This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa File: 8b33777f-7214-304c-bfa7-6094a66eb134.roa (raw, json) Hash identifier: ytjks12QSktzzv3DobBihDcsvyxanOWE/w5Ssj8eM5g= Subject key identifier: 81:C7:A2:31:B3:C0:B7:12:2C:C0:FD:77:F0:72:7F:B1:E4:82:C7:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF252CB94FCE4BE6EAEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 397195 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f2:52:cb:94:fc:e4:be:6e:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=a1e5ac0d-0b58-48d8-8382-73f4177402a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:40:61:ba:f5:21:b8:18:86:c7:56:ab:c3: 60:74:46:c1:a1:2c:80:3a:6f:a5:ca:f0:bf:ce:2a: cc:fd:0b:67:27:dd:b3:e6:b3:fe:c0:8a:6f:72:d6: 9b:69:e9:d2:aa:97:f6:60:d7:75:5b:20:2a:22:cb: 8f:69:30:a9:c9:af:d9:50:83:c6:5b:35:27:65:86: 02:16:8d:54:04:ab:13:16:fc:11:53:82:12:19:ec: 6e:11:8a:23:b0:1e:01:3a:eb:22:8f:d6:2b:37:15: 0a:03:01:f4:52:a5:05:6e:ba:67:1b:0f:14:5f:ee: e6:d3:ee:e1:20:85:d5:36:c8:2b:b6:26:22:c9:17: ae:6d:b0:03:c8:21:a4:06:41:f4:39:2c:89:77:aa: e0:2c:a4:1a:04:f2:28:6b:18:47:ee:64:ca:b0:69: e7:0a:43:d2:5d:a9:dc:6f:2d:5a:e6:52:ff:e4:c9: a6:00:a2:bb:1b:83:42:6e:27:32:e0:b4:9a:e4:a8: d3:3a:e4:97:a2:45:9e:59:5f:c0:48:7f:77:75:4e: cf:b7:b2:86:a4:cf:fa:72:e9:06:19:0b:21:a6:b8: 64:21:9e:36:64:00:06:70:07:e6:1c:b5:fd:a8:0b: 6e:ec:2e:c1:75:00:43:6a:78:a8:ba:28:94:19:e5: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C7:A2:31:B3:C0:B7:12:2C:C0:FD:77:F0:72:7F:B1:E4:82:C7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:21:eb:ae:9d:88:3b:10:93:1b:b1:50:33:21:23:db:8f:45: 5c:e8:27:25:27:74:6a:4a:a9:69:4b:30:db:24:ca:8f:4f:b6: e6:41:f6:73:2f:57:d3:3e:73:a4:e4:cb:5c:2e:4b:bb:59:ae: 1b:67:df:a8:79:b5:8a:50:23:80:43:6b:7f:c7:c4:ee:37:2c: 97:45:05:57:35:86:f1:88:08:59:09:cc:b0:80:46:ed:35:98: fb:c7:fa:20:b2:79:12:32:71:df:ec:34:6f:c3:f2:c5:c1:06: 6d:b0:eb:bb:01:a5:93:ba:86:e4:80:11:c0:f5:59:d8:15:c4: 05:d0:12:b6:18:ae:32:77:cc:dd:02:41:1b:a8:24:0a:c4:9a: aa:0b:4e:36:8b:96:6f:42:92:ea:57:6e:d0:7a:70:c0:64:f1: 93:b7:b3:00:a8:8e:25:05:58:61:0f:d0:9b:ae:00:6a:c3:6a: 83:25:fd:2c:38:78:38:69:5f:3b:92:33:60:d5:96:f7:59:e4: 11:bf:9a:9c:08:79:64:a8:e0:73:bf:37:11:c8:33:59:f2:ca: 93:e1:01:95:32:38:99:2f:6d:33:81:cc:ea:4f:31:8d:0d:ce: 7d:9d:e8:c8:90:42:7e:98:25:05:b4:5f:6d:96:a5:51:13:c8: 37:56:f0:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/JSy5T85L5ursAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YTFlNWFjMGQtMGI1OC00OGQ4LTgzODItNzNmNDE3NzQwMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqFAYbr1IbgYhsdWq8NgdEbBoSyAOm+lyvC/ zirM/QtnJ92z5rP+wIpvctabaenSqpf2YNd1WyAqIsuPaTCpya/ZUIPGWzUnZYYC Fo1UBKsTFvwRU4ISGexuEYojsB4BOusij9YrNxUKAwH0UqUFbrpnGw8UX+7m0+7h IIXVNsgrtiYiyReubbADyCGkBkH0OSyJd6rgLKQaBPIoaxhH7mTKsGnnCkPSXanc by1a5lL/5MmmAKK7G4NCbicy4LSa5KjTOuSXokWeWV/ASH93dU7Pt7KGpM/6cukG GQshprhkIZ42ZAAGcAfmHLX9qAtu7C7BdQBDaniouiiUGeUGRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIHHojGzwLcSLMD9d/Byf7HkgsfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIzMzc3N2YtNzIxNC0z MDRjLWJmYTctNjA5NGE2NmViMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIh666diDsQkxuxUDMhI9uPRVzoJyUndGpKqWlLMNskyo9PtuZB 9nMvV9M+c6Tky1wuS7tZrhtn36h5tYpQI4BDa3/HxO43LJdFBVc1hvGICFkJzLCA Ru01mPvH+iCyeRIycd/sNG/D8sXBBm2w67sBpZO6huSAEcD1WdgVxAXQErYYrjJ3 zN0CQRuoJArEmqoLTjaLlm9CkupXbtB6cMBk8ZO3swCojiUFWGEP0JuuAGrDaoMl /Sw4eDhpXzuSM2DVlvdZ5BG/mpwIeWSo4HO/NxHIM1nyypPhAZUyOJkvbTOBzOpP MY0Nzn2d6MiQQn6YJQW0X22WpVETyDdW8BM= -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:18 2025 by rpki-client