This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa File: 43e3ea64-26d8-3cc3-afce-3d6761763a84.roa (raw, json) Hash identifier: 0D630H1IJ3krmTry45ruHHWeSaCG9pAtAgix3LfSMrQ= Subject key identifier: C0:18:CE:AC:45:C2:5C:A3:7A:8B:92:27:21:A2:82:A9:30:6E:F7:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB1C80C4F5F8F260538A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396562 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:1c:80:c4:f5:f8:f2:60:53:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=bc5a11ed-ab04-4056-9cba-fc79050f650c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:fb:95:6f:a1:8c:06:93:03:3a:07:1e:86: 47:18:78:b7:d1:81:00:37:63:10:af:e9:11:18:79: 2f:58:7b:bd:8d:be:69:e3:fb:59:0d:82:73:3a:9e: be:e7:49:04:5d:51:0f:81:c0:a2:6e:b5:44:c4:be: 02:af:95:b5:7b:81:30:4f:1b:3c:c1:ec:73:8b:b3: 72:6a:99:c9:c7:46:08:63:cb:91:0e:74:66:f2:76: 8b:3f:e1:bc:e2:14:c4:aa:b8:b3:b0:ed:bb:08:19: e0:fa:aa:a3:42:0e:cc:95:6b:4a:83:2e:67:47:86: 6c:32:c9:2f:81:4f:df:19:17:fc:98:d8:f2:f3:90: c3:29:44:d3:cf:62:b2:7e:a8:1e:be:47:bd:e5:b8: b4:51:ef:1f:23:74:f8:12:6b:1b:e3:f7:40:d0:6c: d8:d7:8c:33:2c:aa:df:00:a9:e5:dc:34:f4:dc:e3: 99:a0:fb:b4:2e:b4:4b:50:e9:20:e6:9b:3c:6d:77: 6f:7d:69:75:4b:a0:f8:85:b5:eb:10:83:c6:b3:00: 03:4f:fd:c8:b4:a5:db:55:8f:25:b5:ae:07:ea:72: 03:b8:37:72:96:00:30:77:9d:d7:f8:e3:68:cc:a1: 24:d4:88:a6:a4:45:cc:85:59:c1:da:ac:b4:a9:8c: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:18:CE:AC:45:C2:5C:A3:7A:8B:92:27:21:A2:82:A9:30:6E:F7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:37:28:7e:2f:5b:fc:a8:c8:5b:ab:f0:76:f4:b7:eb:27:44: dd:94:83:b2:dc:6b:a7:c5:3f:74:d6:b5:8b:d3:f6:4a:66:17: db:5f:82:8c:1c:6a:00:e3:1e:15:dc:a5:98:95:0d:2a:22:57: cb:e0:02:b5:47:34:b8:db:e3:1c:9b:ca:bf:53:6e:f1:87:6b: c5:0c:75:ab:12:62:90:37:7a:99:44:87:0f:35:ea:48:22:2c: 55:67:a4:68:4a:db:68:dc:6e:a6:11:42:d6:5a:2d:38:81:4d: 3c:ec:fa:0a:f5:06:ab:8d:cb:e7:bd:df:98:b8:44:2f:61:f9: 0f:74:be:b3:db:94:fb:85:91:c0:c2:c2:04:e8:c9:b7:f2:b7: e2:c8:34:56:d1:07:53:57:80:6f:df:21:20:27:e9:74:f3:6f: 92:42:86:1d:b1:25:9a:40:b8:87:fd:1e:eb:13:96:aa:23:50: 76:cb:6d:df:e6:ff:fd:09:20:f1:12:a6:38:1e:03:d4:12:73: d3:93:45:90:92:29:b5:b0:80:ec:4f:65:be:3b:0d:eb:f8:81: 26:91:80:f5:c2:61:f8:eb:90:e8:cd:48:e6:ae:aa:f0:ec:10: 5c:11:3c:41:3f:33:0d:01:a4:87:0b:a7:78:46:0b:e1:9e:aa: 4c:50:ca:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyxyAxPX48mBTioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmM1YTExZWQtYWIwNC00MDU2LTljYmEtZmM3OTA1MGY2NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ/7lW+hjAaTAzoHHoZHGHi30YEAN2MQr+kR GHkvWHu9jb5p4/tZDYJzOp6+50kEXVEPgcCibrVExL4Cr5W1e4EwTxs8wexzi7Ny apnJx0YIY8uRDnRm8naLP+G84hTEqrizsO27CBng+qqjQg7MlWtKgy5nR4ZsMskv gU/fGRf8mNjy85DDKUTTz2Kyfqgevke95bi0Ue8fI3T4Emsb4/dA0GzY14wzLKrf AKnl3DT03OOZoPu0LrRLUOkg5ps8bXdvfWl1S6D4hbXrEIPGswADT/3ItKXbVY8l ta4H6nIDuDdylgAwd53X+ONozKEk1IimpEXMhVnB2qy0qYwAZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMAYzqxFwlyjeouSJyGigqkwbvceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlM2VhNjQtMjZkOC0z Y2MzLWFmY2UtM2Q2NzYxNzYzYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQ3KH4vW/yoyFur8Hb0t+snRN2Ug7Lca6fFP3TWtYvT9kpmF9tf gowcagDjHhXcpZiVDSoiV8vgArVHNLjb4xybyr9TbvGHa8UMdasSYpA3eplEhw81 6kgiLFVnpGhK22jcbqYRQtZaLTiBTTzs+gr1BquNy+e935i4RC9h+Q90vrPblPuF kcDCwgToybfyt+LINFbRB1NXgG/fISAn6XTzb5JChh2xJZpAuIf9HusTlqojUHbL bd/m//0JIPESpjgeA9QSc9OTRZCSKbWwgOxPZb47Dev4gSaRgPXCYfjrkOjNSOau qvDsEFwRPEE/Mw0BpIcLp3hGC+GeqkxQyk4= -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:47 2025 by rpki-client