This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa File: 91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa (raw, json) Hash identifier: bVHIaWGehc+whH/uNqK31Uu8+7AJxxwZHz60AWLpoPE= Subject key identifier: A5:AB:31:AB:2F:1F:21:F4:47:FD:30:DE:7E:78:85:86:2D:FF:49:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF1FCA0CD82AF02CFB780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 20362 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f1:fc:a0:cd:82:af:02:cf:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=ac0d5340-cf4f-4323-ba0f-678f123328e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:cb:47:a3:dd:87:c1:0e:35:8d:21:54:38: 33:6c:82:26:e6:89:78:c3:45:86:34:e8:38:6f:cb: 97:c1:4c:be:a8:a7:a2:f6:f1:a9:3d:0f:d1:6c:d4: 49:76:aa:0b:ee:80:8d:69:9b:a4:5a:ce:3f:ad:01: 7d:fb:5a:47:4e:ae:1b:e7:e7:70:61:8f:a4:3a:d5: 54:54:38:e4:b6:75:6a:50:df:18:c2:9a:d1:52:7a: 6a:fe:d6:f4:92:3a:e9:c4:9a:2f:81:b7:dc:cd:75: a2:e1:39:3d:23:32:83:a8:e2:9e:5c:0d:70:4f:99: e3:c7:ba:4d:dd:cb:c3:49:16:f8:fb:3f:04:dd:89: b6:79:d5:f1:52:47:e3:c6:d1:de:5c:2e:a9:d3:7a: b6:10:ba:f7:c5:1f:88:e3:2b:ff:9c:53:bb:e0:a4: a1:23:c3:b9:1d:9b:83:8c:86:dd:fe:79:3c:9c:07: d0:e3:a2:f2:62:9d:aa:cc:45:82:33:fe:9e:e5:e7: 1d:06:0b:6e:cd:6f:b7:4e:3d:d7:73:66:15:db:66: b2:c5:f1:92:30:ce:3a:f0:56:72:43:f0:2e:17:0f: 18:21:6c:2c:37:17:a4:00:a1:be:6f:f6:b5:6b:dc: 17:f0:85:53:16:bb:8b:8b:24:90:5b:e0:49:47:7e: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:31:AB:2F:1F:21:F4:47:FD:30:DE:7E:78:85:86:2D:FF:49:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b1:ad:28:ba:a6:f7:bd:c0:63:fd:5f:96:6c:ef:39:f7:bd: 7c:d1:5c:15:32:54:fc:ca:0f:bf:46:6a:29:e6:95:12:e6:d3: 20:f8:7e:26:bb:3c:45:2e:33:fe:f6:26:7d:e1:4a:64:3f:06: d9:22:7b:56:59:ad:38:20:99:ef:2b:8a:f2:46:29:79:6d:c1: b5:2a:71:44:0d:4c:76:18:be:15:0e:42:d1:0d:36:b7:f9:69: ad:38:0f:f8:e1:9d:2e:d4:aa:d7:c1:8e:ce:cf:31:66:85:7f: 06:c3:e5:06:c4:0d:87:ce:52:d2:69:ee:89:3d:b2:84:b5:ab: f1:6e:f9:0d:12:f4:6d:5c:83:98:00:27:c1:bf:0d:1c:7b:5d: 23:f9:10:5b:c6:11:06:cf:3d:c0:8e:39:d4:31:98:39:62:6e: 7b:08:5d:8d:7f:42:eb:9d:37:3d:9d:00:4d:f0:3e:1e:6f:5f: 9f:8a:b0:09:65:5a:90:32:e2:94:8d:e4:6f:d5:a8:89:d7:d3: be:0c:4c:7d:9f:e5:91:55:c5:54:9d:81:4f:72:c2:c4:fd:4e: a4:6d:01:ee:55:ed:0b:1c:19:83:59:b7:b2:01:e4:cb:c9:18: 65:ab:91:c4:78:c9:59:f3:b8:48:6a:da:ad:ba:30:ec:ee:95: 6b:d9:c0:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/H8oM2CrwLPt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YWMwZDUzNDAtY2Y0Zi00MzIzLWJhMGYtNjc4ZjEyMzMyOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnzLR6Pdh8EONY0hVDgzbIIm5ol4w0WGNOg4 b8uXwUy+qKei9vGpPQ/RbNRJdqoL7oCNaZukWs4/rQF9+1pHTq4b5+dwYY+kOtVU VDjktnVqUN8YwprRUnpq/tb0kjrpxJovgbfczXWi4Tk9IzKDqOKeXA1wT5njx7pN 3cvDSRb4+z8E3Ym2edXxUkfjxtHeXC6p03q2ELr3xR+I4yv/nFO74KShI8O5HZuD jIbd/nk8nAfQ46LyYp2qzEWCM/6e5ecdBgtuzW+3Tj3Xc2YV22ayxfGSMM468FZy Q/AuFw8YIWwsNxekAKG+b/a1a9wX8IVTFruLiySQW+BJR35TdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWrMasvHyH0R/0w3n54hYYt/0mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTFlNTNlNjctNDgxMi0z YTdkLTlmMWEtZjYzOGVkOWVkMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFexrSi6pve9wGP9X5Zs7zn3vXzRXBUyVPzKD79GainmlRLm0yD4 fia7PEUuM/72Jn3hSmQ/Btkie1ZZrTggme8rivJGKXltwbUqcUQNTHYYvhUOQtEN Nrf5aa04D/jhnS7UqtfBjs7PMWaFfwbD5QbEDYfOUtJp7ok9soS1q/Fu+Q0S9G1c g5gAJ8G/DRx7XSP5EFvGEQbPPcCOOdQxmDlibnsIXY1/QuudNz2dAE3wPh5vX5+K sAllWpAy4pSN5G/VqInX074MTH2f5ZFVxVSdgU9ywsT9TqRtAe5V7QscGYNZt7IB 5MvJGGWrkcR4yVnzuEhq2q26MOzulWvZwBc= -----END CERTIFICATE-----Generated at Sun Dec 14 13:32:52 2025 by rpki-client