This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32742d1c-d86c-352d-b67c-947c1189f1e7.roa File: 32742d1c-d86c-352d-b67c-947c1189f1e7.roa (raw, json) Hash identifier: lRC1Q92nfFMmIorJUwmvwOlZ/ZS6m+kA9AWN2AGxhHo= Subject key identifier: 16:6D:A8:B9:0D:F0:EE:9E:23:B2:D4:0A:4F:B6:BA:1E:58:2F:8C:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF18C5D60EC8E34BB6E28 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32742d1c-d86c-352d-b67c-947c1189f1e7.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 396826 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f1:8c:5d:60:ec:8e:34:bb:6e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=e4600f7f-816c-47c1-b551-6be03a3ae1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:2a:34:eb:54:25:25:88:59:e9:91:86:40: 9c:30:8f:9d:71:3e:fc:5b:b0:63:60:7b:03:80:70: 9c:7a:66:de:35:2e:f5:a0:5e:47:ab:bd:f1:65:c8: ac:13:19:34:77:4d:67:89:7f:2b:04:a7:5c:3b:73: 52:c9:27:de:27:9d:6c:cb:2c:ac:08:b2:e2:49:ee: 37:8c:9e:58:83:b5:be:de:32:4a:2a:71:5e:ab:8f: d6:bc:e4:56:66:42:22:c6:d4:09:89:77:1f:ae:82: cc:fa:b3:ad:5a:2f:7a:b6:90:e1:d8:0c:8d:dd:ca: fc:0b:c5:40:70:e6:f5:26:d1:23:cc:1a:1d:77:04: 05:f8:3a:0e:ad:a2:4d:3c:75:61:90:f0:26:8d:af: f5:c9:bb:b5:e4:71:da:32:11:97:1d:dc:bd:3d:5e: e0:a5:15:57:ad:fe:14:38:50:06:9a:84:79:89:8c: e1:d6:11:2d:9b:12:90:c2:d7:7e:bf:10:c5:df:f2: df:f5:07:bf:73:37:9e:65:11:90:b9:be:c5:51:85: 54:17:c0:14:2f:61:47:ba:3f:04:06:e6:43:d9:8c: d7:83:10:3c:97:86:b8:1a:7d:d8:ec:b5:7d:0d:b1: 54:18:81:ca:7d:5d:b6:c5:87:11:66:7f:43:7b:1d: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:A8:B9:0D:F0:EE:9E:23:B2:D4:0A:4F:B6:BA:1E:58:2F:8C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32742d1c-d86c-352d-b67c-947c1189f1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a4:52:6f:10:32:9a:ab:63:a4:4a:26:5f:86:ff:22:45:13: 43:fd:ce:b3:33:53:cf:23:23:c3:d2:5d:b9:c3:da:83:1f:e3: 1e:17:23:3f:8f:bf:c4:9c:42:21:92:b9:37:50:2e:89:d8:df: 33:e9:94:87:1f:fa:f9:cc:42:9f:3e:6d:01:e6:d9:56:7b:e8: 23:c1:ee:f0:c3:cc:05:ba:96:f8:fb:8f:aa:04:55:9d:2c:07: 25:09:09:02:5b:6b:56:43:4c:a1:6e:84:d2:2b:1b:2b:b7:f1: 99:eb:23:f1:08:73:b9:7c:73:1e:1c:69:c9:41:aa:d5:5f:2e: c8:79:95:5f:21:9e:dc:b5:04:ef:f9:2d:89:78:77:3c:57:96: 50:96:88:3b:ca:12:cc:a3:28:7a:56:07:3a:00:c5:8e:76:60: bb:f5:bb:6b:1d:1d:02:e9:d8:52:68:d0:0a:46:fa:d5:bb:a7: aa:0e:08:fc:f8:ce:9d:f4:ac:4c:59:fd:db:06:df:0d:ea:e8: 7e:fa:15:eb:0d:47:57:7e:bb:70:22:f5:4f:03:24:01:ba:b0: 10:9b:b8:b4:60:76:7f:58:2e:74:2a:75:1b:c6:c6:3c:5e:53: eb:9e:2a:03:0d:81:0e:b7:d8:24:5c:d8:33:5a:d1:b1:37:6a: 3e:60:b2:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/GMXWDsjjS7bigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZTQ2MDBmN2YtODE2Yy00N2MxLWI1NTEtNmJlMDNhM2FlMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5YqNOtUJSWIWemRhkCcMI+dcT78W7BjYHsD gHCcembeNS71oF5Hq73xZcisExk0d01niX8rBKdcO3NSySfeJ51syyysCLLiSe43 jJ5Yg7W+3jJKKnFeq4/WvORWZkIixtQJiXcfroLM+rOtWi96tpDh2AyN3cr8C8VA cOb1JtEjzBoddwQF+DoOraJNPHVhkPAmja/1ybu15HHaMhGXHdy9PV7gpRVXrf4U OFAGmoR5iYzh1hEtmxKQwtd+vxDF3/Lf9Qe/czeeZRGQub7FUYVUF8AUL2FHuj8E BuZD2YzXgxA8l4a4Gn3Y7LV9DbFUGIHKfV22xYcRZn9Dex1ouQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZtqLkN8O6eI7LUCk+2uh5YL4wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI3NDJkMWMtZDg2Yy0z NTJkLWI2N2MtOTQ3YzExODlmMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI6kUm8QMpqrY6RKJl+G/yJFE0P9zrMzU88jI8PSXbnD2oMf4x4X Iz+Pv8ScQiGSuTdQLonY3zPplIcf+vnMQp8+bQHm2VZ76CPB7vDDzAW6lvj7j6oE VZ0sByUJCQJba1ZDTKFuhNIrGyu38ZnrI/EIc7l8cx4caclBqtVfLsh5lV8hnty1 BO/5LYl4dzxXllCWiDvKEsyjKHpWBzoAxY52YLv1u2sdHQLp2FJo0ApG+tW7p6oO CPz4zp30rExZ/dsG3w3q6H76FesNR1d+u3Ai9U8DJAG6sBCbuLRgdn9YLnQqdRvG xjxeU+ueKgMNgQ632CRc2DNa0bE3aj5gsrM= -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:55 2025 by rpki-client