This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa File: e865b929-009b-32a1-9802-c10ae6b03389.roa (raw, json) Hash identifier: BJ/6b0iFiJnSCIqg9jLRIFJJqmF8VuewKCovpO7Cz3w= Subject key identifier: 74:D9:BE:38:1D:6E:2E:74:F9:16:88:41:C6:72:33:08:EE:52:A4:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BB9CCF1BBAABED29B4FEB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 396564 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:9c:cf:1b:ba:ab:ed:29:b4:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=6147f217-156b-4f01-880b-faf16426f347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:2c:9b:c4:23:c7:ab:33:57:7c:af:33:a7: 5b:47:0d:d3:36:d2:c2:fe:d6:d4:35:28:ac:19:77: 26:ca:37:6d:6b:b6:72:5f:d1:95:e5:b6:1b:95:4d: 6c:e6:ab:31:c8:2a:e5:d1:3a:fc:c4:03:e4:19:91: 00:63:c5:74:fc:8e:84:91:c6:ef:08:cd:90:17:86: 64:b1:41:c9:5b:35:e2:c3:7e:89:c4:15:ca:ae:46: 2b:a2:20:98:16:3d:f3:50:04:ae:a8:4e:bb:38:66: eb:50:e4:69:af:3c:e9:8c:67:3a:78:d1:aa:b2:5d: 9d:f6:d5:09:fa:3c:b8:f1:d3:a4:33:3f:ba:98:ae: 05:6d:40:32:af:f6:bf:df:fe:f4:47:74:74:39:5d: b4:fe:2e:c9:69:4f:84:5b:16:7f:37:eb:19:25:ae: 12:3c:10:de:46:33:95:3c:6e:51:aa:33:d8:42:07: 8e:88:24:8f:4f:c7:d3:e6:16:5c:e0:bb:5a:a2:8b: a2:04:48:35:1e:04:b4:bb:d0:8b:f2:ad:2f:a6:92: b4:89:5d:c3:73:c3:96:59:13:30:ee:70:f2:bf:03: 98:4a:06:2d:56:d9:93:b3:cb:ed:0f:9a:f7:80:61: 8f:92:88:2f:20:87:e6:58:b6:93:13:90:e7:21:a0: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:BE:38:1D:6E:2E:74:F9:16:88:41:C6:72:33:08:EE:52:A4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:76:ae:e7:5a:41:18:a9:7e:96:d1:45:8d:ef:b3:9b:7e:5d: d5:b4:77:c9:4a:34:7f:d0:68:a5:36:60:18:15:13:2e:94:6c: 97:65:56:22:22:87:92:c8:bf:e4:8c:48:73:9b:51:90:88:ec: a8:25:e2:01:bb:fc:83:da:a5:17:96:18:81:48:c7:24:ee:d6: d7:19:95:92:cf:a8:31:f1:f9:4d:69:ac:de:64:82:4e:c7:1a: da:22:29:5d:3f:a5:cd:75:e2:6f:1f:63:c7:b4:53:eb:4d:c1: dc:72:be:9b:07:33:ee:8a:c7:28:b6:2a:ba:b6:39:bf:c7:26: 0f:8d:35:67:cd:9d:8a:13:30:99:02:7a:11:6c:ee:c7:df:ed: 95:37:0b:fc:38:1e:74:f0:0d:ff:86:74:34:24:9f:c3:cb:2f: 2c:72:46:a2:b8:dd:a3:42:7a:df:77:5a:fc:dc:cc:b8:4c:78: f1:a6:09:1e:49:cf:67:d7:dd:01:90:32:39:84:2d:67:89:ba: c7:8c:3b:95:ed:d7:88:5e:ef:28:bf:82:e8:40:f7:4a:bb:56: 5c:b2:fd:8f:aa:fa:fc:84:03:28:6d:fa:e8:cc:bc:e4:70:21: 73:1a:86:c9:6f:56:9a:2f:e3:1b:7a:2b:75:63:34:82:25:84: 67:97:ca:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu5zPG7qr7Sm0/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NjE0N2YyMTctMTU2Yi00ZjAxLTg4MGItZmFmMTY0MjZmMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaMsm8Qjx6szV3yvM6dbRw3TNtLC/tbUNSis GXcmyjdta7ZyX9GV5bYblU1s5qsxyCrl0Tr8xAPkGZEAY8V0/I6EkcbvCM2QF4Zk sUHJWzXiw36JxBXKrkYroiCYFj3zUASuqE67OGbrUORprzzpjGc6eNGqsl2d9tUJ +jy48dOkMz+6mK4FbUAyr/a/3/70R3R0OV20/i7JaU+EWxZ/N+sZJa4SPBDeRjOV PG5RqjPYQgeOiCSPT8fT5hZc4LtaoouiBEg1HgS0u9CL8q0vppK0iV3Dc8OWWRMw 7nDyvwOYSgYtVtmTs8vtD5r3gGGPkogvIIfmWLaTE5DnIaDj6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTZvjgdbi50+RaIQcZyMwjuUqTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTg2NWI5MjktMDA5Yi0z MmExLTk4MDItYzEwYWU2YjAzMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGN2rudaQRipfpbRRY3vs5t+XdW0d8lKNH/QaKU2YBgVEy6UbJdl ViIih5LIv+SMSHObUZCI7Kgl4gG7/IPapReWGIFIxyTu1tcZlZLPqDHx+U1prN5k gk7HGtoiKV0/pc114m8fY8e0U+tNwdxyvpsHM+6Kxyi2Krq2Ob/HJg+NNWfNnYoT MJkCehFs7sff7ZU3C/w4HnTwDf+GdDQkn8PLLyxyRqK43aNCet93WvzczLhMePGm CR5Jz2fX3QGQMjmELWeJuseMO5Xt14he7yi/guhA90q7Vlyy/Y+q+vyEAyht+ujM vORwIXMahslvVpov4xt6K3VjNIIlhGeXyog= -----END CERTIFICATE-----Generated at Sun Dec 14 11:52:32 2025 by rpki-client