This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa File: 2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa (raw, json) Hash identifier: VCUiNWIeGGrO07X+Mr2ZH/eKOZkBDdwNruZyyfWT/mE= Subject key identifier: 86:4A:1C:9B:F2:66:E6:E6:97:D6:31:A3:90:E9:61:DD:65:16:6C:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D162C0D556D56356745E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396572 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:62:c0:d5:56:d5:63:56:74:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=b19c23d3-26be-4323-91a4-82d2b2b8e07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:e0:c0:ca:d1:1c:65:c6:d6:b9:01:bc:49: b0:3b:1c:76:83:ec:fe:bd:98:6a:53:80:7d:13:ec: db:b5:7d:2f:9d:72:81:49:de:95:40:29:5a:de:f4: 23:64:b2:77:0d:a4:b5:09:92:0b:af:2a:1f:f1:5c: c7:9a:ab:8a:44:78:5d:e6:b5:7e:dd:6a:c7:73:27: 6a:85:4a:ae:3c:ae:6e:92:64:f3:3e:18:b5:f6:32: 7e:47:27:38:40:bb:86:af:1e:f0:c8:7c:d8:6b:93: af:aa:5b:4c:8b:cb:68:75:79:6b:6e:81:a5:7b:d9: 2c:67:ce:cf:4b:ff:30:8f:fc:a6:f1:f4:59:4e:65: 40:af:da:0c:cd:18:91:c3:c4:42:a4:56:6b:9c:9a: 68:ad:5a:b7:0f:d0:f2:bf:63:62:10:26:70:6e:17: c3:05:3b:db:a7:00:c9:d0:5a:dc:da:28:d8:b3:14: 61:bf:bf:46:d5:fe:dc:89:70:77:30:72:d4:60:1f: 7c:94:c7:4e:df:f7:3c:b9:45:cb:4d:05:5b:e5:dd: a4:81:81:4a:e7:4c:28:18:8d:29:79:b2:02:99:fc: 1b:82:c6:a2:8c:f5:0c:59:72:cd:54:19:fd:d6:05: 8f:e9:ed:1d:c4:16:51:74:fb:2e:cc:ed:fa:4a:cb: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4A:1C:9B:F2:66:E6:E6:97:D6:31:A3:90:E9:61:DD:65:16:6C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:40:db:67:83:fe:ea:d5:b6:a4:07:98:81:8d:c0:7b:ef:e1: d1:22:ef:02:26:96:3f:4a:6f:1d:c6:a8:d0:6e:4e:ec:14:d9: 75:99:1b:75:9d:7d:dd:20:89:af:13:6a:cb:37:22:7e:ec:b3: b5:39:f4:11:ff:21:41:b3:0c:88:05:cf:f2:82:89:5f:2c:8e: 39:77:43:b0:31:9c:0c:ec:83:97:44:84:fb:c3:77:90:c5:37: 7e:0f:14:0b:0d:f3:19:6b:f8:af:82:cc:4e:d8:73:40:f5:e3: a6:c0:eb:4e:91:4e:04:b3:3a:f0:12:a0:7b:88:e7:39:41:7e: 09:3c:1e:07:64:e6:53:0a:11:77:02:5e:35:ab:eb:7f:7a:df: 4d:57:90:76:52:dc:57:df:62:86:c5:41:1e:6f:b9:de:9b:2a: f9:e0:74:cb:89:a6:88:ed:fb:23:95:be:39:2c:8f:51:1c:44: 07:50:31:02:27:83:4d:29:e0:ec:28:a1:77:9d:c9:3c:19:85: b6:78:e5:6b:2d:d7:1f:d4:aa:02:37:1e:e8:29:02:76:d0:77: c1:24:33:52:1b:b5:eb:6d:a6:91:37:d7:ab:89:8e:cb:b8:11: 79:c2:45:c6:c4:2e:09:4b:3b:dc:87:30:cb:cd:83:dc:36:cb: d5:a6:c2:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WLA1VbVY1Z0XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YjE5YzIzZDMtMjZiZS00MzIzLTkxYTQtODJkMmIyYjhlMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo33gwMrRHGXG1rkBvEmwOxx2g+z+vZhqU4B9 E+zbtX0vnXKBSd6VQCla3vQjZLJ3DaS1CZILryof8VzHmquKRHhd5rV+3WrHcydq hUquPK5ukmTzPhi19jJ+Ryc4QLuGrx7wyHzYa5OvqltMi8todXlrboGle9ksZ87P S/8wj/ym8fRZTmVAr9oMzRiRw8RCpFZrnJporVq3D9Dyv2NiECZwbhfDBTvbpwDJ 0Frc2ijYsxRhv79G1f7ciXB3MHLUYB98lMdO3/c8uUXLTQVb5d2kgYFK50woGI0p ebICmfwbgsaijPUMWXLNVBn91gWP6e0dxBZRdPsuzO36SsvXWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIZKHJvyZubml9Yxo5DpYd1lFmzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU4YWZhMzYtMGUwYy0z NWE3LWE3ZTktMWUwYmYwYTE0YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3QNtng/7q1bakB5iBjcB77+HRIu8CJpY/Sm8d xqjQbk7sFNl1mRt1nX3dIImvE2rLNyJ+7LO1OfQR/yFBswyIBc/ygolfLI45d0Ow MZwM7IOXRIT7w3eQxTd+DxQLDfMZa/ivgsxO2HNA9eOmwOtOkU4EszrwEqB7iOc5 QX4JPB4HZOZTChF3Al41q+t/et9NV5B2UtxX32KGxUEeb7nemyr54HTLiaaI7fsj lb45LI9RHEQHUDECJ4NNKeDsKKF3nck8GYW2eOVrLdcf1KoCNx7oKQJ20HfBJDNS G7XrbaaRN9eriY7LuBF5wkXGxC4JSzvchzDLzYPcNsvVpsKA -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:26 2026 by rpki-client