This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa File: 3042086e-a87d-399b-9e30-fb80daa4afd6.roa (raw, json) Hash identifier: WlMN36ZMOx7e1KxGTDvrz3dFkdDRwrDO38LK3xpbang= Subject key identifier: 41:61:0A:82:33:64:4B:C9:F9:7F:EA:6F:18:B3:74:93:C8:51:9E:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BB9E1A5BB397E5667E5740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 20172 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:9e:1a:5b:b3:97:e5:66:7e:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=0687d779-fd4a-4041-a359-b54dd83a75a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:09:de:6b:39:77:90:10:57:72:1a:69:23: 39:6a:aa:50:9e:04:d6:8f:bd:05:a3:5e:96:1a:43: b3:d8:89:7e:5f:c4:c9:68:21:fe:13:10:95:f4:06: a6:3a:db:a9:62:8d:83:bd:00:63:6e:7d:b1:19:31: 8a:43:33:d1:ab:1a:d5:ba:17:15:44:95:db:29:25: 5f:5f:3e:ba:d0:28:21:81:4c:7e:26:2b:a6:e5:4d: 80:bf:3c:fa:9f:84:05:0c:a2:2e:25:6a:f9:b6:bb: a0:4c:25:ca:99:a5:de:63:f6:94:7d:da:4f:f3:ff: 04:0c:f0:d9:82:d3:af:c9:91:52:76:01:99:e6:f9: ff:a5:be:18:3f:d2:e7:a7:33:38:8b:ac:05:72:69: 1d:d7:84:65:2e:95:71:04:ea:8c:f7:95:43:b4:ff: 77:e1:75:54:af:d3:95:10:1c:c0:35:b8:af:ab:a1: 42:03:82:ea:d1:d5:83:95:3f:cc:7e:d2:2a:1e:08: 6c:19:23:b6:f2:49:84:1d:73:28:de:5f:c0:43:9c: 5f:95:9f:de:57:11:67:09:bb:bf:ea:ba:81:3f:54: ea:1d:29:84:40:a9:00:aa:47:24:7c:e1:0e:43:d7: b7:69:76:08:62:46:64:bb:13:1b:1e:06:47:5d:bd: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:0A:82:33:64:4B:C9:F9:7F:EA:6F:18:B3:74:93:C8:51:9E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:eb:fc:47:ad:5b:08:4b:30:d3:bf:c5:d3:71:98:ef:b5:30: a8:98:f4:5a:ef:1e:27:98:01:ab:98:d8:72:57:d2:90:a2:7e: 5c:96:42:3a:eb:a6:55:7e:2c:57:2a:8a:8c:00:21:08:82:a2: 90:21:e4:a8:c8:97:84:73:5e:b0:00:7f:02:02:fb:54:c5:80: e5:32:11:eb:d7:26:5c:4c:0a:1d:1b:71:ed:da:10:7d:c9:bd: dd:34:97:5c:8d:e8:f5:81:c1:7d:ae:ae:ad:6d:53:3f:47:3c: 9e:ef:61:96:68:40:f8:ae:fb:50:5e:8e:4f:06:71:ab:a4:d2: 78:d6:d1:7a:46:d8:9c:b7:04:0c:72:ec:16:b9:2d:ed:e7:66: 7d:42:a9:7b:c9:78:22:6f:3b:01:28:d1:93:3a:a1:b7:ff:f6: e4:99:40:4b:6d:5a:57:77:14:ef:4b:39:36:db:7c:c3:f5:1f: 6c:f4:11:b2:90:13:1e:3b:cc:d7:88:57:b5:f9:31:29:9c:d9: 58:38:99:ca:4f:f6:99:3a:77:e9:10:83:0d:fa:01:70:f1:c0: 81:dc:dd:77:76:07:36:2b:d8:c7:72:af:65:f1:9b:35:b2:30: 03:86:4c:e6:c4:9b:fd:75:87:42:f7:c5:27:43:f9:5d:2b:c4: 3d:12:3d:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu54aW7OX5WZ+V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk MDY4N2Q3NzktZmQ0YS00MDQxLWEzNTktYjU0ZGQ4M2E3NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRYJ3ms5d5AQV3IaaSM5aqpQngTWj70Fo16W GkOz2Il+X8TJaCH+ExCV9AamOtupYo2DvQBjbn2xGTGKQzPRqxrVuhcVRJXbKSVf Xz660CghgUx+Jium5U2Avzz6n4QFDKIuJWr5trugTCXKmaXeY/aUfdpP8/8EDPDZ gtOvyZFSdgGZ5vn/pb4YP9LnpzM4i6wFcmkd14RlLpVxBOqM95VDtP934XVUr9OV EBzANbivq6FCA4Lq0dWDlT/MftIqHghsGSO28kmEHXMo3l/AQ5xflZ/eVxFnCbu/ 6rqBP1TqHSmEQKkAqkckfOEOQ9e3aXYIYkZkuxMbHgZHXb2OmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFhCoIzZEvJ+X/qbxizdJPIUZ6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0MjA4NmUtYTg3ZC0z OTliLTllMzAtZmI4MGRhYTRhZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPr/EetWwhLMNO/xdNxmO+1MKiY9FrvHieYAauY2HJX0pCiflyW QjrrplV+LFcqiowAIQiCopAh5KjIl4RzXrAAfwIC+1TFgOUyEevXJlxMCh0bce3a EH3Jvd00l1yN6PWBwX2urq1tUz9HPJ7vYZZoQPiu+1Bejk8Gcauk0njW0XpG2Jy3 BAxy7Ba5Le3nZn1CqXvJeCJvOwEo0ZM6obf/9uSZQEttWld3FO9LOTbbfMP1H2z0 EbKQEx47zNeIV7X5MSmc2Vg4mcpP9pk6d+kQgw36AXDxwIHc3Xd2BzYr2Mdyr2Xx mzWyMAOGTObEm/11h0L3xSdD+V0rxD0SPbM= -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:14 2025 by rpki-client