This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa
File: a3b2d476-53cc-3baa-a6a2-55359bb26138.roa (raw, json)
Hash identifier: 7VMrVPJulctt0fO30EVspstHDqWhX7u6D+/l3lNF4vY=
Subject key identifier: B3:31:48:F9:8F:AB:72:2D:91:68:2D:52:01:8C:9E:D9:55:C8:C7:ED
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C7251C3B616D429F08FADC780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa
Signing time: Wed 07 Jan 2026 14:00:39 +0000
ROA not before: Wed 07 Jan 2026 14:00:39 +0000
ROA not after: Tue 07 Apr 2026 13:00:39 +0000
asID: 7029
IP address blocks: 71.7.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:51:c3:b6:16:d4:29:f0:8f:ad:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 14:00:39 2026 GMT
Not After : Apr 7 13:00:39 2026 GMT
Subject: CN=4fc1bf6b-c4c6-4004-a78b-285cd441522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:3c:d9:4c:07:69:96:e1:d4:be:f0:3e:ed:
98:d9:ca:14:f9:a9:d3:93:0a:2a:ff:e5:2f:56:f0:
2f:79:21:d2:b1:5b:24:64:2c:94:af:72:30:54:3e:
38:8a:a0:89:dc:93:af:b5:f6:a3:c6:6c:8f:34:03:
86:a1:bd:2c:4c:26:bd:be:72:c1:df:b6:a0:f0:41:
f8:2c:8e:fc:8e:95:95:e9:b4:73:ab:7f:c7:6e:6b:
dc:4a:4f:38:55:f4:81:1c:0c:fc:ef:bc:e6:4a:7a:
79:f5:78:c0:a4:23:2a:97:13:02:ad:04:4b:86:f4:
07:16:77:53:08:82:f2:03:bf:8b:db:05:1f:6c:74:
c0:dc:ba:c0:f3:8d:1c:72:44:27:19:0b:f5:8c:16:
49:7f:3b:53:ad:ab:90:76:cb:5e:22:5d:a7:a3:af:
4e:1b:da:c2:a2:8d:55:2a:32:5a:ce:bf:c9:30:81:
ff:bb:16:96:77:b0:55:0b:cd:db:4b:9c:71:17:b4:
06:3c:94:44:82:28:25:af:73:66:f6:ce:76:04:a8:
4b:42:02:e5:e4:ea:b3:e6:a0:32:d1:e9:ad:9d:e2:
cb:50:42:23:9b:63:9e:3b:60:d5:fe:10:be:8a:cf:
01:80:b8:75:8e:2d:d1:40:ad:6c:45:64:e4:83:e9:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:48:F9:8F:AB:72:2D:91:68:2D:52:01:8C:9E:D9:55:C8:C7:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.7.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f6:8b:be:43:0b:48:d3:62:4e:b8:aa:50:0f:45:cb:7d:01:
14:96:2d:b1:24:d1:4c:0f:5f:94:57:85:cb:1b:f8:e8:a1:01:
ad:73:a5:9c:34:df:de:52:c2:66:1d:46:f3:61:5c:69:2d:0d:
4f:ee:17:38:ac:95:7b:64:53:57:f1:18:61:00:a6:45:75:03:
00:7e:1f:41:66:74:bc:ca:04:d1:39:1d:71:4a:72:b8:90:55:
ea:f7:0d:df:d4:58:f5:e4:c8:3f:b2:bd:5c:12:37:9c:6e:fc:
4f:f6:6c:17:d2:84:a2:00:64:93:a0:62:bb:00:96:ad:2d:04:
28:f8:4b:ce:db:03:1f:cc:75:9d:44:1a:cf:89:56:e5:a7:0b:
75:14:00:be:6c:83:5d:7a:de:b3:4c:4e:f2:70:c9:ec:90:9f:
c7:74:13:e9:7d:d6:7c:20:ac:5e:b3:73:22:7e:8e:32:de:67:
cf:2a:6d:98:4c:3b:47:7a:b6:81:70:fe:57:3f:c0:63:c9:d0:
54:da:e6:16:ba:be:02:32:df:86:f7:13:0e:26:01:fc:16:53:
5e:29:7c:39:b8:a2:56:75:9a:8d:65:12:56:d0:8d:85:a8:cc:
05:ea:86:d9:5f:c5:8f:df:99:bc:1b:61:52:bf:0e:16:09:03:
26:b9:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:44:55 2026 by rpki-client