This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa File: 4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa (raw, json) Hash identifier: wD2EXlKzyRs877GCy+GbqdzFxSgGBZup0vDnHJNQfeI= Subject key identifier: 42:18:51:9A:B3:8E:DC:CF:74:5B:49:E7:85:FD:41:F9:DB:47:65:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C02A616A0128086B3D86E2338 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 396541 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:16:a0:12:80:86:b3:d8:6e:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=04b6814a-a303-47c0-b6c0-18e1ec1232b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:6b:25:28:1d:a2:b2:6a:06:83:1a:48:22: 05:6b:be:8f:5f:97:c9:5e:9a:f0:e7:da:ee:f6:1f: d8:84:72:65:93:bb:98:e8:10:f3:36:ef:f4:85:77: ee:34:af:59:4e:ce:b2:c2:c2:93:b3:ec:b6:0d:ba: 61:8d:97:c4:87:c2:66:a3:e3:eb:f0:2c:8f:12:18: e8:f1:ab:fe:1f:d4:9b:a7:95:11:6f:cb:81:ee:7f: b6:b7:a2:cf:98:0b:48:ac:78:5d:f6:9f:e5:10:ba: ff:48:20:48:a1:08:a4:d3:37:2e:55:0c:9f:42:a9: dd:dc:1a:32:51:21:6c:c2:f0:e7:38:04:85:11:54: e1:4b:c1:b8:5f:54:69:19:f1:76:59:27:d1:22:7e: c2:3e:d0:53:51:d7:bf:a9:53:0b:1e:cd:f5:3f:2c: f7:5d:81:67:aa:a1:73:90:ee:54:83:af:ab:f1:9f: 88:fa:7a:43:45:5c:1e:a9:04:0c:c0:0a:44:94:4a: 74:d2:0c:1e:7d:75:0a:d1:1f:92:cf:e5:2a:0f:9e: 21:e8:bf:68:c1:b5:8a:8a:6e:39:d6:55:ae:83:cc: b5:b9:a2:6b:7e:b1:6c:5d:ab:ad:a7:d8:d4:a1:09: 6b:46:25:10:30:83:a6:00:93:77:b7:4e:95:17:89: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:51:9A:B3:8E:DC:CF:74:5B:49:E7:85:FD:41:F9:DB:47:65:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c4:a5:46:cf:33:c6:64:a9:8e:7b:3e:e5:75:5f:de:d3:cd: 76:5d:f4:f9:5f:86:07:a0:51:46:62:8b:6c:9c:12:3e:2d:6c: df:c2:0d:f8:e8:73:79:89:a5:51:6c:0e:10:45:72:d7:ed:31: 90:e3:ec:95:5f:19:92:3d:2b:70:cb:07:e2:49:13:52:ec:10: d7:c2:e7:b1:43:2b:e4:14:ac:49:78:0c:0a:c9:03:4d:7e:79: 9e:5d:a9:d0:67:7a:a1:29:e6:3a:13:81:e0:00:57:72:a5:2a: b5:32:a6:f5:f5:26:da:46:2c:ff:18:1d:28:0d:81:a9:18:00: 4f:56:80:66:96:dd:ac:4d:9c:76:2e:00:ed:7b:c6:2c:81:f3: 29:41:57:a2:44:51:c0:d9:cf:2f:9b:d4:c3:1b:6f:3e:11:dc: d7:aa:e1:e8:3c:c2:38:37:d4:13:32:04:56:ad:6f:b3:d8:c0: d1:5f:a4:19:e8:71:98:83:8b:7a:db:34:f4:82:ba:da:10:ef: 43:36:8f:f5:4a:9b:9f:61:85:ea:16:88:dc:44:9b:c2:f7:8a: ee:d8:b3:de:67:5c:82:bb:b1:ee:bf:36:90:8d:96:d6:67:49: c0:69:39:f7:f8:78:9e:51:96:84:9a:01:4e:d1:d2:d9:52:6e: 32:42:f5:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwCphagEoCGs9huIzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk MDRiNjgxNGEtYTMwMy00N2MwLWI2YzAtMThlMWVjMTIzMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn9rJSgdorJqBoMaSCIFa76PX5fJXprw59ru 9h/YhHJlk7uY6BDzNu/0hXfuNK9ZTs6ywsKTs+y2DbphjZfEh8Jmo+Pr8CyPEhjo 8av+H9Sbp5URb8uB7n+2t6LPmAtIrHhd9p/lELr/SCBIoQik0zcuVQyfQqnd3Boy USFswvDnOASFEVThS8G4X1RpGfF2WSfRIn7CPtBTUde/qVMLHs31Pyz3XYFnqqFz kO5Ug6+r8Z+I+npDRVweqQQMwApElEp00gwefXUK0R+Sz+UqD54h6L9owbWKim45 1lWug8y1uaJrfrFsXautp9jUoQlrRiUQMIOmAJN3t06VF4mp4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEIYUZqzjtzPdFtJ54X9QfnbR2XEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFlZjcwMDYtNmMwYy0z YmM0LTk2NmYtMmU3ZTk3ZDkxMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGxKVGzzPGZKmOez7ldV/e0812XfT5X4YHoFFG YotsnBI+LWzfwg346HN5iaVRbA4QRXLX7TGQ4+yVXxmSPStwywfiSRNS7BDXwuex QyvkFKxJeAwKyQNNfnmeXanQZ3qhKeY6E4HgAFdypSq1Mqb19SbaRiz/GB0oDYGp GABPVoBmlt2sTZx2LgDte8YsgfMpQVeiRFHA2c8vm9TDG28+EdzXquHoPMI4N9QT MgRWrW+z2MDRX6QZ6HGYg4t62zT0grraEO9DNo/1SpufYYXqFojcRJvC94ru2LPe Z1yCu7HuvzaQjZbWZ0nAaTn3+HieUZaEmgFO0dLZUm4yQvUy -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:40 2025 by rpki-client