This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: eHUnWLg1EkfLBtClNaoECbXhBZJ54ycgTOD7U6JMsAk= Subject key identifier: 64:67:02:DC:0B:FC:BB:BB:66:59:BC:BD:A8:85:CA:36:64:C8:33:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBE2F98B801871A32DE7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e2:f9:8b:80:18:71:a3:2d:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2d22db61-14a3-47bf-aa83-2a9dcfd5ca67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:f7:77:c8:1a:84:17:33:f7:76:bc:e5:ca: a8:ed:e0:7f:2c:39:ea:00:ca:7f:75:22:52:5a:81: 13:68:17:b8:a6:be:b8:6a:0a:25:6a:e4:57:df:3b: 4f:d4:f2:55:31:13:63:d8:95:56:18:37:d7:f2:fe: d0:5e:19:e2:ac:30:ac:bc:1d:fe:c4:90:f5:06:58: 33:32:5d:8d:d4:c6:5f:37:cd:26:a1:c4:1a:7d:a0: e3:96:32:48:84:cc:45:9d:8a:18:71:f0:0b:ba:d2: 95:90:fd:dc:fb:fb:f1:fd:60:8d:8a:d0:53:19:65: f6:af:c2:5e:cb:dc:9e:75:9e:b2:37:48:08:d9:4b: 67:8d:10:d8:dd:4e:20:57:be:88:57:af:d3:25:ee: 59:4a:19:7a:b5:4c:ba:8f:d0:7b:85:c2:fa:5f:82: 95:ae:ff:1f:cf:46:03:ab:09:d5:36:74:8b:f1:1f: 84:2e:5e:71:a6:84:20:d9:6b:70:b1:97:e4:11:7b: 94:99:c5:e0:cf:5f:b7:fb:c9:85:7a:95:e9:87:35: 61:76:6b:24:c3:62:b8:74:36:9d:78:6d:b3:fc:7e: a6:32:48:01:bb:99:49:93:41:3f:d7:ac:04:33:02: fa:6f:09:f2:16:40:e8:df:84:50:ac:db:8c:3a:3d: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:02:DC:0B:FC:BB:BB:66:59:BC:BD:A8:85:CA:36:64:C8:33:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f3:a3:d8:5e:d3:0e:e8:61:da:66:b5:05:a5:80:f1:9e:89: bf:6b:4d:9c:95:9a:56:fc:b3:d4:8e:f7:74:e2:0a:2e:bf:10: 15:83:96:27:f8:0f:8b:eb:1b:43:69:f3:32:07:5b:0a:76:6c: 4c:e8:91:49:0b:b0:49:c5:d2:a4:d5:dd:af:58:e0:29:91:a2: 5c:5f:52:3a:c4:b7:2c:18:3a:74:03:b4:04:3e:21:d9:5a:45: 93:13:6c:78:20:49:ba:a0:ec:e3:76:c1:0a:cc:e2:cf:5f:b1: 63:6e:55:f6:21:25:f1:62:cd:85:03:f7:34:03:6d:94:69:0d: 92:ef:ea:1d:c5:47:af:c3:5c:ea:44:45:f7:99:62:39:05:bd: 66:23:d3:4d:fc:5d:d4:b7:ab:bd:d2:07:e3:38:9e:08:0a:99: 8c:8f:f5:cf:9a:27:d2:32:28:eb:94:a1:6e:86:58:80:85:c2: 66:10:c0:01:7b:db:72:09:ba:3c:39:f8:bf:ff:1e:a9:92:84: f0:9f:22:d6:1c:53:e4:20:8d:64:5a:d2:44:00:e3:48:84:07: 28:71:75:ce:2e:ab:a6:c8:b1:fe:56:48:6e:97:db:23:30:5a: 90:6c:60:03:45:cf:46:c3:bb:2c:b4:7f:ed:e1:9d:18:6c:d4: fc:cb:f4:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2+L5i4AYcaMt58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmQyMmRiNjEtMTRhMy00N2JmLWFhODMtMmE5ZGNmZDVjYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHv3d8gahBcz93a85cqo7eB/LDnqAMp/dSJS WoETaBe4pr64agolauRX3ztP1PJVMRNj2JVWGDfX8v7QXhnirDCsvB3+xJD1Blgz Ml2N1MZfN80mocQafaDjljJIhMxFnYoYcfALutKVkP3c+/vx/WCNitBTGWX2r8Je y9yedZ6yN0gI2UtnjRDY3U4gV76IV6/TJe5ZShl6tUy6j9B7hcL6X4KVrv8fz0YD qwnVNnSL8R+ELl5xpoQg2WtwsZfkEXuUmcXgz1+3+8mFepXphzVhdmskw2K4dDad eG2z/H6mMkgBu5lJk0E/16wEMwL6bwnyFkDo34RQrNuMOj1BZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRnAtwL/Lu7Zlm8vaiFyjZkyDOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDzo9he0w7oYdpmtQWlgPGeib9rTZyVmlb8s9SO93TiCi6/EBWD lif4D4vrG0Np8zIHWwp2bEzokUkLsEnF0qTV3a9Y4CmRolxfUjrEtywYOnQDtAQ+ IdlaRZMTbHggSbqg7ON2wQrM4s9fsWNuVfYhJfFizYUD9zQDbZRpDZLv6h3FR6/D XOpERfeZYjkFvWYj0038XdS3q73SB+M4nggKmYyP9c+aJ9IyKOuUoW6GWICFwmYQ wAF723IJujw5+L//HqmShPCfItYcU+QgjWRa0kQA40iEByhxdc4uq6bIsf5WSG6X 2yMwWpBsYANFz0bDuyy0f+3hnRhs1PzL9Mk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:03 2026 by rpki-client