This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa File: d3f2f053-4b54-3958-a759-499713d84940.roa (raw, json) Hash identifier: 43uoeZ0nm7DymbeqUNxnN0GkPCWO0rxXe07OyVMR2HY= Subject key identifier: 90:34:BB:13:25:8E:2A:69:CE:C4:12:70:90:FC:6A:C2:52:2E:19:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF03658533E767B013080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 396593 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f0:36:58:53:3e:76:7b:01:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=accbff8a-72cb-4ba9-a1da-f5af4ea48320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:00:af:1b:4e:03:e5:66:e8:ee:a6:c4:a2: 99:dc:a6:69:1e:7c:55:dc:b9:d2:93:b4:b3:03:27: 74:91:8a:02:df:59:ad:c2:89:16:fa:03:c8:6f:e2: c3:67:a0:b8:37:18:24:04:60:bc:83:03:b9:29:af: 3a:60:fe:0c:94:de:d7:09:a6:e7:ce:4f:1e:31:ab: 00:d0:af:f9:c1:85:ab:8e:19:cc:ba:85:9b:13:36: 6a:af:dd:ff:cd:8b:34:48:42:8c:0e:e9:41:74:25: 78:2c:9d:72:47:7a:76:84:16:2c:82:dd:ae:a8:b8: a4:28:db:f3:f9:f3:35:fe:20:f7:e6:41:38:8e:c2: 92:af:35:fb:1e:92:3e:dd:60:b5:4b:da:57:56:4c: 94:91:39:18:7f:d8:85:f3:a0:aa:88:ed:09:80:d9: d7:d1:d1:05:39:e8:1f:48:4c:4f:85:6b:f8:d8:66: 69:a1:fc:d2:fb:3c:7d:91:dd:4a:35:c8:96:10:29: a0:71:db:fb:d4:5e:08:bf:6d:0b:0b:3b:6f:0a:2f: 92:92:89:52:d9:60:a2:6d:3c:76:63:ca:2d:8e:df: 14:9a:55:fa:23:2b:7e:6b:86:b6:64:c3:af:80:f6: 55:2b:a3:2a:43:89:60:01:0d:39:e5:52:eb:e9:c5: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:BB:13:25:8E:2A:69:CE:C4:12:70:90:FC:6A:C2:52:2E:19:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c5:3b:39:c4:49:d8:1a:a8:90:47:0b:cf:37:fa:3c:ec:7c: 05:11:fc:de:8a:ae:8f:b7:ad:af:29:6d:37:b3:6c:a9:ae:47: 96:0f:75:83:67:3d:ce:ce:aa:11:11:da:a5:fc:30:a2:bc:6e: 56:b1:da:40:19:01:18:6a:37:f2:37:e9:b1:2e:97:96:43:4a: f7:9f:f6:3b:15:08:b4:c5:24:54:de:e3:2e:88:1b:81:d7:d0: 39:7e:30:51:53:2a:e9:67:30:89:a6:28:a5:c4:26:4a:0d:9f: f4:0c:45:e1:3c:5b:3e:20:34:d6:42:0b:a3:1a:67:49:6a:7a: 06:6f:17:18:0e:b7:c6:d5:6f:43:f4:ad:b2:fa:43:5f:75:14: be:f9:62:2a:42:41:e3:95:0f:97:fc:8b:2b:7e:ba:a3:91:1e: 18:f1:5b:fb:64:2a:cf:c0:b9:f0:6a:6b:2e:6c:d1:a6:71:5e: 27:6f:2f:a7:55:9d:67:44:fb:fd:93:bc:59:23:74:fb:aa:5a: 17:3d:a7:f1:51:f3:84:b1:25:9e:62:c2:3b:04:95:20:ed:6a: 79:e3:29:37:53:84:81:46:45:a9:e6:9b:02:56:52:d9:8e:98: 05:df:f1:fe:14:81:4b:4f:fc:88:ac:cc:45:8b:e1:ea:b5:54: d5:9b:38:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/A2WFM+dnsBMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YWNjYmZmOGEtNzJjYi00YmE5LWExZGEtZjVhZjRlYTQ4MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuoArxtOA+Vm6O6mxKKZ3KZpHnxV3LnSk7Sz Ayd0kYoC31mtwokW+gPIb+LDZ6C4NxgkBGC8gwO5Ka86YP4MlN7XCabnzk8eMasA 0K/5wYWrjhnMuoWbEzZqr93/zYs0SEKMDulBdCV4LJ1yR3p2hBYsgt2uqLikKNvz +fM1/iD35kE4jsKSrzX7HpI+3WC1S9pXVkyUkTkYf9iF86CqiO0JgNnX0dEFOegf SExPhWv42GZpofzS+zx9kd1KNciWECmgcdv71F4Iv20LCztvCi+SkolS2WCibTx2 Y8otjt8UmlX6Iyt+a4a2ZMOvgPZVK6MqQ4lgAQ055VLr6cXI0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJA0uxMljippzsQScJD8asJSLhlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNmMmYwNTMtNGI1NC0z OTU4LWE3NTktNDk5NzEzZDg0OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbFOznESdgaqJBHC883+jzsfAUR/N6Kro+3ra8pbTezbKmuR5YP dYNnPc7OqhER2qX8MKK8blax2kAZARhqN/I36bEul5ZDSvef9jsVCLTFJFTe4y6I G4HX0Dl+MFFTKulnMImmKKXEJkoNn/QMReE8Wz4gNNZCC6MaZ0lqegZvFxgOt8bV b0P0rbL6Q191FL75YipCQeOVD5f8iyt+uqORHhjxW/tkKs/AufBqay5s0aZxXidv L6dVnWdE+/2TvFkjdPuqWhc9p/FR84SxJZ5iwjsElSDtannjKTdThIFGRanmmwJW UtmOmAXf8f4UgUtP/IiszEWL4eq1VNWbOCQ= -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:28 2025 by rpki-client