This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa File: 1487c29f-5570-325d-82af-e15061a6002b.roa (raw, json) Hash identifier: TFvApMop540iaQezMIJO2T/bZpNohDZ4Til/mPhAeuA= Subject key identifier: 03:7A:76:12:5D:1D:38:9D:91:29:CB:55:55:1B:D2:2C:0E:A4:2A:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC1D7072BD659ABEEE0280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 397195 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1d:70:72:bd:65:9a:be:ee:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=e423c862-62e0-4906-99a9-63eca40909bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:4e:02:c3:7c:30:0e:e3:1e:a3:d8:8c:94: ad:a1:86:be:7d:89:9d:45:1d:c7:ad:12:e3:ff:0a: 92:f6:07:c8:d6:61:71:a6:75:e9:71:f2:8e:20:79: 95:5d:58:b5:cc:60:24:1a:4b:ec:7c:5c:09:8b:e7: e4:50:20:da:7f:31:25:61:55:c5:51:fa:2b:98:98: fe:1b:cc:30:1f:75:05:e5:e2:6b:7d:62:95:91:05: a9:96:0d:53:d7:f4:eb:74:4f:23:7c:cb:f3:28:9c: 9d:24:8a:38:0f:a0:9d:b4:f6:8c:b9:de:e2:a3:a9: 57:a7:e6:b2:62:fe:d9:30:39:de:75:1f:0c:f5:7f: 1a:d9:b3:97:a6:29:db:ca:2e:0f:53:ce:7d:4e:8e: 6b:04:8c:f6:66:90:54:6a:18:a9:7e:cf:8f:ec:11: ec:b2:d7:f8:52:2c:39:9d:f3:2a:b6:48:b0:c9:20: 26:57:01:7d:1d:88:12:14:33:95:bc:a3:02:3e:38: e0:2f:7d:aa:be:d3:93:d8:9c:8c:53:b9:22:d0:60: c6:25:6e:10:07:97:45:9e:8c:fa:ff:5e:73:c3:bb: a8:68:9d:c5:34:76:55:52:08:d9:4b:bd:85:54:e7: 07:35:ed:07:1a:28:06:3f:88:29:21:28:f4:8e:d3: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7A:76:12:5D:1D:38:9D:91:29:CB:55:55:1B:D2:2C:0E:A4:2A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:66:e8:10:6a:28:13:6e:e4:ce:d2:1e:5a:3b:7d:1c:ff:8a: f4:b3:f8:27:22:84:94:04:3e:09:95:a1:d0:df:28:1b:f0:fd: 81:92:97:74:cc:8c:f1:67:22:dc:89:9d:fe:04:7e:84:8a:f0: 76:13:7f:5f:a5:49:d4:71:ba:18:fd:b6:a1:cb:0d:24:18:64: 45:0b:7c:df:5e:8f:69:38:76:a8:44:ae:09:f9:37:07:3f:32: 07:b8:57:d4:99:3a:b7:a1:0e:30:3a:36:75:cc:15:4c:27:3e: d5:52:86:53:5a:f7:69:f8:16:ca:4f:c7:bd:81:93:16:c8:e1: e1:85:e2:dc:eb:e6:b6:1a:72:65:f4:21:c0:e2:43:c1:a6:ef: a3:f4:a3:10:45:a0:88:14:f4:a5:10:b6:e0:36:2f:fe:a8:8f: 32:e8:da:d6:13:fd:16:cf:7e:40:38:c6:38:0b:71:f3:70:16: 72:31:47:a5:a7:15:61:c2:03:1f:95:08:d6:98:8a:d6:28:bc: 4d:21:a5:41:94:de:d2:13:ba:17:e7:1b:86:9b:78:43:29:44: 72:c6:67:48:27:ef:26:9c:f2:ea:ea:48:49:24:a9:fc:24:29: 8c:8c:3a:3e:c7:ad:15:64:d5:b4:f6:2b:0f:a3:c6:e9:5f:84: 34:23:37:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3B1wcr1lmr7uAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTQyM2M4NjItNjJlMC00OTA2LTk5YTktNjNlY2E0MDkwOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjNOAsN8MA7jHqPYjJStoYa+fYmdRR3HrRLj /wqS9gfI1mFxpnXpcfKOIHmVXVi1zGAkGkvsfFwJi+fkUCDafzElYVXFUformJj+ G8wwH3UF5eJrfWKVkQWplg1T1/TrdE8jfMvzKJydJIo4D6CdtPaMud7io6lXp+ay Yv7ZMDnedR8M9X8a2bOXpinbyi4PU859To5rBIz2ZpBUahipfs+P7BHsstf4Uiw5 nfMqtkiwySAmVwF9HYgSFDOVvKMCPjjgL32qvtOT2JyMU7ki0GDGJW4QB5dFnoz6 /15zw7uoaJ3FNHZVUgjZS72FVOcHNe0HGigGP4gpISj0jtNkMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAN6dhJdHTidkSnLVVUb0iwOpCoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ4N2MyOWYtNTU3MC0z MjVkLTgyYWYtZTE1MDYxYTYwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJm6BBqKBNu5M7SHlo7fRz/ivSz+CcihJQEPgmVodDfKBvw/YGS l3TMjPFnItyJnf4EfoSK8HYTf1+lSdRxuhj9tqHLDSQYZEULfN9ej2k4dqhErgn5 Nwc/Mge4V9SZOrehDjA6NnXMFUwnPtVShlNa92n4FspPx72BkxbI4eGF4tzr5rYa cmX0IcDiQ8Gm76P0oxBFoIgU9KUQtuA2L/6ojzLo2tYT/RbPfkA4xjgLcfNwFnIx R6WnFWHCAx+VCNaYitYovE0hpUGU3tITuhfnG4abeEMpRHLGZ0gn7yac8urqSEkk qfwkKYyMOj7HrRVk1bT2Kw+jxulfhDQjNyM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:15 2026 by rpki-client