This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa File: bf7da230-50ad-3769-8c60-561c844420a1.roa (raw, json) Hash identifier: xST25WnTNCZYuCVTFMcSzj88kLrLpN/O2CoKzw4qgDM= Subject key identifier: 14:74:EB:33:E2:98:5F:A0:10:47:4D:C4:93:AB:4A:72:F3:FE:0E:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CB121E483430E6368738E3E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 396591 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:e4:83:43:0e:63:68:73:8e:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=425c3dd0-b114-4f8a-8b03-d819b0d21d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:1d:88:35:37:4f:65:91:51:04:6c:80:87: 56:5c:f0:61:68:48:5a:fe:c6:00:a1:36:90:7e:f0: fa:bd:19:72:6b:a5:77:c6:b8:73:38:f3:31:39:2f: 52:39:b5:82:5e:5a:9f:d2:43:2a:b7:29:fa:7e:bc: ff:b0:96:3a:6e:ea:b9:53:bc:0a:12:44:12:0d:6c: 3a:6b:06:71:b3:e8:f3:39:47:89:1c:02:c8:a4:c8: f9:93:f1:bf:35:fd:19:dc:3b:70:43:d1:9b:85:9c: c9:e7:55:3c:13:12:70:06:21:6b:41:df:56:26:1a: 9e:58:7e:98:69:2d:7c:58:71:6a:21:e6:56:78:2c: c3:59:f4:7c:d3:75:f9:df:87:61:80:14:b1:c1:cb: d6:8d:ef:fe:b1:81:a9:ed:0a:20:b4:17:8b:60:ef: 92:eb:25:21:49:ba:b3:0c:d7:54:a3:ec:70:27:35: 56:86:25:c2:f8:6d:14:8c:a4:14:50:30:b4:c5:39: 33:fa:12:46:aa:d3:92:38:bf:ce:0d:62:c0:db:10: b1:93:21:e3:27:6d:2c:37:70:2a:c1:9c:12:26:e1: b2:be:a4:f9:2c:57:36:41:2c:3e:00:d5:6e:bf:8a: 19:98:34:2b:28:04:3a:88:4b:ec:a0:4e:34:79:2d: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:74:EB:33:E2:98:5F:A0:10:47:4D:C4:93:AB:4A:72:F3:FE:0E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:91:c4:38:06:f4:cc:b9:7c:1e:4c:1f:30:4a:a1:e5:71:c5: 70:62:f9:50:77:84:8c:7b:c7:b1:05:23:6e:cf:4b:3f:2f:d1: b9:af:89:0c:34:64:b0:00:cf:d2:ac:d4:89:97:57:64:19:e6: 95:72:cb:3b:df:cb:f5:26:86:90:c3:65:cc:4e:c1:be:8f:03: 27:e5:87:de:2c:64:89:4b:d5:e9:43:78:f5:27:f8:bc:2a:fd: 99:dc:6f:61:88:6d:54:ae:97:d3:88:a5:64:4e:41:0a:23:6b: 72:c2:ef:5b:46:bf:b6:32:75:7c:cf:a0:7c:89:b3:2c:63:d1: 9b:f8:c4:c6:f9:f8:cd:61:6e:93:98:29:bc:83:cd:b3:68:c7: e4:b4:2b:69:98:49:50:8c:2c:53:38:b8:c0:33:7d:fe:5a:84: a5:52:f0:f1:e9:f4:ef:56:80:49:42:e4:6c:94:c4:8e:c6:cb: 8a:37:a3:d2:10:75:e4:7a:6a:2c:8d:a4:c4:44:9a:b2:52:8f: a9:93:0f:2d:4c:86:f9:48:d3:3e:d6:10:d9:ba:66:09:1d:d9: 69:5f:0f:5b:1d:b8:75:6c:bc:8a:28:ed:2b:99:0f:d8:45:de: 4a:b7:14:bb:96:44:b6:be:8e:f9:22:89:c5:e6:89:1b:23:ed: fd:87:a8:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIeSDQw5jaHOOPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDI1YzNkZDAtYjExNC00ZjhhLThiMDMtZDgxOWIwZDIxZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGgdiDU3T2WRUQRsgIdWXPBhaEha/sYAoTaQ fvD6vRlya6V3xrhzOPMxOS9SObWCXlqf0kMqtyn6frz/sJY6buq5U7wKEkQSDWw6 awZxs+jzOUeJHALIpMj5k/G/Nf0Z3DtwQ9GbhZzJ51U8ExJwBiFrQd9WJhqeWH6Y aS18WHFqIeZWeCzDWfR803X534dhgBSxwcvWje/+sYGp7QogtBeLYO+S6yUhSbqz DNdUo+xwJzVWhiXC+G0UjKQUUDC0xTkz+hJGqtOSOL/ODWLA2xCxkyHjJ20sN3Aq wZwSJuGyvqT5LFc2QSw+ANVuv4oZmDQrKAQ6iEvsoE40eS1FZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBR06zPimF+gEEdNxJOrSnLz/g4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY3ZGEyMzAtNTBhZC0z NzY5LThjNjAtNTYxYzg0NDQyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImRxDgG9My5fB5MHzBKoeVxxXBi+VB3hIx7x7EFI27PSz8v0bmv iQw0ZLAAz9Ks1ImXV2QZ5pVyyzvfy/UmhpDDZcxOwb6PAyflh94sZIlL1elDePUn +Lwq/Zncb2GIbVSul9OIpWROQQoja3LC71tGv7YydXzPoHyJsyxj0Zv4xMb5+M1h bpOYKbyDzbNox+S0K2mYSVCMLFM4uMAzff5ahKVS8PHp9O9WgElC5GyUxI7Gy4o3 o9IQdeR6aiyNpMREmrJSj6mTDy1MhvlI0z7WENm6Zgkd2WlfD1sduHVsvIoo7SuZ D9hF3kq3FLuWRLa+jvkiicXmiRsj7f2HqNQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:03 2026 by rpki-client