This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa File: 25320c62-7dd7-391a-a4ee-859cec9e5768.roa (raw, json) Hash identifier: QmR/fnL9cqjexKzXpvYaE8ULrQZTAfIe5F6z11tNGKY= Subject key identifier: 70:2C:5A:F3:8F:92:C2:3A:D1:6A:86:7E:73:84:44:D9:C7:29:D6:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBC0D207D88E3C1FE0A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396552 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c0:d2:07:d8:8e:3c:1f:e0:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1cfe732c-75bc-4671-b2b3-6c66a2f0f9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:92:8f:45:43:4a:30:46:04:c9:41:97:d6: 4d:a0:a5:ee:04:2b:ba:ef:c7:f7:2e:bb:18:ca:9c: 49:48:99:15:3f:c5:dd:99:07:ab:e3:18:25:af:6e: c3:13:20:f2:d1:0a:14:90:da:e4:2c:a1:79:96:39: 1f:d0:46:48:4f:65:9f:11:fb:37:75:01:bd:23:92: 25:2d:ce:73:46:15:20:60:2d:ea:bf:69:0b:2e:28: b7:f2:11:0a:b4:91:b1:1d:dd:0b:c5:11:20:e0:72: 20:71:39:15:ec:b0:6e:b0:cf:cd:fc:0e:b3:4d:7e: 63:36:85:02:40:aa:2d:a3:86:56:d1:63:b5:8a:16: c7:bb:42:24:99:92:38:f5:9b:e9:ee:24:ec:c4:a7: 78:62:e5:7d:6d:c4:24:b6:ff:ee:14:5d:61:e5:22: 2f:4f:e3:c5:22:f3:6b:1b:b8:53:9f:1e:2b:69:f9: a6:24:b2:a1:cf:d6:a8:f2:bd:9b:5a:a2:71:31:17: 79:da:41:01:eb:6a:12:d1:64:ed:93:31:82:f7:6c: 1a:76:e6:ff:47:a5:e7:ba:f8:02:bc:2c:8c:96:8d: 05:b3:2d:84:fc:32:cf:62:a1:58:82:6e:94:fc:17: a6:1a:c4:d5:83:ee:73:4d:4d:3e:2d:d5:55:53:80: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:5A:F3:8F:92:C2:3A:D1:6A:86:7E:73:84:44:D9:C7:29:D6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8f:34:45:e3:4c:db:ac:ef:d8:f6:02:8d:62:16:92:c4:6f: 20:73:3a:55:62:49:33:02:2f:06:25:4f:98:1f:23:c3:68:ee: d4:10:95:95:f7:29:92:fd:3f:8f:c4:5a:13:b7:e0:30:68:07: c2:00:3f:e8:54:20:57:2b:4e:c5:5d:68:59:4a:b5:c6:cb:38: 83:81:20:a9:63:ad:d7:31:ae:65:ba:e1:3a:4f:88:b6:26:f8: bb:0c:43:45:32:64:b0:8d:87:af:33:e2:fa:50:8a:1b:32:79: 35:eb:02:a8:2e:d3:b9:28:ce:9a:10:64:fb:98:e1:df:9b:b8: 76:cc:c8:0d:83:dc:0a:a6:5e:25:fe:fe:b3:88:1e:fd:cb:f9: a5:3a:5d:8d:5c:1e:b0:dc:a9:a5:32:94:8f:be:86:eb:5f:1f: e0:80:5f:81:7a:1b:d9:89:23:e4:cb:ee:5e:10:44:69:fc:27: 81:b8:9b:c5:70:fe:b7:2e:67:7c:72:56:1c:df:36:08:ba:13: 76:67:52:ca:80:ea:aa:76:dc:29:b3:45:ca:8b:8c:cd:04:0d: 33:f4:3f:f0:84:b9:a9:85:1d:bf:ec:3f:72:91:f3:b4:1d:08: cb:f0:ed:ac:d1:79:36:e3:62:80:58:c5:44:02:3d:5c:db:18: bc:7d:2e:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC28DSB9iOPB/gpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWNmZTczMmMtNzViYy00NjcxLWIyYjMtNmM2NmEyZjBmOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWSj0VDSjBGBMlBl9ZNoKXuBCu678f3LrsY ypxJSJkVP8XdmQer4xglr27DEyDy0QoUkNrkLKF5ljkf0EZIT2WfEfs3dQG9I5Il Lc5zRhUgYC3qv2kLLii38hEKtJGxHd0LxREg4HIgcTkV7LBusM/N/A6zTX5jNoUC QKoto4ZW0WO1ihbHu0IkmZI49Zvp7iTsxKd4YuV9bcQktv/uFF1h5SIvT+PFIvNr G7hTnx4rafmmJLKhz9ao8r2bWqJxMRd52kEB62oS0WTtkzGC92wadub/R6XnuvgC vCyMlo0Fsy2E/DLPYqFYgm6U/BemGsTVg+5zTU0+LdVVU4BOXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAsWvOPksI60WqGfnOERNnHKdZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUzMjBjNjItN2RkNy0z OTFhLWE0ZWUtODU5Y2VjOWU1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHyPNEXjTNus79j2Ao1iFpLEbyBzOlViSTMCLwYlT5gfI8No7tQQ lZX3KZL9P4/EWhO34DBoB8IAP+hUIFcrTsVdaFlKtcbLOIOBIKljrdcxrmW64TpP iLYm+LsMQ0UyZLCNh68z4vpQihsyeTXrAqgu07kozpoQZPuY4d+buHbMyA2D3Aqm XiX+/rOIHv3L+aU6XY1cHrDcqaUylI++hutfH+CAX4F6G9mJI+TL7l4QRGn8J4G4 m8Vw/rcuZ3xyVhzfNgi6E3ZnUsqA6qp23CmzRcqLjM0EDTP0P/CEuamFHb/sP3KR 87QdCMvw7azReTbjYoBYxUQCPVzbGLx9LiQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:16 2026 by rpki-client