This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa File: 2845693f-03a7-31df-95a9-5c15c210d138.roa (raw, json) Hash identifier: 3FTxG/I8dodpSAv1l9UYIAS3CvLd+sd+ILuRz+Sdirc= Subject key identifier: AA:DA:9D:6F:40:A9:B3:DF:E2:F8:45:4E:D0:71:6C:71:5D:A5:D9:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C14109836A39DFD067D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 36631 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:14:10:98:36:a3:9d:fd:06:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=4464f91a-e03b-49d2-a249-619210495e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:c8:49:09:b9:ea:25:b6:22:c5:52:35:8a: f9:b5:f7:ec:44:84:32:83:b4:a5:36:6b:a9:50:b7: e3:2e:e6:24:d1:14:dc:bc:72:20:3b:cb:4a:86:07: a0:d5:76:97:5d:4a:c7:bb:d7:9e:a9:ce:47:f6:9d: f4:53:e9:8d:a7:5e:c1:91:ea:39:af:a0:10:7a:ca: 15:34:f5:28:46:ad:0d:de:60:8a:e9:70:04:6e:ce: ad:c5:44:87:97:35:31:27:fc:72:bf:71:51:3f:e5: 99:3a:f5:16:f3:57:6b:12:42:7a:36:70:ed:fa:2c: 3d:f6:d6:da:f9:a9:41:ed:03:04:53:89:04:2c:47: 39:ac:a8:e6:36:96:84:51:ef:1d:f1:08:1c:79:f5: 91:25:83:b7:60:c3:e8:42:fa:ef:0c:fd:59:a1:8f: 83:03:db:bd:65:2d:a9:dd:b2:05:00:b3:57:e5:22: 1a:47:ed:cb:d0:b4:df:56:10:4f:95:c8:06:62:f6: 38:0d:df:7b:ea:4f:f0:ae:2c:e5:50:ea:45:b0:f8: ed:f0:c4:f0:81:92:e1:66:ea:3d:31:7b:1c:8d:c1: 99:4a:52:3c:32:93:78:91:06:9f:06:36:63:64:7a: 5e:17:46:b9:97:72:91:c2:4d:db:f8:de:9d:b4:51: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:9D:6F:40:A9:B3:DF:E2:F8:45:4E:D0:71:6C:71:5D:A5:D9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:76:6b:7b:a3:a6:df:04:d0:b9:17:e3:32:c7:0b:e4:d8:fa: e5:18:7f:ca:ff:b8:7f:0c:19:27:74:f0:4a:c7:92:bc:4f:d0: c7:9d:22:34:28:89:cc:e2:df:10:31:19:f2:c7:fc:01:83:4b: 88:b1:9e:06:11:5d:bf:d7:13:9f:87:f4:cc:cd:aa:7d:f8:4b: 65:12:49:07:0c:aa:25:cd:22:7d:e5:21:e9:06:ef:1d:18:f6: 84:85:97:91:a6:a4:8e:24:94:ed:60:7a:6d:6e:99:46:85:33: b9:1c:1a:12:48:3a:25:98:e6:61:57:f3:83:f4:36:55:48:2c: 24:29:e1:01:c5:e4:df:da:52:12:f5:34:94:7b:cd:a2:30:53: b9:92:7b:ac:62:7c:df:13:98:f5:7b:8e:c4:40:88:45:96:76: 95:f3:85:f2:3c:7a:70:df:9a:9c:5c:3b:14:13:9b:59:52:0a: 79:33:cb:78:b8:cd:c1:d9:45:ee:b3:86:71:a8:38:f0:37:87: 87:92:fa:c9:fe:8a:50:78:c0:4f:f4:21:f9:7f:60:f4:66:5f: 94:0b:3f:bc:4d:5e:45:2f:57:84:67:35:88:f0:ac:2a:98:4e: a6:18:01:8b:78:e1:35:76:9b:a5:f0:75:3d:7f:19:84:a8:87: 6f:2e:83:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBQQmDajnf0GfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk NDQ2NGY5MWEtZTAzYi00OWQyLWEyNDktNjE5MjEwNDk1ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gjISQm56iW2IsVSNYr5tffsRIQyg7SlNmup ULfjLuYk0RTcvHIgO8tKhgeg1XaXXUrHu9eeqc5H9p30U+mNp17Bkeo5r6AQesoV NPUoRq0N3mCK6XAEbs6txUSHlzUxJ/xyv3FRP+WZOvUW81drEkJ6NnDt+iw99tba +alB7QMEU4kELEc5rKjmNpaEUe8d8QgcefWRJYO3YMPoQvrvDP1ZoY+DA9u9ZS2p 3bIFALNX5SIaR+3L0LTfVhBPlcgGYvY4Dd976k/wrizlUOpFsPjt8MTwgZLhZuo9 MXscjcGZSlI8MpN4kQafBjZjZHpeF0a5l3KRwk3b+N6dtFGTXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKranW9AqbPf4vhFTtBxbHFdpdlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NTY5M2YtMDNhNy0z MWRmLTk1YTktNWMxNWMyMTBkMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAdmt7o6bfBNC5F+Myxwvk2PrlGH/K/7h/DBkn dPBKx5K8T9DHnSI0KInM4t8QMRnyx/wBg0uIsZ4GEV2/1xOfh/TMzap9+EtlEkkH DKolzSJ95SHpBu8dGPaEhZeRpqSOJJTtYHptbplGhTO5HBoSSDolmOZhV/OD9DZV SCwkKeEBxeTf2lIS9TSUe82iMFO5knusYnzfE5j1e47EQIhFlnaV84XyPHpw35qc XDsUE5tZUgp5M8t4uM3B2UXus4ZxqDjwN4eHkvrJ/opQeMBP9CH5f2D0Zl+UCz+8 TV5FL1eEZzWI8KwqmE6mGAGLeOE1dpul8HU9fxmEqIdvLoOi -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:23 2026 by rpki-client