This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afbaae-d8a9-3cfe-90e3-8994654e4ddd.roa File: 58afbaae-d8a9-3cfe-90e3-8994654e4ddd.roa (raw, json) Hash identifier: cQDiaTFEJ+xgSQC2PR87W2yTq05WHMPcpnq0paDgDrw= Subject key identifier: 45:55:07:9E:4B:E4:36:CF:AC:45:A9:BE:E9:C7:8A:DD:D2:6A:0E:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630E1D16933FF01DCA2D180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afbaae-d8a9-3cfe-90e3-8994654e4ddd.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 32651 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e1:d1:69:33:ff:01:dc:a2:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=1c1de28d-a2f2-4500-8eef-63627c06e3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:c3:af:ee:7f:8c:40:7f:54:09:47:21:29: 4d:97:9f:a7:cd:ac:ba:1e:0b:48:63:00:d7:69:e9: 1b:ca:c0:91:8a:ce:4a:56:1c:ed:01:40:c0:1c:13: e0:53:70:68:fb:96:15:7a:8f:0d:d4:60:7a:2a:6c: d6:e2:e5:37:ce:52:61:b1:4e:bc:14:37:43:b6:2f: 6d:13:7f:4f:62:b2:56:74:9c:33:2e:df:0f:ea:7e: 4f:49:00:7b:12:1d:89:88:2e:47:69:10:fd:a6:6b: af:0f:82:86:31:a3:18:30:d6:0a:b7:f6:a8:72:0a: 22:37:1c:5d:3a:08:ee:55:c7:ef:27:b5:e3:82:db: 0f:6e:59:bf:ea:a8:3c:a6:99:f4:c4:5a:11:c9:74: 0b:a5:ee:d0:a0:e6:27:e8:f2:69:55:69:48:6e:e5: c7:29:fc:ec:39:85:f3:83:10:83:73:33:f8:01:65: 10:fb:4b:43:a5:09:07:5b:82:9b:27:cc:b3:d5:ef: 80:85:5c:9d:ca:c9:27:2b:6c:aa:34:0d:f0:24:1c: c9:1f:17:76:b6:65:29:ca:9d:b6:7a:4b:94:c3:3d: c9:fb:6e:96:3e:d4:ad:62:9b:dc:3a:bc:c6:08:dc: 3a:e3:de:ad:dd:5a:79:e2:0e:8e:2b:de:24:21:26: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:07:9E:4B:E4:36:CF:AC:45:A9:BE:E9:C7:8A:DD:D2:6A:0E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afbaae-d8a9-3cfe-90e3-8994654e4ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3a:a7:7d:8a:f0:07:11:76:f0:46:31:94:a5:13:e2:e0:94: 8b:7e:9b:98:74:d1:ed:01:8b:ab:f3:bd:67:7f:37:d9:fb:e5: 4c:08:51:dd:cf:f2:cd:7d:b9:32:53:38:22:1b:92:be:16:7e: 01:6b:e2:42:55:f5:48:5d:a3:ca:60:1b:f9:c5:b5:af:c4:1d: c2:b2:a9:09:fe:88:bf:79:27:5a:87:92:81:61:13:17:54:4c: cc:52:1f:5e:de:39:10:62:dc:d9:3c:c6:9a:7d:1f:c0:48:4a: 7e:3c:45:fc:99:94:96:b3:7a:c8:d8:3d:27:38:c6:4c:b9:98: f0:ef:ea:90:82:28:b0:c7:2a:fd:86:be:fc:40:dd:b3:80:2f: 0a:86:72:f3:7c:e2:ce:72:0a:f1:8b:21:dd:44:b5:b7:ea:02: 5e:c6:a2:5b:65:f4:a1:02:91:d8:07:fb:28:be:40:bb:16:ee: 2d:76:79:53:14:a7:56:0d:e1:e4:aa:4d:71:85:51:db:1f:0e: 21:a7:59:2a:f8:f4:0b:5c:06:0e:61:c2:8f:64:19:79:20:95: 85:63:73:21:64:88:2f:2e:e4:bf:0e:5c:20:a3:67:28:0b:af: 96:b5:b0:22:01:4f:95:5f:ed:4f:c0:99:9d:af:ae:85:56:50: a7:d2:17:e6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMOHRaTP/Adyi0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk MWMxZGUyOGQtYTJmMi00NTAwLThlZWYtNjM2MjdjMDZlM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbTDr+5/jEB/VAlHISlNl5+nzay6HgtIYwDX aekbysCRis5KVhztAUDAHBPgU3Bo+5YVeo8N1GB6KmzW4uU3zlJhsU68FDdDti9t E39PYrJWdJwzLt8P6n5PSQB7Eh2JiC5HaRD9pmuvD4KGMaMYMNYKt/aocgoiNxxd OgjuVcfvJ7XjgtsPblm/6qg8ppn0xFoRyXQLpe7QoOYn6PJpVWlIbuXHKfzsOYXz gxCDczP4AWUQ+0tDpQkHW4KbJ8yz1e+AhVydysknK2yqNA3wJBzJHxd2tmUpyp22 ekuUwz3J+26WPtStYpvcOrzGCNw6496t3Vp54g6OK94kISa9SQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEVVB55L5DbPrEWpvunHit3Sag5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThhZmJhYWUtZDhhOS0z Y2ZlLTkwZTMtODk5NDY1NGU0ZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQABOqd9ivAHEXbwRjGUpRPi4JSLfpuYdNHtAYur 871nfzfZ++VMCFHdz/LNfbkyUzgiG5K+Fn4Ba+JCVfVIXaPKYBv5xbWvxB3CsqkJ /oi/eSdah5KBYRMXVEzMUh9e3jkQYtzZPMaafR/ASEp+PEX8mZSWs3rI2D0nOMZM uZjw7+qQgiiwxyr9hr78QN2zgC8KhnLzfOLOcgrxiyHdRLW36gJexqJbZfShApHY B/sovkC7Fu4tdnlTFKdWDeHkqk1xhVHbHw4hp1kq+PQLXAYOYcKPZBl5IJWFY3Mh ZIgvLuS/Dlwgo2coC6+WtbAiAU+VX+1PwJmdr66FVlCn0hfm -----END CERTIFICATE-----Generated at Sun Dec 14 11:48:07 2025 by rpki-client