This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa File: 0697b4b5-f608-31ea-86a4-9f99a6da708b.roa (raw, json) Hash identifier: uq9sJGtWWFhau6McCG/LLniWlekRhbupWL6PbkB7F3o= Subject key identifier: B0:5E:B8:BE:E0:90:C0:3F:DF:70:F9:71:2D:9E:48:B6:08:89:C9:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBED7C17BA1DBC3CB621C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 397201 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:ed:7c:17:ba:1d:bc:3c:b6:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=8f90b1c3-d334-4c9d-8d0f-9c8bacf3d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:0d:5a:90:88:c2:d0:cf:cf:a0:67:56:20: 6e:97:30:ab:22:6c:a7:3a:37:00:a7:0a:cc:69:4b: d0:83:b6:f7:9e:b2:a9:d6:a4:db:96:f4:84:1d:78: 5a:cf:bb:6f:27:24:e2:e0:90:33:0b:e8:04:4f:de: d1:ff:95:b4:44:c0:a7:df:ca:c1:22:51:38:12:66: 90:c0:6c:b7:cc:1c:63:92:c9:d0:a2:83:86:85:f3: ff:3f:31:89:1f:9d:af:f1:3c:4a:6f:49:99:7a:19: 68:e0:b4:ec:fb:e7:e0:0f:3c:f7:12:30:81:5c:1a: 49:9b:35:aa:00:89:6f:e5:03:34:ea:53:eb:d9:1e: 91:34:9d:c3:00:bb:9a:68:d9:32:7d:d9:97:63:9a: 80:7f:9a:0d:e5:af:05:e6:b5:07:75:41:3d:6b:f7: 9f:4d:61:65:30:8e:65:5d:6c:50:6d:dd:03:dc:ac: ce:d6:ef:80:b4:c7:59:2f:b7:cc:c9:f9:f9:99:d3: a5:e9:a3:3c:6f:01:ef:73:71:1f:41:04:82:34:41: 41:c8:38:c2:07:b1:6b:dc:aa:3a:8e:af:51:d0:51: 83:67:cc:60:51:c2:42:70:20:d5:aa:ba:e9:16:c7: b1:79:19:d0:c2:a9:ed:01:6e:50:5f:f3:12:c8:6a: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5E:B8:BE:E0:90:C0:3F:DF:70:F9:71:2D:9E:48:B6:08:89:C9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:0c:f6:d7:74:3b:ba:8c:0d:63:a7:0a:55:e8:cf:5a:a3: fc:d0:b9:48:b9:28:22:c8:57:e4:18:fd:2f:ab:b6:2b:d2:2a: 11:8b:b3:74:39:29:fa:db:40:cd:c6:9e:29:90:c5:49:5d:a4: 28:e7:10:d2:d6:83:c5:99:7b:d0:86:65:6f:b5:94:3c:fa:af: c8:65:01:e5:cc:11:e8:75:e2:41:bd:72:fe:bf:e4:77:14:37: 73:7a:23:f1:22:3b:65:28:1f:b6:ca:68:33:fb:fc:e0:47:f7: 96:3f:dd:7b:bb:b1:99:d0:6f:fb:d6:5a:e6:47:2f:27:06:27: da:83:bd:39:ef:83:b7:c8:b4:54:6c:e6:35:8e:9b:a9:eb:e6: 57:bb:fd:9e:0b:d4:09:a3:f2:d8:33:73:72:b0:52:b6:c8:69: 51:25:d2:f5:cb:fe:97:ab:16:47:3a:4f:f0:9a:93:82:30:40: c1:27:b0:35:62:bc:2f:33:12:65:ee:1e:a1:e2:4c:e5:b0:87: 84:21:f0:92:fe:1e:11:bd:42:ba:38:90:d6:a0:a2:80:9a:ff: 8b:18:fe:3c:58:07:c8:be:a7:c4:cb:9b:91:9c:3c:03:30:d9: 74:c7:bd:08:3f:c4:c9:c4:01:ba:af:e1:c7:c2:9e:e0:17:a0: 0d:85:4e:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu+18F7odvDy2IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk OGY5MGIxYzMtZDMzNC00YzlkLThkMGYtOWM4YmFjZjNkMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHwNWpCIwtDPz6BnViBulzCrImynOjcApwrM aUvQg7b3nrKp1qTblvSEHXhaz7tvJyTi4JAzC+gET97R/5W0RMCn38rBIlE4EmaQ wGy3zBxjksnQooOGhfP/PzGJH52v8TxKb0mZehlo4LTs++fgDzz3EjCBXBpJmzWq AIlv5QM06lPr2R6RNJ3DALuaaNkyfdmXY5qAf5oN5a8F5rUHdUE9a/efTWFlMI5l XWxQbd0D3KzO1u+AtMdZL7fMyfn5mdOl6aM8bwHvc3EfQQSCNEFByDjCB7Fr3Ko6 jq9R0FGDZ8xgUcJCcCDVqrrpFsexeRnQwqntAW5QX/MSyGpl/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBeuL7gkMA/33D5cS2eSLYIicnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY5N2I0YjUtZjYwOC0z MWVhLTg2YTQtOWY5OWE2ZGE3MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGg6DPbXdDu6jA1jpwpV6M9ao/zQuUi5KCLIV+QY/S+rtivSKhGL s3Q5KfrbQM3GnimQxUldpCjnENLWg8WZe9CGZW+1lDz6r8hlAeXMEeh14kG9cv6/ 5HcUN3N6I/EiO2UoH7bKaDP7/OBH95Y/3Xu7sZnQb/vWWuZHLycGJ9qDvTnvg7fI tFRs5jWOm6nr5le7/Z4L1Amj8tgzc3KwUrbIaVEl0vXL/perFkc6T/Cak4IwQMEn sDVivC8zEmXuHqHiTOWwh4Qh8JL+HhG9Qro4kNagooCa/4sY/jxYB8i+p8TLm5Gc PAMw2XTHvQg/xMnEAbqv4cfCnuAXoA2FTk4= -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:10 2025 by rpki-client