This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json)
Hash identifier: oe0FanECW2fwenvKfyfDuNlZOmQqyL2JMdG5B90jdwc=
Subject key identifier: 95:FC:70:C8:56:0C:D1:26:39:29:B9:BD:5B:10:C1:FD:FF:24:34:D2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C50D1754468B2EA3BED821F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 7029
IP address blocks: 40.142.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:75:44:68:b2:ea:3b:ed:82:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=1869a3cd-f0ff-45c9-b54f-d35c4c0a092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:18:35:63:1f:a5:29:08:fd:6f:9d:03:02:
fa:48:27:32:af:b1:2c:c5:f8:af:c2:73:8d:96:fa:
84:e4:5b:0b:9d:da:11:2f:b3:c9:c6:b0:4f:60:68:
a7:88:c8:40:a9:a0:8c:ba:e3:dd:62:1f:57:64:ae:
d3:3f:17:6a:1c:2c:94:9f:8b:1f:3c:8c:7e:af:a0:
ab:25:91:86:b5:a2:33:2c:a7:4f:16:d9:32:2c:99:
ec:2a:e0:14:5f:67:12:fa:84:9a:7b:f0:ed:00:d4:
83:48:22:3b:dc:ed:f1:92:64:69:f5:9a:f8:00:21:
a2:be:8e:bb:0c:62:77:dd:f7:e6:70:18:38:2d:e3:
44:ae:b1:83:bc:66:26:cf:36:b2:57:78:9e:09:ce:
4e:08:d3:47:c0:3b:b9:37:14:cd:b2:b2:74:d6:2a:
56:b3:d9:26:ac:08:cd:78:48:44:26:7c:6d:64:b7:
9e:26:00:4f:33:71:fe:b7:e4:3b:06:bf:80:ad:45:
77:4d:c4:8a:cc:5a:5c:ce:f7:ee:4a:3b:38:3a:98:
a4:13:8e:e7:13:79:89:b0:4d:e0:91:fe:0d:ae:f8:
56:f2:ed:3c:c6:6b:dd:1d:e7:a7:64:a3:28:da:c9:
b7:50:32:68:53:25:01:d7:17:36:7c:be:ad:41:a1:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:70:C8:56:0C:D1:26:39:29:B9:BD:5B:10:C1:FD:FF:24:34:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:5c:76:81:14:a0:04:91:ae:e7:f1:7c:30:a9:71:e2:dc:ca:
e4:22:0e:c5:fb:cf:60:f2:e8:88:22:aa:fb:26:7e:85:f0:fb:
52:5f:a5:55:8f:99:60:62:10:ee:92:83:d6:7d:bf:c8:de:5d:
0a:03:bb:e1:ea:7f:be:7f:33:59:a5:0c:c1:ec:4f:ef:39:38:
62:dd:0d:67:d9:56:03:bc:f3:0d:02:c4:17:84:f8:43:18:b0:
b2:a6:8c:94:9b:5f:6b:7e:06:e5:34:12:8a:3c:84:a4:33:71:
df:45:0d:07:36:09:72:12:af:86:0f:b9:d8:0a:af:78:84:01:
b8:46:79:d0:2d:95:0c:7e:09:e7:69:d5:1d:6d:37:c6:1b:06:
fc:86:d2:1a:28:ca:a3:ee:9b:e5:c9:76:06:f0:01:81:25:b1:
dd:a7:96:8d:8c:e8:41:b3:03:78:e0:e4:10:0f:b2:8b:29:05:
50:5c:e2:77:4e:f2:4f:33:12:aa:fd:4f:41:95:8a:43:0e:b1:
54:e5:15:2c:95:d6:9e:ba:e7:a4:bd:1f:84:41:71:d1:75:54:
4c:7c:de:a1:a4:da:1d:da:5b:bf:0d:ec:94:11:59:1d:2a:ab:
e8:28:2d:e6:93:5d:0d:95:80:b8:37:5d:9b:d2:af:3f:b7:87:
ef:de:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:16:35 2025 by rpki-client