This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa File: 34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa (raw, json) Hash identifier: lPu8ARgP83F5AoeCjgtyVBEdZUC4RXVRhB96oY+wXRQ= Subject key identifier: DA:F8:E0:CF:19:49:76:DA:83:C0:46:B9:8E:CE:36:35:BA:EF:F2:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF129360F95267AE7C900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 27544 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f1:29:36:0f:95:26:7a:e7:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=fb553235-7bdb-45a8-b8fb-e1372412d497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:e6:b3:78:d0:2d:e9:d0:5a:ac:a6:ef:69: 0e:7d:db:60:f1:14:1e:51:70:fc:0b:35:b7:2f:8a: c1:23:39:b3:1b:3b:bf:0d:ed:01:0c:fd:f3:06:36: 2b:99:8f:fd:03:d4:ad:12:96:f5:79:9f:73:83:83: f5:bf:f5:00:ae:7d:02:88:56:ac:ca:fa:55:4e:d5: 44:1e:d6:b8:a8:e1:fd:72:e8:e4:8b:14:98:0a:0c: 02:61:a9:c6:d4:f0:28:18:a9:f7:9b:da:19:86:3c: 73:04:34:15:2d:7e:d5:44:cc:5f:05:31:c0:41:44: 46:b0:e6:3d:52:6f:b7:12:1b:71:0e:78:d3:59:92: ff:a7:2c:4d:65:b5:54:97:d5:e0:32:41:5a:76:54: bb:f4:6f:18:fe:4d:9b:e2:f1:f9:0d:fa:38:54:28: b2:0f:2f:db:93:37:cc:25:10:d1:b8:ec:b3:68:86: fb:4e:a1:96:57:77:55:c0:1f:dc:47:14:65:4e:7b: d0:d3:55:d7:6b:04:0e:d1:fb:79:7c:38:a2:47:b6: e1:77:ad:a8:eb:d0:e9:21:40:18:35:7b:0c:b2:46: 8a:d3:96:cf:16:ed:55:74:7e:0f:82:f0:f1:b5:8e: bd:40:89:1a:02:fc:f7:5c:11:85:74:e8:75:3f:08: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:E0:CF:19:49:76:DA:83:C0:46:B9:8E:CE:36:35:BA:EF:F2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3c:d6:f4:c9:7f:f4:c8:36:f9:5e:01:65:af:4d:fe:a7:4a: e0:e1:86:2e:55:90:be:05:3e:27:50:12:72:f7:a8:53:b7:21: 29:1c:7c:93:8a:ec:95:5c:0a:de:91:34:70:31:b9:57:10:66: de:ab:ba:2e:61:bc:be:61:a5:64:d4:56:d9:7b:53:58:1d:b3: a1:56:3b:ff:8c:f0:d7:48:d0:df:27:5b:80:c3:58:ba:86:b4: 29:56:64:40:1d:9a:01:57:e3:d1:bb:c7:74:4d:27:a9:1d:cc: 77:43:3d:c5:f6:38:06:01:9f:5b:57:e7:b1:f6:75:e5:89:10: 59:2e:a5:93:e4:d5:8e:bf:63:16:30:20:f1:8d:4a:d2:c7:1e: 8f:19:73:b6:a2:72:51:fa:66:f8:5d:82:e7:c8:b1:73:bc:ca: 0b:a1:7d:13:4d:08:45:35:12:9b:e7:8a:8c:37:f1:83:61:82: eb:26:16:a9:c0:0f:73:42:fc:4c:da:19:7c:9f:9a:67:e3:fe: da:d5:37:ab:66:e5:5f:01:14:dd:6c:b6:0c:03:71:dd:b8:98: b2:15:1b:ba:12:91:91:0a:b9:d0:92:5f:3c:3f:fe:3e:35:5f: 1a:af:5e:35:50:a7:08:30:c3:46:0b:f9:69:e0:d2:96:af:a3: 9a:0e:5e:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/EpNg+VJnrnyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZmI1NTMyMzUtN2JkYi00NWE4LWI4ZmItZTEzNzI0MTJkNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Tms3jQLenQWqym72kOfdtg8RQeUXD8CzW3 L4rBIzmzGzu/De0BDP3zBjYrmY/9A9StEpb1eZ9zg4P1v/UArn0CiFasyvpVTtVE Hta4qOH9cujkixSYCgwCYanG1PAoGKn3m9oZhjxzBDQVLX7VRMxfBTHAQURGsOY9 Um+3EhtxDnjTWZL/pyxNZbVUl9XgMkFadlS79G8Y/k2b4vH5Dfo4VCiyDy/bkzfM JRDRuOyzaIb7TqGWV3dVwB/cRxRlTnvQ01XXawQO0ft5fDiiR7bhd62o69DpIUAY NXsMskaK05bPFu1VdH4PgvDxtY69QIkaAvz3XBGFdOh1Pwg/0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNr44M8ZSXbag8BGuY7ONjW67/J9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzRmMWYxYWMtNjBjMi0z ZWM5LTkzN2ItYTQ4MGRhZjM1OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGM81vTJf/TINvleAWWvTf6nSuDhhi5VkL4FPidQEnL3qFO3ISkc fJOK7JVcCt6RNHAxuVcQZt6rui5hvL5hpWTUVtl7U1gds6FWO/+M8NdI0N8nW4DD WLqGtClWZEAdmgFX49G7x3RNJ6kdzHdDPcX2OAYBn1tX57H2deWJEFkupZPk1Y6/ YxYwIPGNStLHHo8Zc7aiclH6ZvhdgufIsXO8yguhfRNNCEU1Epvniow38YNhgusm FqnAD3NC/EzaGXyfmmfj/trVN6tm5V8BFN1stgwDcd24mLIVG7oSkZEKudCSXzw/ /j41XxqvXjVQpwgww0YL+Wng0pavo5oOXpE= -----END CERTIFICATE-----Generated at Sun Dec 14 11:47:08 2025 by rpki-client