This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa File: 2b8d580d-1adf-3325-96ec-121ffd843302.roa (raw, json) Hash identifier: OO3nwrV5Mon+2ygfk8zi4ct8t2wdze+pjOcvnEeez8w= Subject key identifier: 2D:86:40:D8:5D:84:F0:34:E7:EB:99:92:12:76:95:40:D4:E5:1A:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16A2AB3FACFF7B930AD20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396599 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:6a:2a:b3:fa:cf:f7:b9:30:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=db215cd8-efcf-4dcd-ad2f-1affbbc2de68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:6d:88:09:b2:7a:67:4c:f4:f6:27:fb:7d: 34:e7:bb:75:95:8f:6c:c8:8c:e3:e0:c7:3c:df:ea: a4:3a:da:2f:14:de:7c:ad:22:86:0c:ac:f9:54:95: bf:40:52:df:49:37:d6:b6:c9:9d:db:88:6b:3e:57: 29:f1:8b:3c:0c:c8:9a:f9:a3:8d:ba:41:1d:4a:e5: e1:d7:ca:20:29:2f:e2:2b:06:2c:bc:65:29:93:8d: 40:e6:f2:ff:2b:4e:08:8c:48:0b:6c:1f:a6:a6:b3: 24:e9:22:42:0b:23:0b:d7:84:55:71:8c:ff:cf:54: a4:dd:9c:58:20:1e:2e:c3:f5:3e:0f:b0:29:32:17: b1:4c:14:b4:ad:68:54:22:3a:0d:5c:f6:32:a2:b3: d6:6c:f5:f8:98:bb:0a:0c:56:ec:d9:92:c6:d5:e9: db:42:25:a8:3b:3b:a5:3e:57:a4:36:e7:4d:22:9e: fd:ff:e3:33:a1:c5:b5:a3:4d:d2:9f:7f:04:5d:0b: 37:2f:99:4f:f2:41:f8:8a:52:69:07:27:b8:cc:b1: 8a:14:52:92:89:7b:46:24:89:c9:b6:c4:0f:2d:51: 22:90:c5:ec:a0:ca:63:f8:0f:cb:51:71:e3:07:3b: f7:d9:98:eb:6a:6a:2e:b7:11:76:af:40:f6:cb:bf: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:40:D8:5D:84:F0:34:E7:EB:99:92:12:76:95:40:D4:E5:1A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ff:db:76:04:ce:47:44:de:36:ca:3a:77:6b:37:a4:37:34: 89:6b:f4:7b:e9:d3:32:71:3c:9a:fa:15:12:0f:d7:d2:d6:71: 0f:a7:eb:ad:a9:52:d8:42:e5:e6:41:fc:da:d7:c0:24:15:a1: ad:1e:9e:b1:07:ad:ef:dc:41:c2:96:0b:86:a2:bc:39:56:23: cd:3a:96:5f:d1:1e:11:d6:a0:23:95:4a:63:be:ed:1f:1b:04: 90:ee:41:d9:ea:70:3e:40:37:3f:ab:04:ff:b5:51:ea:57:10: 0a:6d:01:a8:ef:ad:a1:3b:dc:86:95:68:a8:3f:43:82:aa:f6: 91:07:c7:0f:65:65:bb:6c:72:97:40:14:4a:01:d1:7e:9a:9c: 90:e5:bd:c1:66:ca:75:82:25:48:0d:6c:f7:59:b0:47:37:a7: ca:1d:da:4e:be:14:09:69:91:d9:07:5b:d1:23:29:8a:be:9c: 89:d8:f5:e3:b6:e9:58:5d:07:89:1a:c6:04:3c:9e:cd:7d:cc: b6:67:45:f1:af:05:62:b0:32:9d:b4:b4:2f:fb:4c:df:f2:13: 95:de:d0:e8:21:75:db:7c:74:f2:76:9d:d9:a9:d4:d4:9d:b1: 5c:0a:42:cc:77:c1:e4:a6:06:e6:9f:15:63:77:15:1f:26:2f: c5:59:3e:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0Woqs/rP97kwrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZGIyMTVjZDgtZWZjZi00ZGNkLWFkMmYtMWFmZmJiYzJkZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt81tiAmyemdM9PYn+30057t1lY9syIzj4Mc8 3+qkOtovFN58rSKGDKz5VJW/QFLfSTfWtsmd24hrPlcp8Ys8DMia+aONukEdSuXh 18ogKS/iKwYsvGUpk41A5vL/K04IjEgLbB+mprMk6SJCCyML14RVcYz/z1Sk3ZxY IB4uw/U+D7ApMhexTBS0rWhUIjoNXPYyorPWbPX4mLsKDFbs2ZLG1enbQiWoOzul PlekNudNIp79/+MzocW1o03Sn38EXQs3L5lP8kH4ilJpBye4zLGKFFKSiXtGJInJ tsQPLVEikMXsoMpj+A/LUXHjBzv32ZjramoutxF2r0D2y7/2zwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC2GQNhdhPA05+uZkhJ2lUDU5RquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4ZDU4MGQtMWFkZi0z MzI1LTk2ZWMtMTIxZmZkODQzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAk/9t2BM5HRN42yjp3azekNzSJa/R76dMycTya +hUSD9fS1nEPp+utqVLYQuXmQfza18AkFaGtHp6xB63v3EHClguGorw5ViPNOpZf 0R4R1qAjlUpjvu0fGwSQ7kHZ6nA+QDc/qwT/tVHqVxAKbQGo762hO9yGlWioP0OC qvaRB8cPZWW7bHKXQBRKAdF+mpyQ5b3BZsp1giVIDWz3WbBHN6fKHdpOvhQJaZHZ B1vRIymKvpyJ2PXjtulYXQeJGsYEPJ7Nfcy2Z0XxrwVisDKdtLQv+0zf8hOV3tDo IXXbfHTydp3ZqdTUnbFcCkLMd8HkpgbmnxVjdxUfJi/FWT4k -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:22 2026 by rpki-client