This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa File: 158f952f-8b95-3141-87e9-41026ec3bc42.roa (raw, json) Hash identifier: dXplL7lXBejMzP55MAgNR/ImcoAAKxmeEc5tnDmSCLc= Subject key identifier: AB:DB:56:62:50:8F:A7:91:A9:19:D6:ED:1C:45:09:6E:88:4F:4D:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CAF029AFD27027FF00A000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 397201 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:f0:29:af:d2:70:27:ff:00:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=0c274d67-0a9f-4aaa-ba1b-144daf98a653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:2d:ff:4e:fb:e4:4e:9d:33:be:fe:74:8f: ff:cf:a7:d6:2b:fa:2b:76:78:3a:6c:65:a0:ce:c6: 72:30:aa:cf:27:98:c3:8c:3c:ee:fe:d0:58:24:92: 81:44:8b:e9:15:f7:25:55:3b:e2:7e:38:c5:cf:96: 34:01:45:ea:61:8a:37:70:01:9e:44:22:06:44:f1: 82:e7:00:55:3c:08:e6:fe:af:db:da:4d:6e:5c:e2: e4:38:00:17:f2:50:96:db:c2:9f:79:be:5a:ba:ea: 5c:7d:0f:33:13:50:75:3c:75:49:5c:a8:3d:61:2f: 10:94:71:fc:5e:53:84:80:83:c7:31:e1:80:d2:04: d5:12:17:5c:04:3b:5d:f9:1e:41:c8:2f:1a:83:08: 6e:b3:d1:85:2c:c3:b9:0e:9c:e7:86:b3:b7:5f:58: 6b:8a:f2:78:cc:19:75:1d:7f:7e:38:6b:1e:a7:2c: df:18:79:f2:8c:dc:3d:37:15:40:8a:aa:50:cc:96: 84:ad:4e:e5:7f:70:d7:83:69:8f:0a:64:44:13:97: 2a:9d:db:8a:04:40:1d:e3:1e:2e:7f:68:61:1a:95: 8d:e4:6e:9f:19:7a:a9:be:bc:64:61:6c:e4:09:f7: 09:9a:19:c2:81:9e:e2:59:c8:34:3d:21:32:87:a7: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DB:56:62:50:8F:A7:91:A9:19:D6:ED:1C:45:09:6E:88:4F:4D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ed:27:b0:f2:e5:09:6f:6d:2e:2e:25:4b:fe:8a:d7:0f:9c: a5:77:bd:90:21:a1:2b:3b:0d:3a:97:63:26:f8:1e:6b:90:04: 17:30:4b:db:a6:db:05:bd:2e:52:0d:6e:5f:c5:a4:f1:e1:6c: 10:10:2e:ef:ed:64:41:c9:6d:73:87:28:86:53:3e:65:1e:2e: 8f:43:c5:94:34:61:11:9a:af:53:18:75:0e:73:47:4b:d2:0b: 7b:c2:6b:6c:71:80:dd:e3:78:16:4f:db:54:f5:f6:69:f0:3b: 30:e1:40:13:5b:6a:83:5d:d8:a0:64:4e:17:8f:d9:52:26:c8: 6d:57:f3:99:25:22:ec:99:e3:0f:dd:08:08:78:73:cf:5f:e3: 13:f7:df:22:b0:d2:8c:44:c3:07:cb:05:05:c7:90:31:9b:85: 26:0d:3a:b8:53:ea:bb:18:62:d0:d0:a7:ba:8d:23:f4:d7:e2: 7c:ee:3c:28:9d:20:dd:37:81:45:8b:f9:9a:68:d2:a1:38:2e: 4d:20:1c:a9:57:0b:a1:f8:9d:ce:7e:35:66:40:55:c3:8c:72: e5:67:22:0f:97:fa:b4:0e:8c:89:ad:99:14:f6:ff:eb:6d:90: de:74:fd:83:4c:eb:eb:eb:22:5e:44:cb:c9:a9:45:55:5e:7f: be:96:d0:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyvApr9JwJ/8AoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MGMyNzRkNjctMGE5Zi00YWFhLWJhMWItMTQ0ZGFmOThhNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wct/0775E6dM77+dI//z6fWK/ordng6bGWg zsZyMKrPJ5jDjDzu/tBYJJKBRIvpFfclVTvifjjFz5Y0AUXqYYo3cAGeRCIGRPGC 5wBVPAjm/q/b2k1uXOLkOAAX8lCW28Kfeb5auupcfQ8zE1B1PHVJXKg9YS8QlHH8 XlOEgIPHMeGA0gTVEhdcBDtd+R5ByC8agwhus9GFLMO5DpznhrO3X1hrivJ4zBl1 HX9+OGsepyzfGHnyjNw9NxVAiqpQzJaErU7lf3DXg2mPCmREE5cqnduKBEAd4x4u f2hhGpWN5G6fGXqpvrxkYWzkCfcJmhnCgZ7iWcg0PSEyh6dZdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKvbVmJQj6eRqRnW7RxFCW6IT01AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU4Zjk1MmYtOGI5NS0z MTQxLTg3ZTktNDEwMjZlYzNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbtJ7Dy5QlvbS4uJUv+itcPnKV3vZAhoSs7DTqXYyb4HmuQBBcw S9um2wW9LlINbl/FpPHhbBAQLu/tZEHJbXOHKIZTPmUeLo9DxZQ0YRGar1MYdQ5z R0vSC3vCa2xxgN3jeBZP21T19mnwOzDhQBNbaoNd2KBkTheP2VImyG1X85klIuyZ 4w/dCAh4c89f4xP33yKw0oxEwwfLBQXHkDGbhSYNOrhT6rsYYtDQp7qNI/TX4nzu PCidIN03gUWL+Zpo0qE4Lk0gHKlXC6H4nc5+NWZAVcOMcuVnIg+X+rQOjImtmRT2 /+ttkN50/YNM6+vrIl5Ey8mpRVVef76W0Jw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:30 2025 by rpki-client