This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa File: a7eea992-e3da-31ef-98f7-dafc57d26c93.roa (raw, json) Hash identifier: /fKAL6tlG5htdFA3qpdumcVjYkBqS1ihDtmmiJ8+O4s= Subject key identifier: 31:02:11:21:5D:07:8E:AD:7F:65:70:63:CC:2C:38:B9:24:78:37:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CAF2DB447AE42033A66880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396571 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:f2:db:44:7a:e4:20:33:a6:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=e97072bb-6c49-4331-81f4-fc3439fcad80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:30:48:f5:6b:3a:50:6f:ef:ef:75:5b:ea: 10:e6:11:28:e1:78:4f:24:17:9f:46:b4:d6:97:7c: d3:27:13:59:13:09:17:68:25:58:c4:0f:ea:72:3e: c4:97:df:1d:86:0b:5e:b5:67:1b:0f:b5:3c:44:81: 46:6f:9f:83:9a:bf:ef:d3:a0:d9:1a:f8:ba:4e:f3: 67:0a:c8:55:36:cf:c5:73:98:f6:fe:33:01:59:c8: 92:31:4e:f5:c9:12:e5:3a:ef:75:27:eb:03:73:ee: 29:1c:fa:cd:b8:47:f9:ba:97:32:73:10:ea:73:ba: b5:53:17:62:6b:e3:e4:80:9b:3e:54:8c:30:1f:d1: a2:31:35:f6:27:d5:ab:d1:f7:fb:a3:3a:bf:70:cd: bc:96:9b:1a:ae:2d:81:74:16:59:4f:6c:3d:db:7c: c9:b5:4d:95:cc:37:73:bc:f0:93:39:53:42:54:99: 93:90:f0:a3:76:99:a7:bf:8a:66:49:5b:45:ac:fb: 40:ba:db:ef:ad:36:29:af:55:db:88:71:91:d8:e1: 9f:6b:55:47:b0:ad:45:a3:2d:2b:c6:5c:65:e9:82: 8c:63:99:bd:e7:3e:a6:fa:84:1b:42:be:67:26:36: 68:64:8b:ec:00:51:d4:56:d1:ba:88:b5:37:5c:02: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:11:21:5D:07:8E:AD:7F:65:70:63:CC:2C:38:B9:24:78:37:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c6:a6:5d:af:00:b1:fe:39:b3:91:08:37:5d:a7:43:84:80: 2f:15:c2:65:eb:00:5d:e7:0f:ed:d6:21:a9:34:7b:49:3d:5a: bc:c8:71:be:58:b3:eb:47:38:45:df:8e:7e:46:86:5e:41:e5: 9f:69:ec:f6:0e:c3:46:2b:b7:c6:1b:f9:25:20:0d:12:77:86: 25:6c:06:2c:fe:1d:c2:12:20:78:75:d8:6f:fa:23:45:e9:9f: 83:a7:84:e8:4f:f5:b1:9c:d5:cd:58:f9:e4:9f:bb:27:07:21: 00:3b:67:1e:cb:a8:d6:7c:a7:e6:ed:b3:7e:d4:7b:94:46:ec: 0c:c0:a3:bf:12:e2:ae:19:b2:1d:c3:79:b1:bf:80:55:24:9a: f2:44:67:e4:33:8c:b8:b0:06:4f:6a:91:9d:b1:31:b7:3b:40: 96:a2:12:b1:bb:2c:4a:26:69:a2:8c:2b:79:15:70:28:00:f7: 8d:76:12:93:18:2d:60:c1:dc:6e:a1:5c:68:4f:b2:62:c0:d1: 1c:05:8c:8a:2c:f7:40:46:68:22:2f:76:90:c2:7f:51:3b:dc: 83:a1:14:49:13:60:51:f2:9e:56:22:45:0b:71:99:17:7e:c0: bb:16:f2:03:c0:d7:e6:4d:c9:01:37:0a:6d:41:af:e3:82:1d: 9f:b7:a4:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyvLbRHrkIDOmaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTk3MDcyYmItNmM0OS00MzMxLTgxZjQtZmMzNDM5ZmNhZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGgwSPVrOlBv7+91W+oQ5hEo4XhPJBefRrTW l3zTJxNZEwkXaCVYxA/qcj7El98dhgtetWcbD7U8RIFGb5+Dmr/v06DZGvi6TvNn CshVNs/Fc5j2/jMBWciSMU71yRLlOu91J+sDc+4pHPrNuEf5upcycxDqc7q1Uxdi a+PkgJs+VIwwH9GiMTX2J9Wr0ff7ozq/cM28lpsari2BdBZZT2w923zJtU2VzDdz vPCTOVNCVJmTkPCjdpmnv4pmSVtFrPtAutvvrTYpr1XbiHGR2OGfa1VHsK1Foy0r xlxl6YKMY5m95z6m+oQbQr5nJjZoZIvsAFHUVtG6iLU3XAJrGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDECESFdB46tf2VwY8wsOLkkeDexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlZWE5OTItZTNkYS0z MWVmLTk4ZjctZGFmYzU3ZDI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjGpl2vALH+ObORCDddp0OEgC8VwmXrAF3nD+3WIak0e0k9WrzI cb5Ys+tHOEXfjn5Ghl5B5Z9p7PYOw0Yrt8Yb+SUgDRJ3hiVsBiz+HcISIHh12G/6 I0Xpn4OnhOhP9bGc1c1Y+eSfuycHIQA7Zx7LqNZ8p+bts37Ue5RG7AzAo78S4q4Z sh3DebG/gFUkmvJEZ+QzjLiwBk9qkZ2xMbc7QJaiErG7LEomaaKMK3kVcCgA9412 EpMYLWDB3G6hXGhPsmLA0RwFjIos90BGaCIvdpDCf1E73IOhFEkTYFHynlYiRQtx mRd+wLsW8gPA1+ZNyQE3Cm1Br+OCHZ+3pAQ= -----END CERTIFICATE-----Generated at Sun Dec 14 11:47:03 2025 by rpki-client