This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa File: 24a899b4-321a-378a-a29f-36469e6ae33a.roa (raw, json) Hash identifier: 2vcQ6bHoeRwLJmRcfwIIiUq8MCx5nWAOAtOfvxcn/Go= Subject key identifier: B3:9D:B7:AE:D3:F8:AD:40:85:35:65:CE:CA:12:AD:C0:D2:CE:D4:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16383726DF5DA11CA7100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396615 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:63:83:72:6d:f5:da:11:ca:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=a202f7be-108b-4695-9f37-5b97cb105472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:29:93:94:34:f1:11:22:96:f1:16:d6:c5: 93:b7:d3:ca:8a:94:02:57:73:63:c4:8b:75:8d:a0: d8:cd:e3:ca:b4:e5:19:74:d9:9d:6c:76:d0:77:75: a5:c1:c1:d0:ea:42:b0:5e:a2:55:ed:67:7b:c2:74: 51:d4:0b:b4:09:9b:43:e7:cb:17:b8:39:9e:9f:7c: d8:c6:17:19:5d:d1:af:54:52:59:82:dd:5e:a0:07: ad:61:c6:0c:a3:52:5b:e7:79:75:05:c3:53:71:ef: 7b:b0:51:41:1c:91:3e:60:84:a4:30:e7:24:41:50: 66:4a:f3:6d:6c:7b:c1:86:3b:17:69:00:55:6f:55: 73:97:e1:d7:19:ce:7c:fb:c9:5c:8b:0c:50:78:2f: 1e:d3:a4:4d:08:34:ca:24:8f:69:6f:67:e1:e1:4f: f6:1b:e5:76:30:d1:de:10:53:0d:b2:06:52:50:64: a4:95:3a:5c:4d:8b:8c:ef:66:f3:ae:40:25:57:38: 0d:7e:64:bb:01:8b:cc:67:03:1e:f7:26:9b:22:a3: a1:26:58:03:35:81:22:f2:56:b1:2d:53:e4:e4:55: e4:f1:21:0a:4a:03:07:b6:76:0f:1a:44:b1:4f:83: ba:f2:fe:49:20:fa:2e:29:6a:00:74:02:01:a1:8b: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9D:B7:AE:D3:F8:AD:40:85:35:65:CE:CA:12:AD:C0:D2:CE:D4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8d:ae:52:fb:10:1a:cf:ed:61:ff:f3:fc:4a:a6:57:60:29: b3:fe:9e:17:5e:7d:ac:90:f4:45:0d:c2:6b:16:72:33:e4:f2: 69:3a:f3:52:9f:bc:08:6d:aa:f6:3a:88:8e:64:cc:14:53:c3: b3:40:43:ae:36:58:37:07:5e:fb:ea:fd:35:60:38:8b:ca:4b: b1:a4:f8:56:45:88:e2:f7:93:6a:f5:7e:42:f4:ce:bd:c4:f1: 53:fb:7f:fc:88:0a:77:c9:a5:98:91:4b:7d:7b:19:74:98:4a: b5:68:23:d3:58:36:a1:d5:12:d3:e7:6a:55:e5:d2:55:7f:fa: d0:f5:52:c1:93:a8:a6:dc:73:61:1b:7b:2d:71:6b:18:61:d9: 23:d1:f8:08:63:36:67:44:61:b6:6e:15:7b:1a:54:c9:7c:34: 30:75:ab:da:36:03:4a:be:28:13:d5:1b:5e:df:9f:c8:49:50: ee:4e:2b:2f:09:9f:2e:ab:ee:09:05:58:68:99:7f:e1:72:e8: e0:eb:62:08:5a:8e:53:a3:52:a0:9d:27:2d:c4:18:55:17:ef: ab:98:e2:a9:28:d0:7a:98:05:e0:94:24:0b:a1:14:31:5e:da: 76:5f:76:ee:7e:79:b1:12:b3:3d:04:37:f1:82:73:2a:30:b6: d8:08:77:63 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WODcm312hHKcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YTIwMmY3YmUtMTA4Yi00Njk1LTlmMzctNWI5N2NiMTA1NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfYpk5Q08REilvEW1sWTt9PKipQCV3NjxIt1 jaDYzePKtOUZdNmdbHbQd3WlwcHQ6kKwXqJV7Wd7wnRR1Au0CZtD58sXuDmen3zY xhcZXdGvVFJZgt1eoAetYcYMo1Jb53l1BcNTce97sFFBHJE+YISkMOckQVBmSvNt bHvBhjsXaQBVb1Vzl+HXGc58+8lciwxQeC8e06RNCDTKJI9pb2fh4U/2G+V2MNHe EFMNsgZSUGSklTpcTYuM72bzrkAlVzgNfmS7AYvMZwMe9yabIqOhJlgDNYEi8lax LVPk5FXk8SEKSgMHtnYPGkSxT4O68v5JIPouKWoAdAIBoYvZaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLOdt67T+K1AhTVlzsoSrcDSztS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhODk5YjQtMzIxYS0z NzhhLWEyOWYtMzY0NjllNmFlMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASja5S+xAaz+1h//P8SqZXYCmz/p4XXn2skPRF DcJrFnIz5PJpOvNSn7wIbar2OoiOZMwUU8OzQEOuNlg3B1776v01YDiLykuxpPhW RYji95Nq9X5C9M69xPFT+3/8iAp3yaWYkUt9exl0mEq1aCPTWDah1RLT52pV5dJV f/rQ9VLBk6im3HNhG3stcWsYYdkj0fgIYzZnRGG2bhV7GlTJfDQwdavaNgNKvigT 1Rte35/ISVDuTisvCZ8uq+4JBVhomX/hcujg62IIWo5To1KgnSctxBhVF++rmOKp KNB6mAXglCQLoRQxXtp2X3bufnmxErM9BDfxgnMqMLbYCHdj -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:55 2026 by rpki-client