This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa File: d868d400-3d3e-3000-b381-099279ca3a2b.roa (raw, json) Hash identifier: IT9dZTepzkP7Wel8ayhJb4S54y0YtjXzbWrwaNcjIys= Subject key identifier: 47:0F:95:6C:F2:1F:28:4D:91:72:84:A5:5D:A1:11:47:AA:72:99:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB1DAEB699967B1D690380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 397196 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:1d:ae:b6:99:96:7b:1d:69:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=76fde3ff-4ff5-43da-a749-3d45be317412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:8b:28:82:e0:22:4e:a2:ca:10:c2:ac:ce: 23:f6:19:9b:e6:eb:50:29:69:86:d1:bb:72:36:a2: 69:b0:13:f6:44:97:83:45:07:25:dd:4b:ce:8c:52: 49:70:9c:78:cc:84:aa:2f:59:1b:08:79:03:8b:56: 7f:0a:f8:27:56:f6:11:1a:8a:d2:b7:b8:a8:22:5b: 58:c5:a7:b2:a8:a6:74:ea:08:09:e1:14:7c:43:01: 77:01:51:77:c1:10:51:55:3f:a8:f4:74:42:a9:8d: 37:58:5d:2d:12:b9:fe:b4:bc:43:18:d0:b3:df:ad: 38:f4:6a:56:37:94:ea:67:d9:8b:cd:64:07:77:b0: d2:8c:4b:75:2f:9a:e8:81:62:d7:a1:b8:9a:e9:3b: d4:b0:5e:02:4c:55:ec:c6:6d:d1:a8:bf:4a:bc:62: a3:d8:cc:24:6a:6a:81:8c:00:d9:66:15:f0:6f:9b: da:41:60:34:a8:31:da:e4:0d:3d:3b:db:d2:34:5e: 8b:ba:4a:9f:5c:75:02:49:63:12:d4:9c:bc:cd:63: f7:61:a2:fd:0f:94:22:67:79:8b:5c:cc:b0:ae:da: d5:95:20:a8:6f:5a:31:89:0f:d1:cf:8e:d6:84:dd: f6:1f:d6:ec:48:0b:db:ef:33:57:e6:f6:5e:9a:9a: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:95:6C:F2:1F:28:4D:91:72:84:A5:5D:A1:11:47:AA:72:99:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c9:8c:98:da:3b:78:1d:fa:6d:ef:64:f3:a3:dd:79:1d:fd: a2:56:f3:e8:58:01:62:40:9a:ea:cb:76:1d:24:4e:29:00:e7: c2:37:d8:03:f0:14:66:61:c7:e6:79:5d:de:80:c2:8e:a2:5a: 0a:22:a3:34:1c:55:49:46:35:88:b8:ee:9d:6f:f5:3f:f9:af: ae:b2:98:72:5a:99:2b:d5:1c:d8:91:a6:5b:11:6a:20:72:c4: 41:fa:70:e6:90:8f:07:a2:cb:db:91:5d:41:a2:1e:d3:80:37: 9b:17:b7:ed:e6:02:1c:30:85:05:23:54:d1:a0:b9:8a:bf:b3: 36:60:17:4d:26:1a:f5:f2:00:44:c3:9a:1e:86:fc:d7:29:60: 03:1e:4f:f8:6c:b9:d0:73:b4:d9:cf:9d:5d:97:9e:1f:0d:f3: e6:06:11:4d:ba:85:70:35:82:2c:4d:8f:f4:1e:f1:ba:b2:8f: 50:47:a7:cb:8a:6a:52:85:b3:00:29:a7:e7:85:f4:8e:15:ae: 74:92:ee:f2:ff:f8:a8:dd:55:61:89:2a:ba:50:0c:94:42:8b: 09:b1:8c:51:44:a1:09:e4:eb:f9:8d:18:17:5f:61:81:84:56: 91:c2:ea:3c:26:6a:e9:ac:55:bc:86:c3:0a:08:87:87:39:4d: 9c:a6:5a:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyx2utpmWex1pA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NzZmZGUzZmYtNGZmNS00M2RhLWE3NDktM2Q0NWJlMzE3NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+eLKILgIk6iyhDCrM4j9hmb5utQKWmG0bty NqJpsBP2RJeDRQcl3UvOjFJJcJx4zISqL1kbCHkDi1Z/CvgnVvYRGorSt7ioIltY xaeyqKZ06ggJ4RR8QwF3AVF3wRBRVT+o9HRCqY03WF0tErn+tLxDGNCz36049GpW N5TqZ9mLzWQHd7DSjEt1L5rogWLXobia6TvUsF4CTFXsxm3RqL9KvGKj2MwkamqB jADZZhXwb5vaQWA0qDHa5A09O9vSNF6LukqfXHUCSWMS1Jy8zWP3YaL9D5QiZ3mL XMywrtrVlSCob1oxiQ/Rz47WhN32H9bsSAvb7zNX5vZempp4uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcPlWzyHyhNkXKEpV2hEUeqcpncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDg2OGQ0MDAtM2QzZS0z MDAwLWIzODEtMDk5Mjc5Y2EzYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETJjJjaO3gd+m3vZPOj3Xkd/aJW8+hYAWJAmurLdh0kTikA58I3 2APwFGZhx+Z5Xd6Awo6iWgoiozQcVUlGNYi47p1v9T/5r66ymHJamSvVHNiRplsR aiByxEH6cOaQjweiy9uRXUGiHtOAN5sXt+3mAhwwhQUjVNGguYq/szZgF00mGvXy AETDmh6G/NcpYAMeT/hsudBztNnPnV2Xnh8N8+YGEU26hXA1gixNj/Qe8bqyj1BH p8uKalKFswApp+eF9I4VrnSS7vL/+KjdVWGJKrpQDJRCiwmxjFFEoQnk6/mNGBdf YYGEVpHC6jwmaumsVbyGwwoIh4c5TZymWnQ= -----END CERTIFICATE-----Generated at Sun Dec 14 11:49:42 2025 by rpki-client