTNlIAECD+fLszr2kBxriJtwo+V3Y9h/yOacWngiY66ZfWl91 o/otGZLF+yNLlglVg6iwM2PA6OCClp+biFZLXOxIkE9Vwfbv/GiTd8HNv5+M5Qyw ICRpRjKoxRLB4I8ODLLmvHI3FUxOOtU= -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:23 2025 by rpki-client