This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa File: 3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa (raw, json) Hash identifier: fXBgWy8VpmIboVyPsxTuHzfG6xobivXUFX3XaTXrRkA= Subject key identifier: 29:8B:65:E1:81:14:80:F4:CE:30:18:4D:30:E3:AD:29:9F:0A:97:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C59312F8AD3214939E600D780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 0 IP address blocks: 2620:74:c4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:2f:8a:d3:21:49:39:e6:00:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=2ce46f04-f400-421e-9317-7d60066dfbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:d6:22:cb:90:ec:f5:d4:4e:fc:e1:ce:43: fc:d4:fb:b0:1d:fb:e2:01:e4:cb:b0:f9:c6:3a:65: 12:ca:48:29:17:c1:92:b8:bd:74:84:8d:00:0f:b2: f7:fa:9e:11:3e:46:37:81:f0:65:02:32:13:8c:a1: b7:02:a5:25:10:7b:65:45:a8:ff:a7:82:11:5d:f9: dc:83:31:b5:ce:b8:79:5f:14:8b:d0:18:0d:f1:55: a5:c1:30:80:96:89:a0:00:33:ca:eb:0a:a0:ad:b1: cc:25:76:13:b5:ee:e5:f6:63:54:31:94:63:ed:a5: 82:9f:57:03:a1:0d:1f:a9:ff:0d:62:d2:1d:3a:e6: fb:14:18:29:58:e5:28:a9:15:bb:db:4e:25:da:d9: 01:ba:17:18:94:68:0a:f4:73:ed:ab:07:04:98:8d: aa:0f:5d:18:2f:f3:eb:c9:fe:eb:37:02:0c:f0:ef: e3:c1:24:54:49:86:ab:b3:fe:07:61:94:37:73:78: 72:1f:9c:a6:c4:5a:8e:6d:1d:58:99:7c:09:54:b0: 0e:97:fa:26:df:74:34:6b:46:25:04:7e:c1:2c:5d: 54:ff:bc:1c:00:bd:3d:81:e2:a6:f1:45:ad:52:98: 37:dc:0f:7e:aa:c2:0e:00:9c:b7:67:42:8d:72:9c: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:65:E1:81:14:80:F4:CE:30:18:4D:30:E3:AD:29:9F:0A:97:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c4::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e8:f8:40:71:97:a5:3d:a8:5b:0c:60:8f:fb:a6:dd:9b:c3: 61:bd:e1:e3:10:60:58:3d:28:13:e0:2b:9a:ac:67:b3:28:24: 52:e0:4d:67:80:57:45:e2:0b:5a:8b:fd:b4:94:e9:f7:48:5b: 3e:70:6a:29:27:d8:da:66:88:63:47:9e:ca:3a:60:c5:c2:ff: 9c:38:f9:ce:ce:e7:c2:8e:5f:3d:83:cd:e3:57:2a:55:fb:21: 78:eb:1b:4c:c1:c9:ce:af:68:b9:a3:23:7a:a5:01:39:48:39: 1f:76:6e:64:5e:c9:5a:81:37:7b:02:e7:62:99:05:04:80:4a: 72:be:30:2b:e6:25:1a:35:78:2b:01:a2:a1:a5:95:83:8a:92: 27:37:cc:8c:16:a7:dd:d2:3e:f8:5a:ff:75:68:bb:21:22:9e: 6b:8e:05:1e:67:70:32:85:04:d2:9f:ce:38:cf:52:82:a5:32: f2:d6:2c:6a:ac:64:ab:02:8f:97:a0:64:b3:fb:33:69:fa:a8: 46:e7:b6:e5:f8:5c:af:4f:1e:60:43:0a:2e:7a:70:09:5a:fb: b9:2f:7d:4b:4b:b0:a3:47:46:17:2e:cd:f4:9b:74:b9:aa:ac: e2:f0:a2:8a:11:85:92:6c:e3:86:81:37:7c:0c:c5:4d:4e:39: c2:9a:75:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExZMS+K0yFJOeYA14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk MmNlNDZmMDQtZjQwMC00MjFlLTkzMTctN2Q2MDA2NmRmYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzrWIsuQ7PXUTvzhzkP81PuwHfviAeTLsPnG OmUSykgpF8GSuL10hI0AD7L3+p4RPkY3gfBlAjITjKG3AqUlEHtlRaj/p4IRXfnc gzG1zrh5XxSL0BgN8VWlwTCAlomgADPK6wqgrbHMJXYTte7l9mNUMZRj7aWCn1cD oQ0fqf8NYtIdOub7FBgpWOUoqRW7204l2tkBuhcYlGgK9HPtqwcEmI2qD10YL/Pr yf7rNwIM8O/jwSRUSYars/4HYZQ3c3hyH5ymxFqObR1YmXwJVLAOl/om33Q0a0Yl BH7BLF1U/7wcAL09geKm8UWtUpg33A9+qsIOAJy3Z0KNcpxncQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmLZeGBFID0zjAYTTDjrSmfCpcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2ZiNGMxOTUtYzljNC0z MDFkLWJmMjUtODUxOGQ4ZGVmZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdADE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPo+EBxl6U9qFsMYI/7pt2bw2G94eMQYFg9KBPgK5qsZ7MoJFLg TWeAV0XiC1qL/bSU6fdIWz5waikn2NpmiGNHnso6YMXC/5w4+c7O58KOXz2DzeNX KlX7IXjrG0zByc6vaLmjI3qlATlIOR92bmReyVqBN3sC52KZBQSASnK+MCvmJRo1 eCsBoqGllYOKkic3zIwWp93SPvha/3VouyEinmuOBR5ncDKFBNKfzjjPUoKlMvLW LGqsZKsCj5egZLP7M2n6qEbntuX4XK9PHmBDCi56cAla+7kvfUtLsKNHRhcuzfSb dLmqrOLwoooRhZJs44aBN3wMxU1OOcKadRI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:20 2026 by rpki-client