This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa File: 6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa (raw, json) Hash identifier: HhMvQyktD/p9cTEi36MsAN+7cbR92u7pBhDsLXz/oZg= Subject key identifier: 63:FE:1C:E9:4D:E0:7C:E8:A0:06:B1:74:85:57:17:AF:CA:66:3B:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0B06351D67BA514B2D1852C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 72.16.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:35:1d:67:ba:51:4b:2d:18:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=d6afca2c-bd05-46c1-a4ec-c33081581199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:97:f8:37:60:8f:9f:80:67:9d:5c:e0:af: 96:a6:7a:0d:ca:33:32:5e:64:74:86:40:64:00:41: 44:1b:a0:03:1e:4b:66:b2:37:62:2f:10:83:4b:85: 63:4d:08:0a:8c:1c:e9:32:b1:87:02:8a:4c:d7:21: a0:65:72:d0:cc:56:8f:8a:0a:77:dd:33:ee:9a:7a: eb:ad:63:ed:50:f3:0e:08:bd:87:17:ee:95:ab:a7: 0e:ba:a7:41:b0:3d:7e:8e:72:40:3a:4c:ad:24:08: 15:72:d8:ff:d7:cd:ee:de:b4:e5:c4:a2:4d:be:c1: 02:29:11:1f:d7:9d:23:c8:34:1b:70:92:1b:8c:17: 45:d9:ce:f3:31:a1:61:7d:bf:b6:e1:cf:8b:bc:41: 1d:0e:b6:05:34:bf:67:7e:3c:e6:f4:bd:ca:fb:20: 6b:33:45:37:96:d4:4b:3e:0c:ae:a8:b6:58:99:e0: 7e:10:99:65:ca:36:c7:75:7c:7d:e1:26:c7:2a:a5: e8:84:a1:91:2e:50:15:d3:d1:db:dc:06:73:05:e6: ce:33:37:b5:20:5b:bc:63:dd:87:a8:0d:37:d6:65: ec:8e:e1:07:ea:47:ef:be:5a:89:13:9d:d4:21:1a: e7:73:99:de:0c:2e:70:ab:76:ba:c4:95:bf:9d:84: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:1C:E9:4D:E0:7C:E8:A0:06:B1:74:85:57:17:AF:CA:66:3B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d2:a5:a9:9c:c7:9c:6f:e7:da:48:d8:bf:e6:b0:e9:72:2e: 30:29:25:d9:f4:c6:e2:29:68:e0:4f:56:02:73:29:9c:8d:99: ef:8e:63:5b:59:22:3b:ac:cc:17:8d:c9:1d:8b:b2:af:6b:9f: e1:1b:9b:90:b6:9a:de:d8:3f:d2:d3:e5:9a:90:32:80:c2:3e: 07:01:cf:40:c2:f7:f9:a0:a6:34:bb:38:54:21:c0:4b:68:41: fa:d1:f2:3c:4b:8e:b8:2d:91:5e:1c:26:ba:25:25:66:3a:76: fb:1e:89:34:2d:b6:e4:6e:40:bd:60:7c:aa:b0:5e:fd:81:50: 1f:ff:1b:f0:4a:b8:1a:06:4f:e1:0d:95:36:03:0f:2a:13:17: 49:0e:87:17:02:33:c4:39:2e:01:7f:15:47:90:72:9a:28:cf: 2b:43:e2:a7:77:a8:19:fa:77:b6:fe:bd:75:5c:e9:fc:a4:71: ab:1f:c4:f1:af:f6:c0:18:86:ad:c3:fb:b3:ba:94:99:30:0c: cf:dd:b9:3a:29:89:e3:fa:2c:9f:8e:7a:f3:da:0c:5c:f6:c7: d3:3e:72:d6:2b:67:3d:e9:6e:b0:88:82:39:7b:1f:37:a5:bf: 51:0f:8a:ea:b0:88:67:e1:43:3e:95:e0:95:a5:5c:2d:7f:a2: c0:74:fb:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjUdZ7pRSy0YUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk ZDZhZmNhMmMtYmQwNS00NmMxLWE0ZWMtYzMzMDgxNTgxMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4amX+Ddgj5+AZ51c4K+WpnoNyjMyXmR0hkBk AEFEG6ADHktmsjdiLxCDS4VjTQgKjBzpMrGHAopM1yGgZXLQzFaPigp33TPumnrr rWPtUPMOCL2HF+6Vq6cOuqdBsD1+jnJAOkytJAgVctj/183u3rTlxKJNvsECKREf 150jyDQbcJIbjBdF2c7zMaFhfb+24c+LvEEdDrYFNL9nfjzm9L3K+yBrM0U3ltRL PgyuqLZYmeB+EJllyjbHdXx94SbHKqXohKGRLlAV09Hb3AZzBebOMze1IFu8Y92H qA031mXsjuEH6kfvvlqJE53UIRrnc5neDC5wq3a6xJW/nYQm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP+HOlN4HzooAaxdIVXF6/KZjuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg3MGQ4YzctNGU2YS0z YjY0LThkZjgtYTNkYzdkMjZmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrSpamcx5xv59pI2L/msOlyLjApJdn0xuIpaOBPVgJzKZyNme+OY1tZ IjuszBeNyR2Lsq9rn+Ebm5C2mt7YP9LT5ZqQMoDCPgcBz0DC9/mgpjS7OFQhwEto QfrR8jxLjrgtkV4cJrolJWY6dvseiTQttuRuQL1gfKqwXv2BUB//G/BKuBoGT+EN lTYDDyoTF0kOhxcCM8Q5LgF/FUeQcpoozytD4qd3qBn6d7b+vXVc6fykcasfxPGv 9sAYhq3D+7O6lJkwDM/duTopieP6LJ+OevPaDFz2x9M+ctYrZz3pbrCIgjl7Hzel v1EPiuqwiGfhQz6V4JWlXC1/osB0+x4= -----END CERTIFICATE-----Generated at Sun Dec 7 16:57:40 2025 by rpki-client