This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00e879d-a8cf-390f-86a1-d492f82b89b6.roa
File: d00e879d-a8cf-390f-86a1-d492f82b89b6.roa (raw, json)
Hash identifier: n//gPwvr77rOEpzcsXB99dO1ioIaYHZEiCYU756ndgo=
Subject key identifier: 73:30:96:B9:32:C8:0E:AB:D4:86:3F:98:6A:FA:05:12:42:9F:88:4B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C38ABCE71C5280B4DA1955800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00e879d-a8cf-390f-86a1-d492f82b89b6.roa
Signing time: Wed 17 Dec 2025 22:26:04 +0000
ROA not before: Wed 17 Dec 2025 22:26:04 +0000
ROA not after: Tue 17 Mar 2026 21:26:04 +0000
asID: 0
IP address blocks: 72.4.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:38:ab:ce:71:c5:28:0b:4d:a1:95:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 22:26:04 2025 GMT
Not After : Mar 17 21:26:04 2026 GMT
Subject: CN=0b704dd7-ff73-485c-aee8-1d8eb106a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:9e:4f:33:1a:fa:96:85:7c:a3:ca:64:0e:
af:e3:d8:60:4c:8e:72:f8:ec:16:08:e3:9a:d4:72:
12:42:66:9b:68:b7:4c:b8:ce:88:4e:11:23:48:e2:
ee:cf:3a:fe:81:6f:93:7e:64:b4:94:54:be:00:19:
78:12:22:3f:50:4f:bf:a4:1b:57:9b:1c:ec:cc:de:
08:13:a0:c8:d0:6c:ab:51:cb:55:94:42:71:4c:2c:
a0:7b:c1:57:e4:8d:9a:7e:ff:cd:c1:95:93:c0:f5:
d1:da:dd:e4:4a:82:a8:74:77:33:bf:ef:f9:1a:37:
67:50:58:12:bc:be:44:27:82:49:44:e9:06:ed:38:
6f:6d:9f:0e:62:4d:bc:7b:3c:41:c3:4d:d4:73:9e:
ee:a4:9b:bf:5b:ab:e9:98:66:7f:dd:a2:1d:0a:7a:
52:c1:c0:ed:fe:5d:13:76:d3:1c:cc:7c:b3:30:36:
28:5f:56:23:9b:34:c7:0e:52:ac:f5:36:26:59:ed:
02:d4:4d:0b:4f:a4:6f:e7:8e:2f:04:5e:d1:36:71:
5c:d4:f4:73:e5:57:11:aa:ba:6b:cf:91:69:54:1e:
41:b1:da:c3:b6:6d:0f:5f:35:ae:a4:9d:f4:97:96:
05:ca:aa:b2:9c:2d:08:66:cc:e2:b4:82:86:fb:1b:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:96:B9:32:C8:0E:AB:D4:86:3F:98:6A:FA:05:12:42:9F:88:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00e879d-a8cf-390f-86a1-d492f82b89b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.4.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ce:31:30:18:29:58:67:5f:3d:ee:2c:a2:a8:02:28:45:4f:
2b:c9:a0:e9:bb:76:dd:59:f4:28:f4:ba:f9:d8:9f:62:12:9c:
51:8e:45:c8:6d:f8:ac:8a:24:2e:88:17:c6:75:96:5e:d6:16:
8d:14:cb:0b:c0:36:c5:82:0a:60:fc:2c:05:06:8c:67:9d:58:
2c:1b:ff:06:df:f8:cc:13:3a:61:ad:d2:6d:99:6d:f0:6f:27:
8a:f3:2e:23:fb:91:4b:e0:5b:74:0a:e4:ec:0c:0a:80:97:c0:
45:f5:72:13:18:45:82:23:f0:ee:76:ad:f7:86:5a:e0:e0:6f:
b7:2d:73:66:8c:9a:cd:46:48:da:60:e5:f5:e5:de:8d:c5:9c:
57:06:e1:dd:48:80:b2:09:0f:b6:9d:20:62:74:7b:c9:69:4c:
2a:2a:87:0a:60:2c:96:54:03:4e:1d:81:41:af:05:a7:64:64:
d3:9e:05:e6:6f:ee:4f:27:34:c2:63:18:94:1d:e2:7f:d2:ea:
21:36:5d:21:95:85:53:ef:4b:77:0b:df:25:de:e9:8a:bd:55:
ec:c2:ad:4a:de:66:aa:40:cf:08:d9:02:36:92:e1:ef:b4:c5:
25:ef:3e:d7:6f:dd:3b:84:4f:c5:dd:d3:ef:bd:dd:d0:5d:62:
6e:84:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:52:10 2025 by rpki-client