This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa File: 42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa (raw, json) Hash identifier: vDrZcxd6fZItrG9FPfK/4lloMY6JlPVTQvmMKF9Rm2I= Subject key identifier: 74:64:62:E8:18:1E:AC:55:33:CF:48:C8:89:AF:D9:E6:52:2A:EF:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC17AF830A369A3980DDE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396582 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:17:af:83:0a:36:9a:39:80:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=81d25dc7-2d73-4e42-bcd0-8a83a148dee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:38:3d:a4:e7:a0:6a:e1:89:04:ff:c7:ba: 31:0b:c4:b7:90:a8:c0:d4:80:b0:81:7f:2e:4f:b4: ac:ab:34:84:89:7d:e5:e5:b3:81:37:e7:36:e1:54: cb:1f:64:e9:f0:9f:de:0c:20:a6:e8:75:38:ad:e1: e9:ce:b1:88:34:48:32:f2:e5:7c:8d:d0:12:ec:fc: 96:23:d7:85:e5:4b:47:eb:f3:3a:c1:33:be:91:9b: 79:36:cb:3c:ac:a6:ee:05:64:40:2d:7e:b3:02:96: 55:1e:44:ed:2c:ee:d4:f6:79:05:6f:2a:55:51:bc: 4f:1b:0c:19:37:6b:83:8c:ea:45:a9:52:ce:58:20: b1:8a:fc:1f:67:d2:d2:a0:02:ed:0d:49:c3:2b:2c: 58:43:a3:f4:f4:38:37:70:3c:f1:f0:34:6c:ec:1d: 8a:d4:71:2c:48:4f:55:c8:04:63:a6:d9:4a:bb:33: 4d:46:72:df:24:31:40:2f:e3:91:2c:4a:78:5f:17: e1:ae:62:46:60:12:0b:c3:24:5c:c6:c9:38:71:6f: c8:4b:5d:db:89:52:54:c2:91:93:20:b4:e2:e1:f8: 3a:71:cb:25:d9:a5:93:01:54:45:0b:8b:ac:c4:75: 24:37:b0:9e:91:51:5c:e7:f3:8a:70:a6:75:73:d8: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:62:E8:18:1E:AC:55:33:CF:48:C8:89:AF:D9:E6:52:2A:EF:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fc:a8:64:eb:61:fb:40:07:1c:98:ae:bd:d6:ce:3e:de:7c: 34:99:db:8d:f4:3e:a8:66:55:7c:df:fe:70:07:10:de:c4:d7: b9:82:bc:6b:81:5f:16:0f:2e:e7:ad:d3:a5:52:17:9c:69:4c: 7c:c9:73:c8:8b:65:ce:fb:08:3f:20:21:23:a6:fe:04:4a:d8: 70:96:dc:01:31:df:05:c2:75:e5:15:6e:e1:62:a9:db:34:ad: fc:f7:7a:22:70:23:85:ee:54:2c:a9:c1:1f:7c:f5:08:20:5a: 94:07:e1:20:ba:07:f3:9b:14:17:bc:f7:8c:45:8b:5c:d6:48: dc:4d:b7:c7:1b:de:78:ff:02:87:c8:51:29:5f:a0:5f:f9:10: b2:74:16:5f:60:6e:5e:da:26:5b:28:07:31:d0:cb:f8:40:b8: 5b:23:88:b6:14:80:40:41:e6:cf:69:82:49:28:79:e6:42:96: ef:84:d8:f6:ca:33:80:c4:21:a2:3a:6c:04:c1:d7:2d:32:cb: ba:1e:90:0f:c9:4c:db:b1:11:08:77:17:73:c3:3d:8e:98:19: 50:6c:fd:b8:60:5a:0f:e6:59:7f:9f:66:59:05:4e:b5:c8:59: 31:b1:ce:1d:7d:2f:46:7a:e1:62:a2:63:81:ed:e7:c3:6b:62: 77:58:40:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3Bevgwo2mjmA3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODFkMjVkYzctMmQ3My00ZTQyLWJjZDAtOGE4M2ExNDhkZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/04PaTnoGrhiQT/x7oxC8S3kKjA1ICwgX8u T7SsqzSEiX3l5bOBN+c24VTLH2Tp8J/eDCCm6HU4reHpzrGINEgy8uV8jdAS7PyW I9eF5UtH6/M6wTO+kZt5Nss8rKbuBWRALX6zApZVHkTtLO7U9nkFbypVUbxPGwwZ N2uDjOpFqVLOWCCxivwfZ9LSoALtDUnDKyxYQ6P09Dg3cDzx8DRs7B2K1HEsSE9V yARjptlKuzNNRnLfJDFAL+ORLEp4XxfhrmJGYBILwyRcxsk4cW/IS13biVJUwpGT ILTi4fg6ccsl2aWTAVRFC4usxHUkN7CekVFc5/OKcKZ1c9iQzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRkYugYHqxVM89IyImv2eZSKu/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmM2Y4ZjUtY2Q0YS0z NDBjLWFmODktOWYyMTNhNmY5MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHP8qGTrYftABxyYrr3Wzj7efDSZ2430PqhmVXzf/nAHEN7E17mC vGuBXxYPLuet06VSF5xpTHzJc8iLZc77CD8gISOm/gRK2HCW3AEx3wXCdeUVbuFi qds0rfz3eiJwI4XuVCypwR989QggWpQH4SC6B/ObFBe894xFi1zWSNxNt8cb3nj/ AofIUSlfoF/5ELJ0Fl9gbl7aJlsoBzHQy/hAuFsjiLYUgEBB5s9pgkkoeeZClu+E 2PbKM4DEIaI6bATB1y0yy7oekA/JTNuxEQh3F3PDPY6YGVBs/bhgWg/mWX+fZlkF TrXIWTGxzh19L0Z64WKiY4Ht58NrYndYQB0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:37 2026 by rpki-client