This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa
File: ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa (raw, json)
Hash identifier: b0Qq0Vgsfybm22/2YTYkOBL8poFToyZbVmkifguSCc4=
Subject key identifier: 5A:E2:AE:7A:D8:5E:2A:16:C2:58:81:AC:49:E1:82:B4:3C:C2:3A:F4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C1A60D3F0940F02F8B47B7780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa
Signing time: Sun 07 Dec 2025 02:00:30 +0000
ROA not before: Sun 07 Dec 2025 02:00:30 +0000
ROA not after: Sat 07 Mar 2026 02:00:30 +0000
asID: 7029
IP address blocks: 71.29.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1a:60:d3:f0:94:0f:02:f8:b4:7b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 7 02:00:30 2025 GMT
Not After : Mar 7 02:00:30 2026 GMT
Subject: CN=aed8e816-30df-4c4c-97a8-0e29e0df35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:a7:fa:a7:35:86:29:df:69:36:5f:5c:59:
ae:60:0b:ce:ca:ff:ec:43:25:db:89:3a:38:04:24:
c3:74:c0:29:32:91:99:73:87:b1:08:b4:38:68:93:
90:0b:fe:eb:65:1d:65:59:d9:88:de:41:38:b7:88:
c8:bd:07:2f:86:7d:0c:0b:4d:00:fb:0e:ac:45:2e:
77:13:83:f9:f5:b0:26:8d:cd:aa:a3:25:eb:14:dc:
1a:f0:79:e5:e0:e3:1d:3c:2f:19:51:1a:db:18:7b:
ce:ce:dc:98:e1:7f:70:ea:a7:73:bd:0e:e2:54:dd:
a1:b9:8a:d0:91:05:31:d6:44:70:a3:57:da:58:2c:
e0:af:db:cd:8e:7b:0f:17:ac:ac:1f:50:a9:ed:27:
81:94:69:37:51:29:ab:de:0f:c6:01:57:da:9d:a7:
f3:b6:34:73:3e:40:2b:a2:c6:f3:fe:a1:57:59:a7:
9d:15:61:a6:2d:43:be:7c:2e:2e:ff:a3:b5:cc:9f:
19:7a:37:d8:b4:e9:d9:17:03:4d:f6:17:6b:56:02:
d4:1a:10:ea:bb:72:20:c5:58:ca:33:11:36:25:06:
78:97:32:64:56:12:16:f6:cc:94:ea:ac:df:dc:0a:
7a:60:3f:27:9a:7d:70:b5:e4:6a:59:42:8f:db:cd:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:AE:7A:D8:5E:2A:16:C2:58:81:AC:49:E1:82:B4:3C:C2:3A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:73:e2:d3:e9:63:65:25:06:48:a5:24:0b:5b:a1:21:35:42:
e0:eb:47:73:96:83:63:ba:e4:d0:e6:34:19:c4:f8:9f:01:21:
00:d3:98:e1:11:ff:12:3c:17:fe:ce:88:3b:32:ae:1f:58:ae:
9d:a1:cb:44:a1:df:ed:70:6c:49:d9:12:07:f6:a8:0f:8f:67:
d1:ab:a4:53:f0:58:02:4b:64:59:b0:8d:a8:b4:e2:06:14:19:
80:9b:0c:af:5f:8a:79:ab:c9:9e:7f:12:c5:5f:f1:06:6d:5e:
d0:27:2f:02:ae:e8:2c:a0:fc:dc:c7:3b:be:59:36:a9:44:bf:
4b:29:2e:d1:40:34:2f:e6:6c:cd:1e:dc:3b:89:c1:23:ee:8f:
0b:13:ea:ca:9d:55:c0:48:30:55:b4:55:a2:2f:40:9f:10:af:
77:dd:f8:b9:c1:be:64:7e:da:3f:f1:97:43:10:2e:67:89:d5:
16:a8:58:06:17:11:fc:92:ef:7f:21:57:4c:fe:0c:c4:6f:5e:
e8:b2:7f:ec:eb:fa:49:4e:c2:f0:df:ff:c1:e9:1f:9d:69:4d:
c9:b6:c3:66:87:2e:34:59:74:60:96:d9:b5:1b:f8:41:6f:37:
94:3b:13:fd:c0:90:03:1e:7e:f3:32:e9:a0:ee:99:0d:24:1c:
ac:2a:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:55:42 2025 by rpki-client