This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa File: b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa (raw, json) Hash identifier: JrT9iBDXkTd98ilvJmpeEoMorBaXLVaWPBJvpASIKGo= Subject key identifier: 13:C8:7D:8F:FB:E4:FC:B3:66:8E:AB:A7:16:9A:64:D0:93:78:D4:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C12549C390D1DE4E2C800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396552 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:12:54:9c:39:0d:1d:e4:e2:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=95ac2530-170e-4ed1-b9ec-fd573b4c8017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:6d:cb:65:9b:ea:fd:96:f2:1f:de:01:c4: 0f:83:b0:00:9f:8f:8c:12:b3:ce:93:f8:57:ac:71: e0:85:7d:15:2c:1d:26:61:ad:7f:78:c2:46:a2:7a: 13:85:b8:77:fe:bd:99:5c:c6:03:ae:6a:53:80:fd: 7f:6c:be:d0:84:8e:72:7a:7a:2f:9c:65:c0:2b:74: b3:a0:64:01:0b:cd:0c:8d:23:1c:ae:37:a2:0d:ae: 70:54:75:c8:a7:8e:e3:f4:45:2a:1f:0b:ab:2f:e0: d8:bd:78:61:2d:b6:79:72:d6:b7:11:21:7c:6d:f2: f2:b8:11:04:ad:24:d0:27:7b:ac:25:45:93:c5:8b: 6b:8e:da:4b:a7:9d:0b:78:23:2e:d6:b1:85:87:c3: 8e:bc:f7:a7:15:d9:96:69:c0:2e:0f:c6:fb:80:7a: 5d:bc:0a:06:9a:3f:8b:27:c1:99:4e:7a:e5:ba:a8: e1:46:01:26:14:39:d9:79:46:ac:2d:a6:4f:06:ee: c9:43:5f:30:94:a2:a7:25:cc:90:90:f2:22:d0:e5: bc:e8:7e:45:92:f7:91:4c:3d:0d:08:b5:e3:34:54: 6c:7e:55:40:62:b9:a4:d2:28:ff:a5:ba:5e:ab:72: f2:66:74:04:de:26:4b:47:76:9e:e0:57:f1:2a:e8: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C8:7D:8F:FB:E4:FC:B3:66:8E:AB:A7:16:9A:64:D0:93:78:D4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:06:8a:2f:c0:b3:d2:b6:ae:1f:74:8a:a3:91:ef:62:ec:9e: 26:69:59:6e:cf:28:fe:e7:00:7a:a2:d3:f0:fc:a3:30:30:14: 34:c8:83:e0:31:88:92:4e:30:88:17:33:76:2f:5a:c4:80:4d: 75:4c:96:8d:5c:71:bc:a7:96:ba:63:94:3b:18:ca:95:db:6e: 40:b0:3d:6f:aa:4f:a3:f7:e6:88:2c:e8:8e:ed:5f:63:c5:13: db:21:7c:73:2a:84:b7:36:6a:a7:89:ee:fc:a2:48:12:bc:f1: 02:6b:6a:fc:a7:66:a6:fe:52:a5:4b:08:ba:39:8d:f5:30:f4: c2:4c:fd:28:be:bb:c9:31:84:45:72:85:d5:06:4d:25:5c:9a: a1:83:f7:e9:45:3d:75:25:70:18:e0:a6:ab:21:7a:2d:20:cf: 3f:b7:dd:7e:cb:3b:54:b9:8b:07:3a:df:c9:7b:53:5f:3d:50: 41:1e:e6:6e:87:e0:3f:cf:f8:c2:43:69:41:b8:cf:96:3e:ec: 5c:5c:90:70:cf:78:ad:eb:74:06:d8:ec:4a:6a:54:f3:ab:ef: 1b:8f:2d:ec:b4:87:67:49:29:e3:68:31:0d:83:33:cb:d3:24: 1d:b1:92:c4:a5:54:13:7b:dc:0e:85:ae:5b:46:0f:72:21:47: 80:72:a8:9d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBJUnDkNHeTiyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk OTVhYzI1MzAtMTcwZS00ZWQxLWI5ZWMtZmQ1NzNiNGM4MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZVty2Wb6v2W8h/eAcQPg7AAn4+MErPOk/hX rHHghX0VLB0mYa1/eMJGonoThbh3/r2ZXMYDrmpTgP1/bL7QhI5yenovnGXAK3Sz oGQBC80MjSMcrjeiDa5wVHXIp47j9EUqHwurL+DYvXhhLbZ5cta3ESF8bfLyuBEE rSTQJ3usJUWTxYtrjtpLp50LeCMu1rGFh8OOvPenFdmWacAuD8b7gHpdvAoGmj+L J8GZTnrluqjhRgEmFDnZeUasLaZPBu7JQ18wlKKnJcyQkPIi0OW86H5FkveRTD0N CLXjNFRsflVAYrmk0ij/pbpeq3LyZnQE3iZLR3ae4FfxKuheGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBPIfY/75PyzZo6rpxaaZNCTeNTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIwNTNiN2EtOGFkMC0z MGVjLThhOTMtNTEyYTljYjFkY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAcBoovwLPStq4fdIqjke9i7J4maVluzyj+5wB6 otPw/KMwMBQ0yIPgMYiSTjCIFzN2L1rEgE11TJaNXHG8p5a6Y5Q7GMqV225AsD1v qk+j9+aILOiO7V9jxRPbIXxzKoS3Nmqnie78okgSvPECa2r8p2am/lKlSwi6OY31 MPTCTP0ovrvJMYRFcoXVBk0lXJqhg/fpRT11JXAY4KarIXotIM8/t91+yztUuYsH Ot/Je1NfPVBBHuZuh+A/z/jCQ2lBuM+WPuxcXJBwz3it63QG2OxKalTzq+8bjy3s tIdnSSnjaDENgzPL0yQdsZLEpVQTe9wOha5bRg9yIUeAcqid -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:36 2026 by rpki-client