This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa File: e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa (raw, json) Hash identifier: KM3TBpEUzT2qtWSdNv3I5BBiIhn8TUN/8xhelYhM6pw= Subject key identifier: A1:2E:F6:75:2F:26:96:8C:8D:AC:E8:03:0B:78:25:55:AD:81:34:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CB121C50518BB60F010F2BA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 25485 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c5:05:18:bb:60:f0:10:f2:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=dd6ece3f-ecbf-475f-ae41-caf5c1584d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:b9:c8:a4:69:72:76:54:4e:61:b6:ff:d7: 49:cb:2b:5c:a7:9a:88:35:4e:81:3d:06:ff:85:3f: ae:c5:2e:21:b0:d9:bf:7f:cc:81:cc:bb:f0:68:f8: f7:4f:c7:73:c1:be:c3:78:40:5f:8d:cb:9b:10:b6: c0:61:81:45:43:70:f0:c1:4e:18:73:4b:c8:fb:53: 69:7a:9b:ac:a1:38:ca:94:fa:f8:61:47:40:36:01: bb:cb:f4:ce:ce:78:da:9d:94:8e:c4:17:60:e7:de: fa:6f:00:b3:73:bd:d0:c4:cd:36:fa:3b:c3:ee:54: cf:fc:ce:8e:be:25:de:21:05:56:d3:3a:10:bf:65: e1:df:0f:01:47:53:ad:07:82:63:1e:11:5c:a4:44: 42:ec:c9:4a:a6:f4:79:c3:af:3a:69:e1:26:ad:a1: 1b:22:2d:aa:02:ca:0c:dc:0e:8a:7d:27:61:bc:7e: 12:3f:47:a3:1a:da:87:4f:db:9a:f6:5a:74:99:52: 25:4e:66:3c:30:eb:c0:0b:bd:d9:b8:fb:6c:a8:53: 39:38:67:db:aa:fc:84:6a:5a:57:58:68:b1:04:b8: cf:8e:1d:be:4f:1b:14:18:13:7d:8d:e1:d8:aa:17: 75:ed:d3:3c:8c:f1:df:5c:8d:f0:85:9e:d4:ab:86: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2E:F6:75:2F:26:96:8C:8D:AC:E8:03:0B:78:25:55:AD:81:34:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e8:a9:25:d7:3a:1d:8d:1e:c6:c7:0e:6c:46:ed:bb:06:7b: f5:13:02:54:f8:83:d1:61:c3:b8:0d:cc:04:f5:ca:ae:16:b8: 6e:fa:28:30:ca:71:66:50:87:f5:0e:cb:68:bf:cc:6c:f6:84: 3b:f1:5e:2d:a5:5a:41:99:fe:e6:f5:7c:10:7d:15:0a:98:df: 16:d4:60:6d:a1:8b:85:4c:eb:c1:c5:80:d3:eb:7e:62:94:ad: 21:cf:2a:66:01:77:93:c1:ef:6e:36:cd:03:2c:6d:aa:0b:5f: a7:df:7c:2c:01:73:f4:8c:49:cd:db:de:a8:c7:a8:ec:ed:d5: 11:3d:3c:2e:c4:06:27:de:10:64:09:15:ba:e6:d8:29:c9:b8: 1b:8f:1a:28:a5:1b:ef:da:12:80:c4:37:ee:f0:de:d4:91:40: f1:a7:84:9c:3f:82:a6:00:55:da:e6:c4:49:23:0a:96:78:28: af:dc:57:b0:c2:5b:25:1e:b4:48:04:e8:16:f1:16:4a:ac:a8: a0:56:ca:a2:97:bb:a8:8c:89:a0:0f:29:95:95:96:c6:f4:e5: dd:48:7a:83:48:77:8f:b7:0c:21:d5:9e:0c:af:4c:0f:dd:9f: b0:c9:50:c7:e6:b4:7a:f5:68:ab:54:88:3e:76:9f:1f:f9:bc: df:44:d6:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIcUFGLtg8BDyuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGQ2ZWNlM2YtZWNiZi00NzVmLWFlNDEtY2FmNWMxNTg0ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8e5yKRpcnZUTmG2/9dJyytcp5qINU6BPQb/ hT+uxS4hsNm/f8yBzLvwaPj3T8dzwb7DeEBfjcubELbAYYFFQ3DwwU4Yc0vI+1Np epusoTjKlPr4YUdANgG7y/TOznjanZSOxBdg5976bwCzc73QxM02+jvD7lTP/M6O viXeIQVW0zoQv2Xh3w8BR1OtB4JjHhFcpERC7MlKpvR5w686aeEmraEbIi2qAsoM 3A6KfSdhvH4SP0ejGtqHT9ua9lp0mVIlTmY8MOvAC73ZuPtsqFM5OGfbqvyEalpX WGixBLjPjh2+TxsUGBN9jeHYqhd17dM8jPHfXI3whZ7Uq4YMbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEu9nUvJpaMjazoAwt4JVWtgTQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZThmYzIzNDgtOGNjMi0z N2E4LThmZTItYTcyYmNlYWYxZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/oqSXXOh2NHsbHDmxG7bsGe/UTAlT4g9Fhw7gNzAT1yq4WuG76 KDDKcWZQh/UOy2i/zGz2hDvxXi2lWkGZ/ub1fBB9FQqY3xbUYG2hi4VM68HFgNPr fmKUrSHPKmYBd5PB7242zQMsbaoLX6fffCwBc/SMSc3b3qjHqOzt1RE9PC7EBife EGQJFbrm2CnJuBuPGiilG+/aEoDEN+7w3tSRQPGnhJw/gqYAVdrmxEkjCpZ4KK/c V7DCWyUetEgE6BbxFkqsqKBWyqKXu6iMiaAPKZWVlsb05d1IeoNId4+3DCHVngyv TA/dn7DJUMfmtHr1aKtUiD52nx/5vN9E1s0= -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:39 2026 by rpki-client