This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: arz+I0kO41eoj0+PSAoibeNUrpRUwthl8C9i468PYJU= Subject key identifier: AA:B2:DF:C3:C7:D0:EF:81:0B:69:6A:FB:8D:BB:49:00:6D:47:68:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBF991C70ADED3D71A4BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f9:91:c7:0a:de:d3:d7:1a:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2a189957-a6ed-4b5b-b20e-d2046739b0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:56:3f:e8:28:97:51:e1:99:3b:79:15:b4: 58:42:03:f5:97:40:13:72:e4:c1:b7:0a:b1:ff:d4: 5f:4b:19:d0:b9:a3:ea:ff:28:be:5f:ba:3c:f1:d7: b4:42:82:69:c3:9d:d4:43:57:34:e2:98:a7:aa:2b: 5f:d1:72:18:49:b3:ca:20:83:70:21:b6:0f:2c:a7: 17:f8:19:01:99:0b:fc:4f:c3:9c:10:64:45:66:2e: e8:c7:c4:19:54:56:79:b5:d3:ce:73:05:2a:57:48: 03:3b:53:35:35:14:54:21:2c:55:a1:e2:eb:7f:ce: 90:6c:0c:c9:85:e0:b4:57:62:57:0b:0e:7b:5e:cb: ab:51:5f:1c:8c:25:57:9e:9a:d4:b8:e6:2f:18:a4: fa:db:4b:d3:3d:de:e0:19:ff:e3:25:4e:6f:74:de: 4d:1d:55:87:bd:83:92:52:f0:2e:ba:62:ea:f5:f2: d0:17:77:be:53:4e:3b:d8:cd:fd:a4:b6:00:c9:0c: 42:a3:f4:f5:95:a7:0d:6c:bd:93:ed:6d:af:64:a4: 7b:d6:27:44:0a:bc:cd:bf:29:c0:5b:d8:05:20:e2: d9:c4:bd:b6:28:b0:da:d3:d9:a6:03:48:12:8e:ae: f3:f5:5c:3d:80:8f:1d:8d:a3:0f:cf:6d:5a:47:f8: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:DF:C3:C7:D0:EF:81:0B:69:6A:FB:8D:BB:49:00:6D:47:68:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:91:3c:7e:44:24:fa:1b:d6:bf:29:64:a1:0b:f3:86:01:ce: de:f1:d2:94:d4:f9:5c:c4:af:2e:31:0a:1a:d0:b8:06:02:89: 75:77:9f:f3:31:bf:07:5d:62:24:92:2e:b1:bd:77:22:fa:33: 9d:f8:41:14:13:8f:3b:9d:46:fb:89:39:e4:ae:fc:31:5b:96: d7:1e:d6:29:e7:bd:97:cf:ca:ee:e7:1f:8c:1b:02:f1:59:74: 76:66:05:9a:f4:ff:47:b8:b4:82:e4:4c:7b:d0:a4:49:fa:5e: 10:b5:50:b2:54:34:3c:ff:66:19:89:8b:31:09:ad:6f:b5:45: b4:88:ae:91:2d:5e:67:22:36:bf:27:f5:14:11:ec:6d:64:6e: 88:7f:10:3f:b0:ab:c3:9b:52:27:1a:19:6b:72:b5:6c:3a:42: c0:3b:70:f6:49:e8:da:a9:fa:e3:82:ce:4e:f5:1e:36:40:a7: 63:20:9b:55:7b:41:a0:4a:f7:02:31:d1:7c:89:37:e3:3e:b7: e4:94:73:8b:c1:3d:0e:d6:1f:d6:48:13:50:6a:19:fa:47:14: 15:d5:bd:f2:62:b6:63:25:20:61:6e:98:33:3c:e0:b0:63:45: d2:92:a4:cc:0e:85:34:d6:10:f3:ef:da:be:6c:f0:53:f2:b2: 19:f3:b2:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2/mRxwre09caS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmExODk5NTctYTZlZC00YjViLWIyMGUtZDIwNDY3MzliMGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12VWP+gol1HhmTt5FbRYQgP1l0ATcuTBtwqx /9RfSxnQuaPq/yi+X7o88de0QoJpw53UQ1c04pinqitf0XIYSbPKIINwIbYPLKcX +BkBmQv8T8OcEGRFZi7ox8QZVFZ5tdPOcwUqV0gDO1M1NRRUISxVoeLrf86QbAzJ heC0V2JXCw57XsurUV8cjCVXnprUuOYvGKT620vTPd7gGf/jJU5vdN5NHVWHvYOS UvAuumLq9fLQF3e+U0472M39pLYAyQxCo/T1lacNbL2T7W2vZKR71idECrzNvynA W9gFIOLZxL22KLDa09mmA0gSjq7z9Vw9gI8djaMPz21aR/ggkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqy38PH0O+BC2lq+427SQBtR2hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEaRPH5EJPob1r8pZKEL84YBzt7x0pTU+VzEry4xChrQuAYCiXV3 n/MxvwddYiSSLrG9dyL6M534QRQTjzudRvuJOeSu/DFbltce1innvZfPyu7nH4wb AvFZdHZmBZr0/0e4tILkTHvQpEn6XhC1ULJUNDz/ZhmJizEJrW+1RbSIrpEtXmci Nr8n9RQR7G1kboh/ED+wq8ObUicaGWtytWw6QsA7cPZJ6Nqp+uOCzk71HjZAp2Mg m1V7QaBK9wIx0XyJN+M+t+SUc4vBPQ7WH9ZIE1BqGfpHFBXVvfJitmMlIGFumDM8 4LBjRdKSpMwOhTTWEPPv2r5s8FPyshnzsm0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:00 2026 by rpki-client