This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd6ebd8a-d2dd-30ec-a952-199c3dceda0d.roa File: fd6ebd8a-d2dd-30ec-a952-199c3dceda0d.roa (raw, json) Hash identifier: BYXDVqzKv2wMEfNl6SkIJ/lFrDh9xwigRUtu4MTsMnk= Subject key identifier: 92:4B:FD:3D:B7:0B:84:78:00:C3:E6:12:13:49:68:A4:41:AD:49:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A41D96F6F27FD0CAA1E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd6ebd8a-d2dd-30ec-a952-199c3dceda0d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 206.245.168.0/21 maxlen: 21 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:d9:6f:6f:27:fd:0c:aa:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6d340b0a-f1d4-46ba-bd62-98de48e3ca90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:de:26:fd:fa:f0:b2:89:3c:fc:95:b9:11: 43:44:39:b6:6c:54:af:4c:d8:42:27:6e:eb:01:ad: c4:b4:12:0f:32:83:a2:08:df:bc:db:39:eb:85:c6: 2a:95:98:44:97:6d:84:61:c7:19:60:42:e2:46:b2: 2b:5b:64:7b:b9:2f:9b:74:61:2f:6d:50:7c:6d:ee: 9b:30:18:28:52:6d:d9:12:9d:d9:c7:eb:0a:84:f8: 46:aa:21:4a:1f:25:7f:6a:c2:0c:0b:8a:b6:43:6f: 4d:c3:d9:4d:2a:08:c4:88:45:47:24:55:6e:c2:77: 39:28:0b:0b:b2:9c:7f:91:cf:36:de:d3:c4:b8:b8: 1c:82:01:83:d0:3d:90:b0:06:28:ba:30:f2:a5:73: 02:cf:5a:de:d2:6a:d4:60:c5:9a:d7:74:bb:f9:05: 16:ff:a5:8b:b9:71:e4:4f:5e:72:6e:d3:5d:01:06: 53:f7:62:9d:3b:5a:c7:b9:0d:35:43:20:08:ec:b2: bc:c8:8a:e3:22:9a:ad:b3:33:ef:f0:c4:30:24:c8: 2a:a0:f3:e7:18:27:2d:64:53:04:f0:2d:36:a5:d2: 0e:46:4e:a2:99:83:23:37:fe:39:30:6b:2e:b8:e2: 26:11:01:a2:f8:4f:23:5a:f8:dc:20:37:eb:fd:02: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:FD:3D:B7:0B:84:78:00:C3:E6:12:13:49:68:A4:41:AD:49:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd6ebd8a-d2dd-30ec-a952-199c3dceda0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.245.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f5:16:1d:32:34:26:ef:af:8c:4f:20:42:4a:b3:db:fe:dd: e0:04:99:b3:af:9e:80:44:c6:8f:fc:c5:16:a4:0d:d1:ce:e8: 8b:9f:29:34:2e:82:7a:81:c5:23:ee:a2:a4:83:56:ea:b1:35: 43:63:cc:68:e8:cc:c3:05:97:bd:e3:7d:e5:fd:11:ed:70:7b: 99:e8:a8:d7:10:21:b4:af:d8:36:0a:f9:bf:71:3f:d3:fb:d4: 64:71:10:ae:ad:63:21:88:33:c4:b0:af:ac:90:ab:85:f5:1a: 43:b9:59:e1:55:be:71:e6:ee:9d:be:82:03:37:78:8e:3e:cd: b7:91:09:10:6a:f9:dd:19:ae:dc:87:c5:94:a6:68:0d:35:c2: 82:7f:52:29:d9:44:0f:a6:69:09:c1:66:f1:a9:16:a5:bc:9d: e8:f0:9b:3e:7a:4b:c2:3a:0f:b0:e3:fa:e6:9f:98:a3:ab:14: 27:61:19:a3:c5:27:0c:6d:01:34:d4:97:6c:b2:75:a4:33:c7: d0:04:6c:c2:1f:38:d5:71:99:22:ba:73:0e:46:3f:98:e9:70: 78:7e:70:ba:06:3c:81:57:06:02:3e:2e:47:2f:95:c5:fd:0f: d2:3e:b8:54:a9:67:5f:c9:9d:8b:c5:a3:11:a5:2b:4f:b6:53: ee:02:32:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkHZb28n/QyqHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmQzNDBiMGEtZjFkNC00NmJhLWJkNjItOThkZTQ4ZTNjYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3/eJv368LKJPPyVuRFDRDm2bFSvTNhCJ27r Aa3EtBIPMoOiCN+82znrhcYqlZhEl22EYccZYELiRrIrW2R7uS+bdGEvbVB8be6b MBgoUm3ZEp3Zx+sKhPhGqiFKHyV/asIMC4q2Q29Nw9lNKgjEiEVHJFVuwnc5KAsL spx/kc823tPEuLgcggGD0D2QsAYoujDypXMCz1re0mrUYMWa13S7+QUW/6WLuXHk T15ybtNdAQZT92KdO1rHuQ01QyAI7LK8yIrjIpqtszPv8MQwJMgqoPPnGCctZFME 8C02pdIORk6imYMjN/45MGsuuOImEQGi+E8jWvjcIDfr/QJGnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJL/T23C4R4AMPmEhNJaKRBrUnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmQ2ZWJkOGEtZDJkZC0z MGVjLWE5NTItMTk5YzNkY2VkYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzvWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj1Fh0yNCbvr4xPIEJKs9v+3eAEmbOvnoBExo/8xRakDdHO6IufKTQu gnqBxSPuoqSDVuqxNUNjzGjozMMFl73jfeX9Ee1we5noqNcQIbSv2DYK+b9xP9P7 1GRxEK6tYyGIM8Swr6yQq4X1GkO5WeFVvnHm7p2+ggM3eI4+zbeRCRBq+d0ZrtyH xZSmaA01woJ/UinZRA+maQnBZvGpFqW8nejwmz56S8I6D7Dj+uafmKOrFCdhGaPF JwxtATTUl2yydaQzx9AEbMIfONVxmSK6cw5GP5jpcHh+cLoGPIFXBgI+LkcvlcX9 D9I+uFSpZ1/JnYvFoxGlK0+2U+4CMog= -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:01 2025 by rpki-client