This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa File: 3df4436b-cf8d-3938-a752-30d9d66f0d80.roa (raw, json) Hash identifier: CErItxLGhqsNmihw8l4ySWA+CKNqKh8uXCD5dOCBEiA= Subject key identifier: 68:0A:95:68:AD:2C:A1:3F:EE:FF:08:AF:EC:46:C9:D6:34:C6:5B:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D163A627B982FA6695D900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396611 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:63:a6:27:b9:82:fa:66:95:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=06db5b2e-5edc-4332-a94a-6f71cb3a6a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:2a:0f:e2:27:3c:8c:02:46:f6:be:6c:c9: 5d:89:84:59:62:c9:62:eb:fc:be:c8:fc:47:0e:b3: bd:9d:de:b0:d7:d8:8b:f4:b9:33:ae:26:7d:32:8b: 23:87:68:eb:20:0c:ee:9d:89:c9:26:99:e9:51:da: b5:10:15:33:df:68:b9:15:03:85:e1:84:37:54:00: ee:49:a5:cc:49:b9:fb:0e:35:e5:32:2f:35:e0:97: 57:06:64:77:27:39:b6:05:ea:40:8d:79:e9:94:97: dd:b1:9d:9d:9e:98:e7:b1:1b:60:81:29:81:16:a9: 1d:3e:95:f7:c1:21:2f:b3:d1:3c:16:5b:f7:4b:a0: 1c:84:51:14:38:12:31:39:c7:9a:d4:f0:1f:92:36: e4:c9:f8:27:9e:2f:20:ee:6a:26:b5:d7:6d:b8:87: 68:78:97:1e:a6:32:e2:9a:77:c5:11:4c:ca:35:08: 98:94:67:9d:9a:0a:8e:6e:c1:63:4e:45:a0:6c:0b: 4e:ee:17:3c:aa:b1:63:88:d6:e0:58:89:3a:30:2c: a7:44:2e:62:b5:fe:ba:56:8a:d4:5a:91:7f:71:3e: f3:c3:f6:93:86:c7:d0:ac:68:42:00:6d:8e:74:20: 3f:1e:7b:62:c9:60:3d:70:fc:3c:0c:db:7f:29:8f: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:95:68:AD:2C:A1:3F:EE:FF:08:AF:EC:46:C9:D6:34:C6:5B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b5:df:d7:82:5c:d9:b0:b0:f1:0d:3c:d2:45:a7:fc:9f:7c: 15:03:3f:49:2f:0b:d2:9b:a7:89:9a:06:06:0b:85:8a:89:01: b4:d8:f1:c9:28:28:87:88:9f:13:ac:4e:85:f3:12:1f:b8:b7: 51:79:63:64:7c:90:eb:00:5c:3f:e0:ab:4b:d6:5b:c0:8a:94: ba:5a:e1:92:4d:58:b3:b5:27:50:99:c0:1b:6b:2b:12:92:8f: 0d:b8:bb:8a:fd:12:6a:55:29:e0:c1:68:98:ab:64:02:63:94: d7:0f:25:9d:90:7f:5d:c0:85:ed:fa:86:52:f7:99:a9:61:05: 63:0a:1b:e5:8f:9f:42:2b:56:7f:b1:42:29:32:b9:1e:fa:86: 73:b9:18:37:9f:16:f4:c0:bd:15:b5:b1:2d:d7:c6:82:55:ed: fa:11:58:19:4a:d8:28:25:cf:b9:66:52:a5:09:cc:20:d6:bf: 66:83:c1:02:a2:b8:1e:a1:ab:0c:26:1f:34:3d:65:9a:b6:16: f5:83:3d:45:b0:ba:21:ad:1c:58:63:f5:79:e2:4a:4c:d0:ab: a4:ff:d4:19:ad:1b:5a:8f:7a:90:1f:c5:23:9f:0b:5b:36:1e: 45:8b:1e:41:e3:91:e5:54:0c:de:ab:35:3a:58:81:76:ee:54: ba:46:8a:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WOmJ7mC+maV2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDZkYjViMmUtNWVkYy00MzMyLWE5NGEtNmY3MWNiM2E2YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon0qD+InPIwCRva+bMldiYRZYsli6/y+yPxH DrO9nd6w19iL9LkzriZ9Mosjh2jrIAzunYnJJpnpUdq1EBUz32i5FQOF4YQ3VADu SaXMSbn7DjXlMi814JdXBmR3Jzm2BepAjXnplJfdsZ2dnpjnsRtggSmBFqkdPpX3 wSEvs9E8Flv3S6AchFEUOBIxOcea1PAfkjbkyfgnni8g7momtddtuIdoeJcepjLi mnfFEUzKNQiYlGedmgqObsFjTkWgbAtO7hc8qrFjiNbgWIk6MCynRC5itf66VorU WpF/cT7zw/aThsfQrGhCAG2OdCA/HntiyWA9cPw8DNt/KY/zhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGgKlWitLKE/7v8Ir+xGydY0xluUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNDQzNmItY2Y4ZC0z OTM4LWE3NTItMzBkOWQ2NmYwZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCtd/XglzZsLDxDTzSRaf8n3wVAz9JLwvSm6eJ mgYGC4WKiQG02PHJKCiHiJ8TrE6F8xIfuLdReWNkfJDrAFw/4KtL1lvAipS6WuGS TViztSdQmcAbaysSko8NuLuK/RJqVSngwWiYq2QCY5TXDyWdkH9dwIXt+oZS95mp YQVjChvlj59CK1Z/sUIpMrke+oZzuRg3nxb0wL0VtbEt18aCVe36EVgZStgoJc+5 ZlKlCcwg1r9mg8ECorgeoasMJh80PWWathb1gz1FsLohrRxYY/V54kpM0Kuk/9QZ rRtaj3qQH8UjnwtbNh5Fix5B45HlVAzeqzU6WIF27lS6Roq1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:01 2026 by rpki-client