This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa File: 2b829613-62cd-3ed2-8ad3-7b36febc6235.roa (raw, json) Hash identifier: rQlJWylTfsGQgso+3QvxAMDlxGAeeAFsRpRR8R/R2jk= Subject key identifier: C6:60:89:66:22:82:DC:14:9A:37:EC:CA:1D:C3:C6:F2:B6:81:5F:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBBED01413601E13D29EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396565 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:be:d0:14:13:60:1e:13:d2:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=822af4b1-188d-4902-9983-6cc519fa9aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:4e:76:02:71:fb:a1:69:88:b7:dc:61:40: c3:2a:3d:4c:40:69:13:40:00:e1:55:3d:45:74:39: e8:71:ca:e6:44:cb:c6:f7:b7:b4:dc:51:cb:e1:f0: 7f:97:0c:f2:dd:71:9f:20:8e:01:d3:e5:5d:88:ac: ce:39:6c:5b:61:20:08:4a:f6:7a:7d:55:d5:21:28: e1:c8:2f:62:a3:46:06:4e:16:b7:f1:53:5b:e2:df: 7c:38:1d:96:0f:f7:f7:62:f3:3c:ac:5f:97:32:a8: 6a:d9:8f:e2:80:d2:45:d7:8a:1d:06:c3:8a:5c:f0: 04:27:28:00:a9:b3:b1:d0:c5:3b:30:78:ab:37:88: fe:45:d5:f9:62:63:ba:35:51:a5:e6:60:aa:30:48: e3:35:db:a8:96:9d:4d:83:1d:ae:75:8a:d7:ec:0c: dd:2e:40:12:3a:b8:4e:8b:f6:b0:ed:e1:be:94:ba: 25:fe:48:76:28:ff:bb:94:c2:33:7f:85:c3:72:47: f6:8b:48:6e:f5:42:4f:58:1e:d6:18:8e:19:8c:67: 1a:8c:97:f9:df:5b:68:c2:39:95:b6:a7:c2:ad:63: 27:8c:47:88:00:d6:1d:c8:dd:83:80:d0:d1:2c:91: 57:0e:e8:47:e2:ca:c5:1a:21:27:d5:68:56:35:8d: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:89:66:22:82:DC:14:9A:37:EC:CA:1D:C3:C6:F2:B6:81:5F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b6:21:9a:98:10:21:7c:82:96:e0:09:69:bd:d7:1a:4f:7c: 1b:64:0c:d5:01:1f:6e:2a:50:de:cf:79:5f:9d:d1:e0:ef:c7: a7:c7:da:59:5c:f5:17:3b:45:f3:48:a9:f4:e3:b4:5e:a2:c4: 50:ea:ef:f8:f6:fe:63:49:fd:27:e8:95:0f:fb:72:12:c2:48: 5b:2e:38:b4:83:99:d7:d7:82:72:2d:14:59:79:4d:90:ad:63: 84:71:27:44:da:ed:16:ba:66:01:f7:d7:a7:d4:f6:8e:7e:d0: bd:59:5c:09:ea:d7:e7:b3:8d:5b:06:bc:f5:dc:89:ee:71:c8: 9e:5c:4a:4c:92:e9:7e:b9:ea:62:52:db:d3:aa:7c:63:95:20: 1e:65:1e:8c:ce:a4:f3:92:48:67:14:7d:bd:18:68:f8:62:8e: 37:90:01:b3:ca:60:df:7d:cb:be:ec:15:48:96:98:35:4b:06: 37:91:14:08:46:c6:b8:ba:da:c6:31:10:d6:73:d7:5a:60:fd: 72:3e:01:ae:54:95:c1:5a:75:4d:bc:91:56:da:db:84:f2:10: 77:00:a4:4a:bb:09:1f:bd:85:65:5c:5b:9b:39:16:18:6f:c9: 8d:5f:7b:88:d1:4f:49:bb:ea:09:a9:01:51:fe:5c:ce:da:08: 92:8e:6b:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC277QFBNgHhPSnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODIyYWY0YjEtMTg4ZC00OTAyLTk5ODMtNmNjNTE5ZmE5YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng1OdgJx+6FpiLfcYUDDKj1MQGkTQADhVT1F dDnoccrmRMvG97e03FHL4fB/lwzy3XGfII4B0+VdiKzOOWxbYSAISvZ6fVXVISjh yC9io0YGTha38VNb4t98OB2WD/f3YvM8rF+XMqhq2Y/igNJF14odBsOKXPAEJygA qbOx0MU7MHirN4j+RdX5YmO6NVGl5mCqMEjjNduolp1Ngx2udYrX7AzdLkASOrhO i/aw7eG+lLol/kh2KP+7lMIzf4XDckf2i0hu9UJPWB7WGI4ZjGcajJf531towjmV tqfCrWMnjEeIANYdyN2DgNDRLJFXDuhH4srFGiEn1WhWNY0dwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZgiWYigtwUmjfsyh3DxvK2gV81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4Mjk2MTMtNjJjZC0z ZWQyLThhZDMtN2IzNmZlYmM2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGy2IZqYECF8gpbgCWm91xpPfBtkDNUBH24qUN7PeV+d0eDvx6fH 2llc9Rc7RfNIqfTjtF6ixFDq7/j2/mNJ/SfolQ/7chLCSFsuOLSDmdfXgnItFFl5 TZCtY4RxJ0Ta7Ra6ZgH316fU9o5+0L1ZXAnq1+ezjVsGvPXcie5xyJ5cSkyS6X65 6mJS29OqfGOVIB5lHozOpPOSSGcUfb0YaPhijjeQAbPKYN99y77sFUiWmDVLBjeR FAhGxri62sYxENZz11pg/XI+Aa5UlcFadU28kVba24TyEHcApEq7CR+9hWVcW5s5 FhhvyY1fe4jRT0m76gmpAVH+XM7aCJKOa+w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:36 2026 by rpki-client