This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa File: c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa (raw, json) Hash identifier: 7N2JQanbgqTnwjzHkpSPsxs/qGWnfIBHVoqeaqeKz78= Subject key identifier: C9:95:2A:7E:49:AB:19:F4:FA:4E:95:F6:D2:F5:F4:FB:4B:27:10:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0B06376311C6F90771EAE710 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 151.213.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:37:63:11:c6:f9:07:71:ea:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=6c64bf3f-c47b-4895-bcf4-4c844413307c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:80:66:a0:d7:72:53:40:0e:39:5a:35:91: 61:e1:99:2d:ed:e9:f3:b8:f4:5b:a6:58:8d:53:f3: 7e:e9:7e:5f:62:c3:89:bd:23:74:c7:76:81:a5:42: 1a:1d:fd:68:ad:c2:bc:73:9f:f4:7d:b9:5b:af:ec: dc:57:18:b7:3d:a9:c3:a6:56:ac:cd:fb:55:7b:e7: d8:b9:a7:fd:95:73:1f:1e:9b:42:c3:e5:07:27:57: c4:7b:dd:8d:6a:84:73:18:3b:49:b3:39:33:2f:83: 90:19:ec:56:09:d7:37:65:3c:3c:c7:f3:47:6b:4d: cd:c8:ea:40:ca:e6:44:02:4f:29:48:56:46:4c:1a: 0a:17:af:d9:6e:3e:2a:0e:a9:17:e4:d2:cd:41:7d: 86:c4:35:78:04:1f:13:0b:3a:a8:6a:08:ab:99:b6: f8:8f:d5:4f:30:96:4a:df:96:82:65:55:b3:24:c9: 13:ed:c7:85:3b:47:95:3f:84:b4:de:c6:d6:a5:b2: 7c:bc:b7:75:bf:e6:a7:12:ae:f4:0c:65:b1:95:80: 7d:6d:4e:75:23:04:05:03:67:2c:e3:f7:e8:ed:50: f1:69:e0:4c:6e:f5:a6:f7:19:c8:5f:8b:c0:fd:8e: 26:b2:c2:09:4c:ac:5c:16:78:7b:5e:ed:bc:a2:59: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:2A:7E:49:AB:19:F4:FA:4E:95:F6:D2:F5:F4:FB:4B:27:10:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e0:a6:10:c7:b7:46:82:b4:11:de:dd:f4:ff:64:26:62:14: 70:3e:a6:5f:e5:fb:6f:67:e2:5e:e6:94:63:49:f0:45:a5:d7: 74:af:ce:2c:45:3c:aa:06:6d:80:74:57:c5:95:74:0d:b3:05: 6f:3e:6a:e3:49:f2:31:c6:f8:62:df:5f:ab:aa:78:b3:87:6f: 2d:7a:e7:fa:e4:df:e0:cd:dc:65:83:d0:af:a2:00:68:96:ea: 4b:98:b2:a0:af:a5:cc:6a:b2:34:e9:ea:e5:91:b5:f8:92:57: 19:c8:d1:a6:f6:f8:0d:ba:06:3e:64:7e:2a:b1:54:81:46:b0: ee:be:11:d4:0e:1a:47:22:fa:5b:fe:96:4d:43:4b:11:7b:01: 23:5c:37:ad:4e:bf:16:3c:91:7a:c5:2d:9b:d4:40:cd:24:45: c2:74:34:ae:7c:65:3c:fb:e1:09:8e:db:d1:5d:77:c0:c5:4b: ad:46:22:0e:cc:8e:03:02:00:43:ce:38:75:6b:21:8f:35:4d: 12:52:d7:5b:ee:50:96:3a:09:b8:3c:15:7d:0e:20:44:14:e6: db:e1:b2:6c:a7:bb:10:9e:a2:b9:6c:08:bf:5f:dd:87:46:f6: f5:8e:49:98:2b:1c:22:a4:91:e1:2f:c3:b8:50:3b:c5:85:d4: f6:4a:39:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjdjEcb5B3Hq5xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NmM2NGJmM2YtYzQ3Yi00ODk1LWJjZjQtNGM4NDQ0MTMzMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraqAZqDXclNADjlaNZFh4Zkt7enzuPRbpliN U/N+6X5fYsOJvSN0x3aBpUIaHf1orcK8c5/0fblbr+zcVxi3PanDplaszftVe+fY uaf9lXMfHptCw+UHJ1fEe92NaoRzGDtJszkzL4OQGexWCdc3ZTw8x/NHa03NyOpA yuZEAk8pSFZGTBoKF6/Zbj4qDqkX5NLNQX2GxDV4BB8TCzqoagirmbb4j9VPMJZK 35aCZVWzJMkT7ceFO0eVP4S03sbWpbJ8vLd1v+anEq70DGWxlYB9bU51IwQFA2cs 4/fo7VDxaeBMbvWm9xnIX4vA/Y4mssIJTKxcFnh7Xu28oll6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmVKn5Jqxn0+k6V9tL19PtLJxA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MDNlNGQtZjhhZi0z YzhmLTk1ODEtNDJkYTRlZjAwNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7gphDHt0aCtBHe3fT/ZCZiFHA+pl/l+29n4l7mlGNJ8EWl13SvzixF PKoGbYB0V8WVdA2zBW8+auNJ8jHG+GLfX6uqeLOHby165/rk3+DN3GWD0K+iAGiW 6kuYsqCvpcxqsjTp6uWRtfiSVxnI0ab2+A26Bj5kfiqxVIFGsO6+EdQOGkci+lv+ lk1DSxF7ASNcN61OvxY8kXrFLZvUQM0kRcJ0NK58ZTz74QmO29Fdd8DFS61GIg7M jgMCAEPOOHVrIY81TRJS11vuUJY6Cbg8FX0OIEQU5tvhsmynuxCeorlsCL9f3YdG 9vWOSZgrHCKkkeEvw7hQO8WF1PZKObg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:05 2025 by rpki-client