This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa File: 2d3c952d-52b5-3ac0-943c-87eb106ef029.roa (raw, json) Hash identifier: NjngZEh6m409AfsnNxOUDMly8IXE+lKoAs37CnWrkwY= Subject key identifier: 90:46:C1:70:02:FA:43:55:A0:E6:84:E4:EA:F4:7D:F5:BB:F4:B2:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16EA17A73710B18961EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 36630 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:6e:a1:7a:73:71:0b:18:96:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=c5fc38b1-90c1-4274-a93b-22869ca9bc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:4a:b1:be:93:18:ff:1d:37:d4:7a:a7:ff: 22:17:55:23:74:7f:d8:44:7d:ef:9f:f7:2d:07:0e: 80:9d:69:b9:e5:d1:d6:a1:93:14:29:8d:86:ac:ad: 93:e1:2c:48:88:d9:78:18:cc:55:8a:78:78:8d:d8: 75:3d:46:13:1b:33:9a:a2:98:7b:16:e9:18:e4:a3: 10:f1:ac:59:62:e6:d1:9f:5c:35:58:fc:e0:01:05: 99:5f:be:71:57:a6:20:46:b2:f8:9f:d1:5a:65:b3: 7a:a3:3b:9c:bb:fb:d6:42:4d:58:31:eb:6c:f9:9f: 39:a6:d9:43:d0:70:b1:ff:0d:29:e3:8b:41:9a:ff: c2:f4:08:1c:22:58:48:b6:34:c8:12:11:64:ca:4d: f5:36:28:a1:97:e8:0f:85:00:4a:27:b0:07:7b:19: 82:da:8e:7c:3b:57:1d:4c:46:a2:ec:da:e6:cb:d4: 17:5a:02:7d:0a:79:09:e1:d5:7c:0a:aa:0c:b4:d6: 69:99:96:48:7d:ce:ac:46:86:65:43:3b:4a:a0:f6: 23:04:c0:fb:d6:3b:16:b9:41:86:04:15:f1:a8:20: 0b:dd:55:49:aa:cf:91:93:32:77:c7:bb:88:95:cd: 23:ee:f0:aa:ca:32:a2:0d:f4:a8:f4:78:5f:91:2d: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:46:C1:70:02:FA:43:55:A0:E6:84:E4:EA:F4:7D:F5:BB:F4:B2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:78:93:9d:84:5f:65:97:d4:eb:48:8e:4e:87:e5:92:c6:31: 45:ac:38:7a:ef:39:73:d6:9e:67:0f:bb:e7:40:d4:7d:3a:93: b9:c1:44:09:c5:23:34:80:68:59:bf:d3:49:26:8d:d0:b7:c5: ab:7d:00:3b:b8:ea:31:b4:bb:36:51:ef:b2:46:35:cd:36:d3: 98:83:1d:f6:95:47:e1:b8:1b:02:fa:38:d4:44:92:65:cb:64: 53:ae:ad:62:8a:ab:56:e3:5f:82:79:ac:81:3c:26:a7:2f:e4: e0:34:e9:f6:b1:c3:0b:d5:a3:8e:95:b2:49:f7:9c:cc:f7:47: 8f:20:d2:31:5f:67:7f:36:8e:b3:23:81:e8:37:fc:9d:81:14: e2:b8:5c:d0:6a:a0:e2:3f:c2:34:1f:58:3e:de:b6:dc:2e:39: 2e:28:31:d9:6e:e6:dd:2f:82:f4:d4:cb:5a:95:90:f1:ab:cc: 15:bb:f1:5b:3c:e2:2c:41:61:2b:9e:64:f3:cc:e1:24:98:dc: 19:fb:e9:46:e5:1c:92:f4:fa:5f:e4:fa:b5:30:0a:62:fd:57: da:ca:66:75:a7:df:e4:4b:4d:01:28:b3:af:09:50:34:2c:bf: 9d:99:f0:4e:e5:f8:7b:1f:b5:22:13:79:58:18:36:4f:93:6d: a6:59:4a:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0W6henNxCxiWHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YzVmYzM4YjEtOTBjMS00Mjc0LWE5M2ItMjI4NjljYTliYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIBKsb6TGP8dN9R6p/8iF1UjdH/YRH3vn/ct Bw6AnWm55dHWoZMUKY2GrK2T4SxIiNl4GMxVinh4jdh1PUYTGzOaoph7FukY5KMQ 8axZYubRn1w1WPzgAQWZX75xV6YgRrL4n9FaZbN6ozucu/vWQk1YMets+Z85ptlD 0HCx/w0p44tBmv/C9AgcIlhItjTIEhFkyk31Niihl+gPhQBKJ7AHexmC2o58O1cd TEai7Nrmy9QXWgJ9CnkJ4dV8CqoMtNZpmZZIfc6sRoZlQztKoPYjBMD71jsWuUGG BBXxqCAL3VVJqs+RkzJ3x7uIlc0j7vCqyjKiDfSo9HhfkS3NSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJBGwXAC+kNVoOaE5Or0ffW79LI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQzYzk1MmQtNTJiNS0z YWMwLTk0M2MtODdlYjEwNmVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjeJOdhF9ll9TrSI5Oh+WSxjFFrDh67zlz1p5n D7vnQNR9OpO5wUQJxSM0gGhZv9NJJo3Qt8WrfQA7uOoxtLs2Ue+yRjXNNtOYgx32 lUfhuBsC+jjURJJly2RTrq1iiqtW41+CeayBPCanL+TgNOn2scML1aOOlbJJ95zM 90ePINIxX2d/No6zI4HoN/ydgRTiuFzQaqDiP8I0H1g+3rbcLjkuKDHZbubdL4L0 1MtalZDxq8wVu/FbPOIsQWErnmTzzOEkmNwZ++lG5RyS9Ppf5Pq1MApi/VfaymZ1 p9/kS00BKLOvCVA0LL+dmfBO5fh7H7UiE3lYGDZPk22mWUoh -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:46 2026 by rpki-client