This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f87206d-6fe0-3688-a1cb-70c13335b5f7.roa File: 0f87206d-6fe0-3688-a1cb-70c13335b5f7.roa (raw, json) Hash identifier: JV4DuhUFyp9Vc7pnJSlsW3UGUyNuTvBUjZvJ8VAgW7g= Subject key identifier: 51:22:C4:47:E7:F1:5C:C2:AB:01:42:3A:C1:A6:85:B3:AA:67:2A:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBDF65F5DC3D6CB3D42800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f87206d-6fe0-3688-a1cb-70c13335b5f7.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396572 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:df:65:f5:dc:3d:6c:b3:d4:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=5d39dedf-5117-4d9e-8543-196798152baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:4e:d5:31:55:e4:a7:c7:f0:99:d6:f1:84: 2c:16:23:f8:96:36:d4:18:34:cd:02:8b:8b:59:5f: 32:2b:ee:cc:b0:7f:91:a7:31:fa:a5:99:6e:f0:4d: ac:60:a9:28:a7:a8:69:bc:ab:5e:e9:2a:64:d1:93: a5:3f:58:14:22:84:3f:90:8e:56:e0:d0:ea:e5:c9: d6:b1:4a:a6:8e:a3:4e:cb:16:92:e6:44:0c:ec:b9: c7:2d:ac:68:f8:6e:9b:ed:93:aa:58:cc:11:de:3d: fc:4d:c5:97:d5:86:14:b1:92:8d:22:1f:b2:f2:6a: 3c:84:ce:28:1e:d7:d6:39:22:27:35:fe:09:63:6c: fe:15:9c:ef:e6:1c:f3:e9:15:14:c4:29:84:eb:42: 4b:d0:33:f4:f3:4e:f3:aa:a8:8e:f4:03:8e:ed:6f: b0:19:04:fb:86:c4:53:b3:75:aa:c5:48:61:43:17: c0:f1:8c:99:36:fe:ec:0b:be:77:b7:a8:10:7b:e6: 82:3a:3e:93:08:8a:41:7c:cd:43:d7:4a:6d:aa:1a: 76:0f:e2:82:70:3e:71:43:ee:dd:f7:77:d6:f6:a1: 62:e1:4f:c6:7c:4b:4c:ba:91:ba:64:02:31:ea:e0: 65:f0:1d:1b:30:27:a5:49:9a:50:e1:8b:02:d7:18: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:22:C4:47:E7:F1:5C:C2:AB:01:42:3A:C1:A6:85:B3:AA:67:2A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f87206d-6fe0-3688-a1cb-70c13335b5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:af:ca:e7:c0:ab:c2:59:3d:e7:d6:d7:b5:e3:0e:ef:22:9e: 97:c6:27:32:a9:ee:e4:71:f3:76:36:c8:2c:22:85:7b:39:68: a0:2b:c0:ec:d0:a1:29:c9:bd:17:68:4f:ce:08:89:68:74:cc: 77:e1:93:a5:55:74:af:25:c2:cd:5d:ff:bb:40:c6:54:43:6b: a2:1b:16:da:ca:8e:ab:a7:d4:3c:2c:12:bd:18:eb:10:0c:9a: b0:36:ae:ef:96:22:55:b4:f4:c6:9b:cb:02:6c:c5:72:f8:de: 5d:4f:8e:22:5b:e3:e7:72:0d:9f:ff:d7:e0:15:8e:21:82:64: 5c:90:56:13:51:d5:b7:be:f0:2a:ca:60:40:ea:39:25:82:a3: 53:05:dd:6b:04:8a:bc:bb:f2:ab:95:35:43:32:a4:93:af:40: b7:81:e0:46:e2:bb:79:e3:fd:4c:c4:7a:69:84:22:42:c4:0f: a0:d8:19:45:17:27:74:a0:40:04:f7:f3:1a:ad:cb:88:35:7c: c6:73:85:27:5c:d9:8e:7b:de:43:09:19:97:98:ce:16:95:a5: 45:25:12:4c:37:b6:47:23:b4:bc:23:ed:3f:ee:a9:d1:d3:65: 2f:7d:c9:04:02:24:71:fc:ec:90:1f:55:86:57:01:2b:26:62: 5d:d9:e6:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC299l9dw9bLPUKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NWQzOWRlZGYtNTExNy00ZDllLTg1NDMtMTk2Nzk4MTUyYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5FO1TFV5KfH8JnW8YQsFiP4ljbUGDTNAouL WV8yK+7MsH+RpzH6pZlu8E2sYKkop6hpvKte6Spk0ZOlP1gUIoQ/kI5W4NDq5cnW sUqmjqNOyxaS5kQM7LnHLaxo+G6b7ZOqWMwR3j38TcWX1YYUsZKNIh+y8mo8hM4o HtfWOSInNf4JY2z+FZzv5hzz6RUUxCmE60JL0DP0807zqqiO9AOO7W+wGQT7hsRT s3WqxUhhQxfA8YyZNv7sC753t6gQe+aCOj6TCIpBfM1D10ptqhp2D+KCcD5xQ+7d 93fW9qFi4U/GfEtMupG6ZAIx6uBl8B0bMCelSZpQ4YsC1xhmLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFEixEfn8VzCqwFCOsGmhbOqZyqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY4NzIwNmQtNmZlMC0z Njg4LWExY2ItNzBjMTMzMzViNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIivyufAq8JZPefW17XjDu8inpfGJzKp7uRx83Y2yCwihXs5aKAr wOzQoSnJvRdoT84IiWh0zHfhk6VVdK8lws1d/7tAxlRDa6IbFtrKjqun1DwsEr0Y 6xAMmrA2ru+WIlW09MabywJsxXL43l1PjiJb4+dyDZ//1+AVjiGCZFyQVhNR1be+ 8CrKYEDqOSWCo1MF3WsEiry78quVNUMypJOvQLeB4Ebiu3nj/UzEemmEIkLED6DY GUUXJ3SgQAT38xqty4g1fMZzhSdc2Y573kMJGZeYzhaVpUUlEkw3tkcjtLwj7T/u qdHTZS99yQQCJHH87JAfVYZXASsmYl3Z5pU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:49 2026 by rpki-client