This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa File: 10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa (raw, json) Hash identifier: TdOfxP9VkiolpspYzNAgyE1Y1CbkfDkFNESNkBVjT00= Subject key identifier: 58:E7:1D:23:78:66:DE:7A:01:10:09:BE:96:C1:8C:A7:1C:5F:97:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C9ACC4F3A3CBAFF9D4C5A3340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 396600 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:4f:3a:3c:ba:ff:9d:4c:5a:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=0a8dbd41-ba6e-42ea-b464-274723e8ee7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:aa:7c:4a:b9:5a:da:83:aa:5c:50:2a:72: 10:74:3c:b5:0b:cd:4d:9e:40:25:fe:d7:9e:bf:65: 54:73:02:fc:69:81:93:b3:5f:dd:42:2f:4f:66:e8: af:25:13:d2:23:0a:54:c7:6a:6f:c2:18:de:59:a0: 68:ea:18:87:db:d0:9d:1e:ec:cc:e2:46:10:81:92: 37:1e:1b:38:57:9b:cb:8d:2a:ce:89:64:28:df:8c: 4e:9d:f1:88:ae:72:e6:93:6f:b6:e7:e1:68:68:d7: d8:b9:96:c5:03:aa:f9:4f:51:f2:e6:99:af:b9:80: 21:ac:db:69:28:70:7c:56:88:12:94:11:5c:60:d4: 4a:dc:b3:7a:3b:eb:ff:f6:00:af:17:f3:0a:4c:61: 6b:f8:f1:34:cf:8a:f3:d3:88:9d:2a:4e:0d:28:69: 01:2b:cb:e9:96:b3:e0:2d:5d:81:36:b0:44:7b:e1: 30:0f:41:35:ad:b2:5d:37:3e:24:4e:df:c7:54:69: 98:82:ba:32:55:5b:a4:cd:57:55:91:87:cd:25:0f: 7d:a7:0f:fe:57:48:4a:8d:7c:b2:65:02:8e:92:0f: 4d:b1:8b:71:be:f2:eb:05:83:70:aa:79:6b:fb:4b: 73:7e:5e:30:75:fa:96:41:37:c6:38:23:3b:67:40: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E7:1D:23:78:66:DE:7A:01:10:09:BE:96:C1:8C:A7:1C:5F:97:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:24:d5:5a:14:f9:75:a4:6f:13:9b:a4:fc:38:67:f3:6e:ea: 47:58:cc:3b:af:70:0f:73:dd:24:a3:a4:ff:0e:91:f3:d2:15: 52:3f:19:1b:34:cf:77:c6:fa:f4:5f:14:e7:45:e8:ce:06:cb: d8:b7:89:2b:f2:ac:ae:15:00:ba:a8:83:f3:8f:5f:b5:0f:1b: b6:fc:11:72:90:74:54:c8:fe:8a:18:21:16:e1:7e:dc:5b:8c: 32:92:d7:22:51:27:95:4a:db:3f:55:a2:ed:7c:69:9f:96:28: c8:29:aa:c9:58:1a:64:b1:aa:de:43:b1:90:30:fb:1a:b3:56: 29:af:4a:7d:5d:97:f4:91:3c:c5:88:41:a6:9d:04:63:52:ac: 35:94:e3:16:9c:2e:33:91:b1:72:80:71:4c:a5:0d:af:97:f5: bd:5b:c8:07:e3:3a:0c:38:ec:40:d9:70:fa:8c:7b:b5:00:fd: 53:38:96:fd:bb:87:c0:b4:60:f6:1d:d7:92:ee:07:05:d4:e6: 7a:f4:0a:c9:d8:0e:98:5d:4f:3e:93:8a:c3:88:84:1a:d5:cf: e7:32:b8:39:87:1d:53:22:d0:46:ec:77:f6:04:5c:10:2e:4f: 66:3a:0e:dd:d8:f9:9f:7d:0f:4c:66:6f:46:91:e0:36:94:9b: 4a:d9:bb:e6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEyazE86PLr/nUxaM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGE4ZGJkNDEtYmE2ZS00MmVhLWI0NjQtMjc0NzIzZThlZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R6qfEq5WtqDqlxQKnIQdDy1C81NnkAl/tee v2VUcwL8aYGTs1/dQi9PZuivJRPSIwpUx2pvwhjeWaBo6hiH29CdHuzM4kYQgZI3 Hhs4V5vLjSrOiWQo34xOnfGIrnLmk2+25+FoaNfYuZbFA6r5T1Hy5pmvuYAhrNtp KHB8VogSlBFcYNRK3LN6O+v/9gCvF/MKTGFr+PE0z4rz04idKk4NKGkBK8vplrPg LV2BNrBEe+EwD0E1rbJdNz4kTt/HVGmYgroyVVukzVdVkYfNJQ99pw/+V0hKjXyy ZQKOkg9NsYtxvvLrBYNwqnlr+0tzfl4wdfqWQTfGOCM7Z0DRmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFjnHSN4Zt56ARAJvpbBjKccX5eEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTBhMTQyMGUtZWEyYi0z MGQ3LThhODctYWExMmZkNGFlMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjJNVaFPl1pG8Tm6T8OGfzbupHWMw7r3APc90k o6T/DpHz0hVSPxkbNM93xvr0XxTnRejOBsvYt4kr8qyuFQC6qIPzj1+1Dxu2/BFy kHRUyP6KGCEW4X7cW4wyktciUSeVSts/VaLtfGmflijIKarJWBpksareQ7GQMPsa s1Ypr0p9XZf0kTzFiEGmnQRjUqw1lOMWnC4zkbFygHFMpQ2vl/W9W8gH4zoMOOxA 2XD6jHu1AP1TOJb9u4fAtGD2HdeS7gcF1OZ69ArJ2A6YXU8+k4rDiIQa1c/nMrg5 hx1TItBG7Hf2BFwQLk9mOg7d2PmffQ9MZm9GkeA2lJtK2bvm -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:52 2026 by rpki-client