This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
File: b38aba09-012f-3d09-87cf-93c71f23adb3.roa (raw, json)
Hash identifier: iBm4K3HrzOgARMEhSIAim+Vil5QDfq+DctaUMS0LGVc=
Subject key identifier: 36:B5:06:D8:9B:14:01:74:D0:EB:BF:C3:FE:35:36:9A:9F:28:3A:C4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C0B0638C74617D8941C386B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 7029
IP address blocks: 173.185.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:38:c7:46:17:d8:94:1c:38:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=fe394b33-efa1-478d-a1bf-3a833c649172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:aa:53:6b:70:05:9e:8a:5c:be:21:dd:1b:
29:0a:26:16:fd:6a:b0:04:b4:4e:69:96:03:a7:76:
f7:8b:e4:64:59:12:8a:5f:f4:6b:6e:c8:e7:9a:d3:
66:ff:16:97:11:8b:d7:47:f0:7c:70:46:84:44:f7:
94:2e:47:ca:60:21:3c:64:1b:43:1b:24:57:3b:2c:
9e:d3:39:79:ad:71:4f:40:c6:79:83:23:57:73:23:
27:6c:48:9a:71:77:25:ac:6e:49:2f:ca:5d:d4:7c:
a1:c2:e7:ef:75:3c:6b:b6:1c:66:fc:42:53:89:ab:
64:30:85:e2:70:5c:89:b2:15:4d:28:5f:7c:41:a5:
0b:49:f6:7c:01:bf:82:35:fd:51:bc:96:3d:47:9c:
80:56:48:f8:bd:fe:95:51:76:d0:d4:70:97:dd:0e:
4e:6d:bb:b3:db:6c:e8:a3:24:b1:18:90:67:8d:88:
43:41:fc:4c:cf:63:73:dd:f3:9e:a6:6b:ca:31:41:
c0:6f:5b:43:20:92:f6:05:92:42:d9:71:4d:5a:ed:
b9:01:36:e8:a8:26:c9:8c:d2:69:ff:12:b7:ac:84:
ed:d9:fa:20:17:46:bb:96:28:c2:0a:01:4d:a3:7f:
83:48:87:23:da:4f:22:95:87:b3:c7:dc:10:79:bb:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:06:D8:9B:14:01:74:D0:EB:BF:C3:FE:35:36:9A:9F:28:3A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:92:ca:6a:fb:94:e7:60:f0:21:5d:ed:42:56:ed:24:05:0e:
33:d9:74:3b:ef:c0:5a:b4:68:95:cb:17:19:35:76:01:4d:f2:
25:47:cc:b6:59:2a:a6:f7:c2:bb:f4:90:be:71:61:ff:aa:06:
4f:d5:9d:25:7a:66:ac:57:a0:5a:25:c2:68:4a:b7:fb:69:90:
f7:50:1a:e3:73:be:ac:3b:0c:8c:42:33:ed:49:d2:b2:2d:e8:
93:a2:9f:61:6e:6c:68:78:15:d5:73:75:e6:94:6f:09:47:ec:
85:e0:b7:f8:c7:25:75:65:79:85:40:9f:b8:59:33:25:da:33:
ac:6a:a5:82:e1:58:3d:53:91:e1:0d:f9:27:cf:0c:0f:34:fd:
4b:e4:15:b7:3a:99:80:b2:36:22:f4:42:ea:c6:80:40:68:df:
bf:ae:ad:8c:0f:5e:9c:87:c6:78:fe:4d:0f:43:99:43:d9:b9:
a8:8d:5b:ab:70:78:4e:eb:86:b0:8d:a9:26:3e:f7:de:db:a4:
32:5b:1c:75:6f:f7:56:87:e6:53:27:c0:88:05:8c:2e:59:97:
f1:c4:89:5e:de:93:68:cf:33:fd:78:6c:e8:19:b4:23:40:b1:
c9:23:75:d8:ba:da:22:12:09:32:0d:20:ac:33:f0:3d:42:a7:
7d:2f:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:57:10 2025 by rpki-client