This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json)
Hash identifier: OBrim3nd1kfivmnA/qmNExLiIFQGrWbccbRyEul+2os=
Subject key identifier: 8E:4B:EE:70:A5:17:2A:4C:9B:9B:E0:33:EA:B1:4E:A9:5B:C5:4E:71
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C1FF62A745517B2B077693C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
Signing time: Tue 09 Dec 2025 02:00:31 +0000
ROA not before: Tue 09 Dec 2025 02:00:31 +0000
ROA not after: Mon 09 Mar 2026 01:00:31 +0000
asID: 7029
IP address blocks: 173.188.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1f:f6:2a:74:55:17:b2:b0:77:69:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 9 02:00:31 2025 GMT
Not After : Mar 9 01:00:31 2026 GMT
Subject: CN=85d62706-1073-47d6-b726-73b7faa46186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:4d:9d:f4:44:79:a7:14:fa:72:27:c0:06:
5f:a0:45:b9:ae:6a:75:a9:89:50:28:46:79:8e:9c:
e8:c5:9b:26:d3:50:47:1a:60:43:83:cf:88:91:1e:
ff:f9:ec:ce:9e:a1:8a:e9:94:df:38:c9:7e:f2:fb:
d4:13:ef:13:83:2a:c4:43:c4:fa:40:12:7e:04:38:
76:8b:84:4b:73:9c:6a:f3:47:b0:a5:3e:78:09:de:
94:1e:59:27:1d:46:d7:6c:3a:26:71:a4:22:52:e1:
aa:b1:a9:cd:c4:42:46:1b:d6:b2:17:35:7e:d6:d7:
e1:84:63:e7:6b:32:78:d3:c0:c2:8e:a3:09:54:11:
63:8c:5a:56:37:d2:cf:e8:0d:01:dc:92:47:3b:a3:
56:aa:91:ac:21:a0:eb:42:5e:a6:3f:0e:09:5d:45:
18:fe:2f:29:56:14:f3:52:58:e2:0e:b5:78:6b:8c:
af:60:b3:d6:26:c7:07:50:eb:64:41:fc:c2:97:e5:
71:27:45:9b:4a:9b:7e:48:aa:f3:b6:31:07:ae:16:
a5:79:54:44:75:28:a8:59:c7:7c:c6:4f:81:d3:5e:
7d:9f:9b:9b:67:24:97:07:81:e9:f8:be:d8:db:4a:
d9:c8:0a:59:21:c7:86:b5:26:47:01:b7:05:25:b1:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:EE:70:A5:17:2A:4C:9B:9B:E0:33:EA:B1:4E:A9:5B:C5:4E:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:70:4e:16:3d:f3:f8:5c:cb:42:41:5d:22:b7:d6:55:0a:48:
a8:f2:8a:49:52:30:e1:27:75:5c:f2:33:85:c4:4d:a5:24:41:
70:ed:4e:42:91:19:ff:bc:a9:33:00:aa:12:ea:9f:44:2c:50:
16:e7:2c:ff:a4:67:fe:c2:6a:ba:b2:3f:59:fe:fe:05:ed:7b:
55:c3:87:1b:5a:48:d6:79:77:0a:2b:d6:fd:c7:66:4f:3d:38:
d2:e1:ee:c8:7b:64:72:6c:67:37:fb:1a:6b:d9:ff:f0:8a:3b:
f1:2c:32:ee:16:99:2a:1e:32:2a:ed:10:c5:b1:2d:96:d9:10:
ad:4e:8d:5c:1a:f4:93:17:9a:81:86:4c:d8:a8:fd:69:43:44:
3b:c6:73:9f:65:16:4f:ec:38:8c:7c:bd:56:fa:09:4d:00:c8:
d9:e6:f0:2a:22:ba:b1:f1:43:32:e7:64:96:53:4c:25:cc:23:
76:e7:73:3e:24:07:be:2a:e5:82:10:79:21:1f:6d:11:6e:2c:
fa:c3:60:89:ae:86:cb:20:c7:3d:9b:ed:a9:74:ca:57:1e:41:
94:95:95:6b:cd:d4:13:34:25:65:aa:12:36:81:ac:a2:7d:f8:
bd:6e:aa:36:d1:ba:99:84:82:4c:c4:c6:f5:b1:ee:4e:40:92:
51:b3:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:10:20 2025 by rpki-client