This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
File: db998f42-be27-3be8-b1f5-4704728e217c.roa (raw, json)
Hash identifier: X52EXOiv9tENyxL5RUWACt35ZUvqCcIPS2Q5iNL/i5s=
Subject key identifier: 1F:35:68:8C:08:0A:A3:AF:C2:50:2D:E1:61:30:49:77:64:47:F2:FA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C0C6B5C517130A0FBBEDAE410
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
Signing time: Tue 02 Dec 2025 02:00:30 +0000
ROA not before: Tue 02 Dec 2025 02:00:30 +0000
ROA not after: Mon 02 Mar 2026 02:00:30 +0000
asID: 27338
IP address blocks: 74.10.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0c:6b:5c:51:71:30:a0:fb:be:da:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:30 2025 GMT
Not After : Mar 2 02:00:30 2026 GMT
Subject: CN=7baa8485-9c4d-477e-9a20-cde787f4f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:f9:0d:b7:af:dc:31:ab:41:cb:57:52:be:
06:24:a4:c0:b2:94:a2:49:49:29:b0:8f:16:ac:f4:
81:9d:4b:3b:15:8e:c3:1d:47:94:6f:7f:1c:d6:9b:
e4:6c:e0:b5:20:0d:43:61:9b:af:27:cf:a6:ed:34:
16:2c:1d:de:aa:cf:fd:2b:9d:ab:94:0e:e5:46:31:
f8:cc:c4:7f:bf:9f:b6:40:f0:d2:13:fe:c3:82:c5:
47:82:9b:a9:8c:30:68:76:b6:98:9a:79:89:80:bf:
a0:fc:5c:8a:f0:b4:b9:a9:9e:8c:eb:29:8b:1f:e6:
d9:43:24:9b:1c:d8:80:39:1c:d6:89:12:65:28:3d:
64:3d:b0:30:20:8c:7f:e6:30:71:19:cd:eb:83:80:
56:3e:91:50:a9:79:38:b5:ea:09:cd:80:ab:23:90:
86:27:4f:f5:93:e2:4f:4b:6d:d6:9c:c1:39:fe:54:
9e:06:3a:b7:58:7d:82:b5:84:7a:0a:da:5b:5a:fc:
fd:71:48:49:fd:2f:46:a5:8b:58:ba:04:73:e7:1c:
96:38:57:99:8c:01:6a:61:72:cb:6c:d1:fa:c9:cc:
07:ad:91:f9:a0:34:7b:af:63:cf:45:80:ea:a4:f9:
3c:7e:26:4f:b1:23:3b:9d:6d:2f:df:8d:a8:b4:7a:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:68:8C:08:0A:A3:AF:C2:50:2D:E1:61:30:49:77:64:47:F2:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.10.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:87:b6:15:9a:83:ec:8a:61:14:09:93:fd:46:b7:52:e3:2d:
d3:08:1f:0f:62:6c:e5:e3:24:33:89:76:3d:b0:4f:fa:07:d1:
ac:e9:50:de:53:40:d9:36:78:32:b2:7c:15:23:7f:2d:ef:b7:
f5:f4:82:07:dc:61:17:22:d5:c6:31:8a:4c:9d:84:24:71:db:
51:86:be:ca:3b:2a:6c:0a:64:ee:2b:20:8e:ec:f0:ef:c7:41:
b4:7f:12:98:bd:91:3d:01:97:2f:b9:47:de:54:ed:6c:72:d7:
f1:53:4e:5b:4c:e4:22:3c:74:bc:a8:d2:9e:fd:0d:da:e0:67:
ce:be:58:f1:f1:b7:78:c1:27:b2:e2:3b:39:2a:d2:78:78:b7:
5f:f7:c6:82:c2:8f:4e:ca:07:bf:45:2c:39:ee:79:fd:86:4b:
73:91:af:48:67:8b:ae:75:4c:e9:99:cd:58:db:2a:b9:fe:7a:
a5:48:0c:58:38:d5:30:76:bb:17:af:62:6e:8f:dd:89:ac:4a:
28:47:e0:61:1f:14:c0:6b:e4:86:7b:a5:fc:26:1c:71:42:11:
36:96:ef:63:a1:05:98:31:93:0e:d8:88:a3:4c:34:70:1c:60:
ae:79:71:b3:07:f3:0f:83:cf:55:5b:7b:d6:bb:0d:14:c1:50:
8a:4b:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:00:57 2025 by rpki-client