This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa File: bd31894b-808a-354e-8124-627c7862dd63.roa (raw, json) Hash identifier: mC7EO7XoIrrH09+8Dj7Ypy07oj0Ap7nkCAX4nG7eDSg= Subject key identifier: 90:76:2F:B5:F8:73:A4:3D:37:C4:06:26:18:02:68:EC:2A:17:61:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF284225765DA88EE2C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 397202 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f2:84:22:57:65:da:88:ee:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=6f84fdee-eb1c-4582-99d5-18e1429d75e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:d7:45:f3:2e:e7:dd:d8:f5:b0:1a:f7:eb: ad:ed:79:05:a6:fb:a8:44:fa:bb:7f:a2:c0:95:80: 46:67:68:b9:c7:2d:70:c3:1b:78:21:cf:96:95:d2: 69:e6:e2:54:92:79:7e:e5:9a:f9:8f:d1:ca:2c:4f: bb:62:e2:ce:1e:07:bc:d4:77:b2:d9:58:9d:2c:fe: 70:33:f9:50:3a:a9:39:ad:01:41:62:8e:92:85:b5: 2e:6f:8b:3f:7a:c7:fa:90:d0:b8:ee:56:03:f5:b2: 89:c5:db:f0:ee:e9:e5:bd:6e:f0:c9:77:e3:c9:87: 03:44:aa:16:43:06:df:1a:b7:4e:91:02:63:1f:42: 42:00:06:0f:16:44:cf:85:38:dd:81:14:fe:15:b2: e4:7f:a7:b0:6b:7b:7a:1b:f1:1b:3c:6f:a8:02:81: e4:58:38:be:49:56:72:00:2e:e9:3b:08:17:2c:40: b2:09:50:72:60:66:88:18:e2:d9:79:b8:29:6f:81: 83:44:be:b3:ff:cb:d6:9d:a7:59:fd:e7:c3:76:f3: 51:d7:86:25:81:d3:16:f6:46:3b:de:35:c6:81:d2: d1:3e:1f:0d:33:a3:d0:6e:6f:fb:91:80:8e:9b:6a: a0:01:2c:79:19:0a:de:fc:74:c4:9d:59:93:07:8e: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:76:2F:B5:F8:73:A4:3D:37:C4:06:26:18:02:68:EC:2A:17:61:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:6b:4f:07:51:96:7c:74:5a:06:b1:39:07:77:37:9c:ae: 3a:ae:aa:0d:9f:9c:75:c0:01:ab:a6:bb:87:64:de:7d:1d:a6: 85:11:d5:db:44:da:e6:7c:a2:33:0a:97:84:02:f3:db:48:b9: cd:f7:ef:49:64:d1:16:45:38:d2:ad:a6:54:3c:1b:ab:ea:24: 1b:75:17:87:b1:7a:06:05:c3:a3:ab:78:b5:c6:36:e7:b6:9d: 7c:6b:ba:9f:1f:5d:62:1f:d8:8c:8c:2b:05:75:b0:d1:c2:65: 6e:18:39:5a:6b:c7:70:54:59:08:f9:88:36:0f:38:07:49:9c: a9:4e:34:65:7f:66:a7:7f:d5:9f:71:09:89:be:08:2c:57:87: b5:5c:89:60:b0:07:ab:55:d1:ca:bb:ec:97:d4:f2:41:5d:4a: 21:1e:b6:a0:b1:88:30:a8:2a:e2:09:ef:e4:17:e2:e2:e7:be: 05:7f:8b:2f:a5:10:a6:85:9c:4d:ec:b8:f6:2e:39:6d:eb:f2: 05:0d:06:0c:9a:11:ff:e7:6e:04:7d:65:f6:9e:0b:ff:84:f3: fa:a8:3b:e4:0c:bb:01:ca:bf:00:24:8b:a7:e7:2c:6b:51:3c: 47:9b:25:3c:c7:eb:ea:01:63:6f:e4:de:f1:84:51:c5:e3:c0: 58:e1:71:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/KEIldl2ojuLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NmY4NGZkZWUtZWIxYy00NTgyLTk5ZDUtMThlMTQyOWQ3NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JrXRfMu593Y9bAa9+ut7XkFpvuoRPq7f6LA lYBGZ2i5xy1wwxt4Ic+WldJp5uJUknl+5Zr5j9HKLE+7YuLOHge81Hey2VidLP5w M/lQOqk5rQFBYo6ShbUub4s/esf6kNC47lYD9bKJxdvw7unlvW7wyXfjyYcDRKoW QwbfGrdOkQJjH0JCAAYPFkTPhTjdgRT+FbLkf6ewa3t6G/EbPG+oAoHkWDi+SVZy AC7pOwgXLECyCVByYGaIGOLZebgpb4GDRL6z/8vWnadZ/efDdvNR14YlgdMW9kY7 3jXGgdLRPh8NM6PQbm/7kYCOm2qgASx5GQre/HTEnVmTB44E4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJB2L7X4c6Q9N8QGJhgCaOwqF2H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQzMTg5NGItODA4YS0z NTRlLTgxMjQtNjI3Yzc4NjJkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFE0a08HUZZ8dFoGsTkHdzecrjquqg2fnHXAAaumu4dk3n0dpoUR 1dtE2uZ8ojMKl4QC89tIuc3370lk0RZFONKtplQ8G6vqJBt1F4exegYFw6OreLXG Nue2nXxrup8fXWIf2IyMKwV1sNHCZW4YOVprx3BUWQj5iDYPOAdJnKlONGV/Zqd/ 1Z9xCYm+CCxXh7VciWCwB6tV0cq77JfU8kFdSiEetqCxiDCoKuIJ7+QX4uLnvgV/ iy+lEKaFnE3suPYuOW3r8gUNBgyaEf/nbgR9ZfaeC/+E8/qoO+QMuwHKvwAki6fn LGtRPEebJTzH6+oBY2/k3vGEUcXjwFjhcXE= -----END CERTIFICATE-----Generated at Sun Dec 14 11:51:55 2025 by rpki-client