This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa File: 32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa (raw, json) Hash identifier: hxTACoxHJSP1R5eYczg9ihXqcrLIx2UA5vzKPkRWp70= Subject key identifier: D7:0F:58:25:C8:2A:99:E9:16:5C:7D:05:DD:00:56:B9:C3:67:91:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BB9E604D82D065A8BD1B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 396617 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:9e:60:4d:82:d0:65:a8:bd:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=efdb4805-9151-48d3-9f14-da852213b191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:c1:f9:f5:27:8a:16:14:c4:7c:ae:3e:4c: 1a:b5:86:85:fa:f8:b4:c6:ec:62:6f:b4:c7:21:45: 4c:5e:2d:ce:d1:79:9a:8f:f4:93:23:85:57:d2:b1: 1f:e9:d5:da:ef:97:67:45:2c:1c:70:a6:82:07:e0: 1f:39:54:6f:17:3b:5b:f7:1d:0e:2f:cb:f6:9c:7b: 80:a7:e1:a0:7d:7c:da:25:87:1c:56:6a:80:dc:92: 38:65:77:08:38:93:5b:24:a5:0e:2a:b8:d5:b9:42: 10:2f:9a:a1:2c:9d:53:8c:01:b3:a1:cd:d5:a4:5e: f0:15:6c:96:12:cc:47:e3:59:7b:ed:6a:d9:4f:0d: 33:6e:cd:cf:ec:11:66:36:f1:62:e9:30:a9:8e:12: ad:9c:24:8c:e4:e6:fc:48:f6:09:aa:30:49:0c:89: 74:92:1a:73:fa:ce:dc:ac:cf:58:86:d5:2d:a7:5e: 7d:28:86:9f:c9:8b:6c:bd:72:5b:b7:af:7f:01:1f: 7c:da:a1:e8:b1:eb:ca:82:df:26:2a:01:74:e7:23: cc:61:6f:97:85:64:fe:84:dc:ea:93:1d:5c:d2:85: c6:3b:3d:be:de:70:a8:ce:74:34:2d:14:67:fe:6c: 0e:98:af:6c:3c:5f:dc:da:75:b4:c1:2e:80:e6:f9: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:58:25:C8:2A:99:E9:16:5C:7D:05:DD:00:56:B9:C3:67:91:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:92:a6:a6:7f:87:3f:af:7e:3a:87:0a:3a:22:d6:68:24:a7: 88:52:92:df:41:5c:ae:4d:63:23:3b:85:40:ba:62:b5:ca:6c: 5b:f4:14:d5:88:15:75:51:c0:4d:a3:c8:a3:d2:66:71:ec:62: 92:3d:9f:e2:c1:ae:c4:6a:9e:af:a5:e3:2e:df:d3:b3:df:18: e1:81:0f:c6:c6:40:0a:24:74:8a:4a:f7:3d:be:4a:0c:e5:dc: 8c:fd:5a:cd:22:1b:a5:00:18:72:77:57:12:3f:07:2b:e2:b1: 0f:5d:e4:1e:22:73:fe:2e:f4:7d:d0:e7:c1:b6:19:80:2b:28: d5:36:c3:2e:6e:bf:59:ac:78:8f:fa:d6:c1:25:48:77:31:15: 18:0a:a0:d9:90:6b:72:ba:66:cf:6c:8a:98:a1:7c:b1:b5:e3: 7c:e4:b8:54:db:73:3d:1f:9a:6f:90:a1:58:a7:a9:d9:22:ab: 97:cb:70:90:91:07:e5:3d:40:59:1f:b4:71:8a:2e:75:b2:21: f7:ab:b5:c7:fb:af:78:4d:fa:1e:4d:04:10:99:db:29:e9:86: c8:26:81:8b:e1:d2:00:cd:82:11:2c:5e:97:f1:a5:4a:13:68: ef:bc:a6:77:15:55:33:1d:f2:59:8a:b0:e4:dd:d4:60:00:47: aa:b0:ed:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu55gTYLQZai9GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZWZkYjQ4MDUtOTE1MS00OGQzLTlmMTQtZGE4NTIyMTNiMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v3B+fUnihYUxHyuPkwatYaF+vi0xuxib7TH IUVMXi3O0Xmaj/STI4VX0rEf6dXa75dnRSwccKaCB+AfOVRvFztb9x0OL8v2nHuA p+GgfXzaJYccVmqA3JI4ZXcIOJNbJKUOKrjVuUIQL5qhLJ1TjAGzoc3VpF7wFWyW EsxH41l77WrZTw0zbs3P7BFmNvFi6TCpjhKtnCSM5Ob8SPYJqjBJDIl0khpz+s7c rM9YhtUtp159KIafyYtsvXJbt69/AR982qHosevKgt8mKgF05yPMYW+XhWT+hNzq kx1c0oXGOz2+3nCoznQ0LRRn/mwOmK9sPF/c2nW0wS6A5vk5NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNcPWCXIKpnpFlx9Bd0AVrnDZ5FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJkMWFlMzktMmFlZS0z Y2NlLThiZjMtZTFlYTQ1YTlmNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABySpqZ/hz+vfjqHCjoi1mgkp4hSkt9BXK5NYyM7hUC6YrXKbFv0 FNWIFXVRwE2jyKPSZnHsYpI9n+LBrsRqnq+l4y7f07PfGOGBD8bGQAokdIpK9z2+ Sgzl3Iz9Ws0iG6UAGHJ3VxI/ByvisQ9d5B4ic/4u9H3Q58G2GYArKNU2wy5uv1ms eI/61sElSHcxFRgKoNmQa3K6Zs9sipihfLG143zkuFTbcz0fmm+QoVinqdkiq5fL cJCRB+U9QFkftHGKLnWyIfertcf7r3hN+h5NBBCZ2ynphsgmgYvh0gDNghEsXpfx pUoTaO+8pncVVTMd8lmKsOTd1GAAR6qw7Xk= -----END CERTIFICATE-----Generated at Sun Dec 14 11:48:33 2025 by rpki-client