This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa File: 396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa (raw, json) Hash identifier: 20hwlCY4hqhMyQTGZrKU2PP9Koh9maywODWu7HF3mxY= Subject key identifier: 97:A5:B4:AE:51:65:82:7B:2B:5D:26:AA:7A:A3:5B:40:5B:66:DA:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630DFEAA3EEA565D081A200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 40647 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:df:ea:a3:ee:a5:65:d0:81:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=ddf06c73-9388-4c84-923f-e233718eeb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:6a:6a:01:17:b3:7b:54:0c:d0:f3:f7:dd: 35:2d:2c:44:e6:69:f7:b9:35:95:2a:8f:d0:ba:62: 20:cc:30:8d:b8:2e:17:85:9f:f8:fd:7f:04:98:3e: 21:4b:60:e2:23:53:cd:08:53:cb:a3:7f:bd:dd:c9: 5c:1b:da:47:ec:77:6e:a9:62:3e:5c:68:40:2f:92: 24:70:fb:a5:b6:58:9e:86:59:02:bb:88:37:05:cb: c4:43:a7:c3:1f:49:36:36:94:81:1f:61:68:ce:07: 8e:28:5a:08:6d:5e:a2:ae:86:c1:32:13:39:7c:66: 62:a4:6d:8a:72:30:6c:8a:08:d6:df:3f:7a:79:94: 07:06:f7:89:97:f6:f4:64:61:19:ca:7b:33:6c:e5: d6:45:9f:7f:41:da:3b:88:1f:a4:fc:a5:fa:c7:b6: a5:07:40:f5:5c:b3:6b:f7:ad:ba:78:90:22:31:26: e9:9b:1c:09:c0:fd:d3:e1:b3:0e:22:73:96:8e:99: 7e:ae:e8:c9:dd:48:2a:f7:80:72:57:9f:da:ce:5d: 17:c6:c4:ea:a2:ee:4e:1f:43:81:66:38:40:f3:a3: b7:4d:0b:d4:e8:cf:4c:d3:2e:98:d3:c4:6d:b6:fb: f7:06:8e:b7:58:7b:be:73:78:bc:d2:1b:39:64:b6: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:B4:AE:51:65:82:7B:2B:5D:26:AA:7A:A3:5B:40:5B:66:DA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3a:36:d4:ca:ce:99:33:74:4c:0a:24:96:80:26:d0:25:5a: be:ef:42:bc:cd:ce:5c:2c:51:f8:0d:9d:5a:68:52:8a:af:65: b6:fe:6f:ea:2c:f7:1e:d7:53:ca:24:bf:bc:74:2f:50:1a:71: 7f:2b:06:51:cb:e3:5b:3e:7d:6d:c8:cd:f0:5e:e1:68:d7:29: ff:31:eb:37:63:86:50:9a:5f:11:cd:02:9a:c8:78:e8:b4:c9: cb:df:81:ae:e5:3f:99:e9:6b:82:55:f6:20:35:cd:e3:79:bf: c5:f5:0b:c9:28:5a:e8:fb:23:50:e8:2d:d1:75:7d:24:49:94: e5:e5:2a:5e:e0:ac:e8:79:b5:c3:99:2c:3e:f6:8e:35:3e:96: 88:a0:c4:75:3b:9b:5f:0f:84:ad:35:ba:35:b8:b8:e0:eb:f9: 7c:47:71:88:15:95:e5:b0:34:68:90:66:2c:8e:54:49:89:cd: aa:14:ed:b6:66:4d:c8:e5:aa:69:2e:64:e5:eb:12:76:0d:ae: 0b:4a:eb:df:45:ab:56:33:46:91:47:ee:94:9e:75:71:0e:5b: be:80:08:5b:90:a7:13:09:d5:6b:85:c1:16:50:ea:7b:4d:b4: 6e:a9:50:c7:89:a6:7c:46:15:4d:32:51:55:ce:4b:25:c9:9e: d0:45:d6:a6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMN/qo+6lZdCBogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZGRmMDZjNzMtOTM4OC00Yzg0LTkyM2YtZTIzMzcxOGVlYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NVqagEXs3tUDNDz9901LSxE5mn3uTWVKo/Q umIgzDCNuC4XhZ/4/X8EmD4hS2DiI1PNCFPLo3+93clcG9pH7HduqWI+XGhAL5Ik cPultliehlkCu4g3BcvEQ6fDH0k2NpSBH2FozgeOKFoIbV6irobBMhM5fGZipG2K cjBsigjW3z96eZQHBveJl/b0ZGEZynszbOXWRZ9/Qdo7iB+k/KX6x7alB0D1XLNr 9626eJAiMSbpmxwJwP3T4bMOInOWjpl+rujJ3Ugq94ByV5/azl0XxsTqou5OH0OB ZjhA86O3TQvU6M9M0y6Y08Rttvv3Bo63WHu+c3i80hs5ZLZVNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJeltK5RZYJ7K10mqnqjW0BbZtpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk2YTY5ZmEtYjE0Ni0z OGM1LThkMDMtZjdkZDBmYjk4ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhOjbUys6ZM3RMCiSWgCbQJVq+70K8zc5cLFH4 DZ1aaFKKr2W2/m/qLPce11PKJL+8dC9QGnF/KwZRy+NbPn1tyM3wXuFo1yn/Mes3 Y4ZQml8RzQKayHjotMnL34Gu5T+Z6WuCVfYgNc3jeb/F9QvJKFro+yNQ6C3RdX0k SZTl5Spe4KzoebXDmSw+9o41PpaIoMR1O5tfD4StNbo1uLjg6/l8R3GIFZXlsDRo kGYsjlRJic2qFO22Zk3I5appLmTl6xJ2Da4LSuvfRatWM0aRR+6UnnVxDlu+gAhb kKcTCdVrhcEWUOp7TbRuqVDHiaZ8RhVNMlFVzkslyZ7QRdam -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:13 2025 by rpki-client