This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa File: 3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa (raw, json) Hash identifier: 9ptG4xCJaX52cv2nfMAGRBAPlS4PMRrXvSmTYofn9JA= Subject key identifier: EB:55:89:9C:08:3F:C5:EE:4F:CA:3C:76:26:E5:A3:EE:8C:0E:98:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF0139AB0FACF6F0F6B4E Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 397198 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f0:13:9a:b0:fa:cf:6f:0f:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=d226d1b5-2199-4a6a-ba43-a497f447e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:da:f0:90:36:8a:3a:fd:04:7b:5c:d7:a6: 36:d3:ee:46:ff:6d:fa:e0:22:51:b8:99:da:b8:eb: 6f:92:52:75:dc:34:4c:59:e0:e9:31:0d:12:e9:b8: 05:93:63:3c:5b:d6:1e:50:35:2d:e9:7c:37:40:7a: 50:3c:91:f6:9c:c6:60:38:72:a5:3c:f5:1c:f2:d2: d4:5c:1d:e2:a3:db:11:34:e0:8e:a3:7b:83:c2:3d: de:4c:17:58:00:16:e0:bf:95:53:85:ab:5e:47:94: ac:f0:07:ba:cf:6a:ee:c0:19:43:39:41:47:cd:fb: 57:e5:76:be:ba:d6:e3:06:8a:1a:53:92:de:e5:a9: 0c:7b:c4:2a:7d:b7:28:00:14:5e:cc:d3:9e:ed:0c: 3c:eb:73:9e:8b:44:ad:36:99:24:4a:af:d0:6f:aa: f0:55:2d:a0:95:b7:f2:51:8c:fc:9a:f3:1c:2b:b7: ea:aa:43:c4:53:1c:64:ce:20:cc:11:5e:89:dd:3e: 70:85:79:27:29:ec:55:40:7b:96:d5:56:e5:2b:48: 3b:d1:55:ea:3e:91:40:4c:91:61:0b:06:09:d1:e6: d3:14:78:c1:c8:24:27:aa:33:bb:4e:6a:67:f5:74: 16:3f:1b:75:6e:2c:b4:c7:f4:23:4e:a7:32:37:b1: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:55:89:9C:08:3F:C5:EE:4F:CA:3C:76:26:E5:A3:EE:8C:0E:98:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:01:3b:ae:e8:bb:ab:bc:7d:8e:59:de:dc:bb:93:d3:04:93: 47:4e:59:0a:6f:8b:94:f7:99:38:cd:b5:cc:d9:71:9b:48:40: cc:eb:0d:b9:2b:cd:e9:e8:9a:f4:1d:e9:2f:ad:a4:58:75:b0: ba:e8:c8:18:9f:ef:b0:53:e8:0e:e8:19:80:52:b4:45:b7:cc: 3c:4d:de:66:1f:56:90:fe:c7:a6:91:fe:73:0a:0e:24:4b:ba: ba:15:41:c1:c6:4d:c2:e4:20:03:82:82:bd:74:ad:6b:a0:2e: c9:fa:3c:e4:16:81:34:c6:2b:bf:69:f7:cb:9e:61:7c:3b:dd: 05:45:30:df:0e:8d:53:40:fa:94:e1:ec:56:b9:e5:7d:1f:52: 93:25:90:3f:8f:8a:c1:2d:77:c5:65:bf:40:1d:1b:8e:ef:f2: 1d:32:61:12:7f:a1:28:11:a9:be:86:31:dc:a6:20:e5:75:43: 46:43:15:c2:cc:01:87:5c:99:56:5e:b3:dc:6e:81:de:29:10: 96:a5:de:3b:38:d2:68:52:e4:86:74:5b:73:f2:ee:9c:d0:b5: a9:d9:92:c7:ee:f9:2a:99:50:46:2f:9c:33:3a:db:ae:4f:f9: c6:d6:13:37:79:5b:cf:40:70:ee:70:49:44:67:6b:85:7f:bc: ca:49:1d:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/ATmrD6z28Pa04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZDIyNmQxYjUtMjE5OS00YTZhLWJhNDMtYTQ5N2Y0NDdlMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7a8JA2ijr9BHtc16Y20+5G/2364CJRuJna uOtvklJ13DRMWeDpMQ0S6bgFk2M8W9YeUDUt6Xw3QHpQPJH2nMZgOHKlPPUc8tLU XB3io9sRNOCOo3uDwj3eTBdYABbgv5VThateR5Ss8Ae6z2ruwBlDOUFHzftX5Xa+ utbjBooaU5Le5akMe8QqfbcoABRezNOe7Qw863Oei0StNpkkSq/Qb6rwVS2glbfy UYz8mvMcK7fqqkPEUxxkziDMEV6J3T5whXknKexVQHuW1VblK0g70VXqPpFATJFh CwYJ0ebTFHjByCQnqjO7Tmpn9XQWPxt1biy0x/QjTqcyN7F9pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOtViZwIP8XuT8o8diblo+6MDphfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U5ZmJhNGEtZWQwZS0z ZjZmLThlYTctMWQ0NDlhZGViMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoBO67ou6u8fY5Z3ty7k9MEk0dOWQpvi5T3mTjNtczZcZtIQMzr DbkrzenomvQd6S+tpFh1sLroyBif77BT6A7oGYBStEW3zDxN3mYfVpD+x6aR/nMK DiRLuroVQcHGTcLkIAOCgr10rWugLsn6POQWgTTGK79p98ueYXw73QVFMN8OjVNA +pTh7Fa55X0fUpMlkD+PisEtd8Vlv0AdG47v8h0yYRJ/oSgRqb6GMdymIOV1Q0ZD FcLMAYdcmVZes9xugd4pEJal3js40mhS5IZ0W3Py7pzQtanZksfu+SqZUEYvnDM6 265P+cbWEzd5W89AcO5wSURna4V/vMpJHeE= -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:03 2025 by rpki-client