This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa File: ff101ae5-f103-3f63-b004-90d2c700d744.roa (raw, json) Hash identifier: gxXpB6ntSH7V+TfMHJa145jpqmdctQ6GN/tcSBk5Cf8= Subject key identifier: AB:B5:9D:B1:89:12:96:DB:14:32:C0:08:11:AA:7C:88:21:93:48:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BB9DC3116EB90A6FB4F5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 40717 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:9d:c3:11:6e:b9:0a:6f:b4:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=5c215198-2546-4893-9144-2a2e92b5ef50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:2c:37:f1:be:9b:6e:a1:7b:0c:b6:fd:c2: e3:96:45:b6:d4:11:bb:b9:17:47:1b:88:22:5e:4d: b7:da:13:70:9a:6d:1b:ec:18:f6:37:cb:d8:a1:73: c1:3e:ef:95:60:65:30:46:42:59:fd:b8:17:58:ce: b3:e2:c1:17:8f:5d:fb:82:d2:9a:0e:5f:17:09:84: 41:84:a5:b6:7a:f6:a8:a5:47:d2:19:b5:c6:5e:2a: 06:06:96:9d:99:37:1f:eb:b3:0c:56:d9:b8:aa:32: 71:ee:d2:00:8a:7d:02:59:7c:45:94:9a:70:ba:df: be:6d:73:04:18:49:5c:a3:49:df:8e:4b:f7:5b:5a: f7:06:b6:d9:b7:a7:fd:5b:f6:fa:f6:f1:73:b9:18: f7:d1:6e:ca:78:eb:19:fc:2b:49:8f:c1:8e:df:c6: 5c:5c:eb:f8:df:7d:03:3d:19:6e:bd:ff:70:ea:fb: e8:28:37:82:8d:f4:0a:b8:86:37:ec:a5:97:cd:35: 70:e3:7b:13:87:25:11:28:23:eb:3c:28:ef:0c:66: 91:c8:03:8f:eb:a3:26:4c:ef:0c:c3:1d:f0:88:2f: e2:4b:bb:ef:40:d4:c9:26:18:9d:a3:46:14:bf:8b: b0:51:9d:28:0d:ca:63:39:7e:f3:9c:69:e4:b4:6a: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:9D:B1:89:12:96:DB:14:32:C0:08:11:AA:7C:88:21:93:48:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:81:ce:8c:df:cd:7e:5e:bc:5b:d3:af:e0:f9:54:58:90:06: b8:fe:ef:3b:2c:50:9d:1b:fb:f7:89:85:8a:b2:2c:74:63:2c: 8c:75:ef:35:e7:18:fb:4e:0e:c7:a7:66:4e:dd:9f:56:fc:f0: ac:23:5a:94:31:33:de:01:4e:01:59:5c:e5:30:c3:1a:43:75: 5a:17:9d:1d:b3:eb:80:1c:4f:b7:9b:81:25:6a:34:39:01:36: a2:2a:e7:d0:44:77:ef:75:bd:0b:19:44:52:cc:aa:f0:1d:4e: 4a:64:f6:9b:15:fd:27:a2:55:9d:86:0e:62:93:22:70:0e:f4: e8:66:bd:08:d0:1d:cf:8e:e0:b5:9d:6e:d5:0e:66:13:88:45: 00:25:94:a9:31:7c:6d:36:52:d6:20:96:a9:55:f9:a1:6c:54: ac:f4:4e:67:73:85:7c:a2:7e:07:21:ee:04:38:86:18:1c:87: c0:8e:bd:b6:2c:5d:fc:dc:fa:e3:a2:65:1c:42:16:9a:fd:d3: df:cc:5d:bb:e7:3b:b2:9e:e1:9f:20:66:66:d5:1a:a5:89:8e: dc:79:b0:94:5a:34:21:c4:e6:d2:0d:a2:7e:2e:71:ca:c2:8e: 41:dc:76:ed:4f:c3:2d:e0:24:48:67:1a:50:7d:9f:3c:5a:d3: 0c:11:d9:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu53DEW65Cm+09cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NWMyMTUxOTgtMjU0Ni00ODkzLTkxNDQtMmEyZTkyYjVlZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ksN/G+m26hewy2/cLjlkW21BG7uRdHG4gi Xk232hNwmm0b7Bj2N8vYoXPBPu+VYGUwRkJZ/bgXWM6z4sEXj137gtKaDl8XCYRB hKW2evaopUfSGbXGXioGBpadmTcf67MMVtm4qjJx7tIAin0CWXxFlJpwut++bXME GElco0nfjkv3W1r3BrbZt6f9W/b69vFzuRj30W7KeOsZ/CtJj8GO38ZcXOv4330D PRluvf9w6vvoKDeCjfQKuIY37KWXzTVw43sThyURKCPrPCjvDGaRyAOP66MmTO8M wx3wiC/iS7vvQNTJJhido0YUv4uwUZ0oDcpjOX7znGnktGor3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKu1nbGJEpbbFDLACBGqfIghk0j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmYxMDFhZTUtZjEwMy0z ZjYzLWIwMDQtOTBkMmM3MDBkNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuBzozfzX5evFvTr+D5VFiQBrj+7zssUJ0b+/eJhYqyLHRjLIx1 7zXnGPtODsenZk7dn1b88KwjWpQxM94BTgFZXOUwwxpDdVoXnR2z64AcT7ebgSVq NDkBNqIq59BEd+91vQsZRFLMqvAdTkpk9psV/SeiVZ2GDmKTInAO9OhmvQjQHc+O 4LWdbtUOZhOIRQAllKkxfG02UtYglqlV+aFsVKz0TmdzhXyifgch7gQ4hhgch8CO vbYsXfzc+uOiZRxCFpr909/MXbvnO7Ke4Z8gZmbVGqWJjtx5sJRaNCHE5tINon4u ccrCjkHcdu1Pwy3gJEhnGlB9nzxa0wwR2UE= -----END CERTIFICATE-----Generated at Sun Dec 14 11:49:24 2025 by rpki-client