This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa File: 543a87d2-a772-3495-ad38-2cb0fb484d36.roa (raw, json) Hash identifier: JcXBfGT+Ad5FqVlKmvIbpqlB1l+OL4qgK0DBucM70aU= Subject key identifier: 77:F9:BE:6F:8A:8B:11:11:0E:10:3B:8C:89:1A:59:8A:37:14:28:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB17FFAF30F6DBCC163D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396589 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:17:ff:af:30:f6:db:cc:16:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=acf7611e-573e-4038-be53-c3e407b3d62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:98:5d:14:74:b8:c6:e1:79:f0:6d:4f:6f: 8c:7d:7b:11:26:a5:43:51:d2:1e:68:fa:0f:6f:7f: 43:f5:05:11:e2:e5:09:74:7b:6c:b4:51:2f:0b:c9: 3c:11:ee:2e:0a:f4:17:95:ee:db:f6:d2:9c:b1:69: f6:5e:b2:aa:cd:2c:c9:4d:9d:fa:62:b2:a9:13:c4: f0:09:f4:1e:d9:69:1f:00:71:b0:d6:34:d6:2c:f5: f8:67:d7:ae:8c:94:cd:74:aa:db:b9:98:d6:64:e2: 92:d6:37:22:8c:8d:78:07:6b:8c:22:62:97:e6:4a: f3:d8:b5:41:20:90:b1:5f:94:67:d9:19:f6:a7:94: 9c:0e:99:0e:64:af:b0:53:7a:a6:dc:82:8e:c0:66: 46:5c:fd:48:ca:a7:79:bf:14:e4:34:c4:0b:0d:66: f6:48:fa:88:da:98:d2:92:72:c0:c8:c9:37:ac:1c: ca:fd:76:cb:c8:be:46:99:96:1a:b2:b9:3f:97:34: 78:a6:ca:b0:3c:a9:6e:2b:7e:cd:3a:6d:a9:e3:27: 65:d6:52:84:d1:22:79:60:5c:44:bf:cc:bf:d4:61: 11:16:61:ed:77:5c:60:45:e8:2a:5d:b2:ce:0c:e6: c1:e3:23:d8:22:a4:27:dd:8b:4c:fb:d9:ba:ea:5d: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F9:BE:6F:8A:8B:11:11:0E:10:3B:8C:89:1A:59:8A:37:14:28:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d0:83:53:f0:42:db:43:db:5a:f6:3b:b2:45:1f:66:49:43: 19:e9:40:07:fb:82:62:2b:06:92:54:aa:6c:9d:c6:d5:cd:25: 32:d9:c4:69:3d:62:87:1f:22:ae:27:5a:26:15:fa:5b:13:d6: fa:24:8a:70:69:10:e6:13:a9:63:1b:a8:4d:8d:d2:88:f7:ed: e6:fb:1b:fe:f1:39:b2:c5:16:74:11:c5:12:27:ea:85:fd:48: b8:70:be:66:76:11:e8:3f:2e:d0:8a:15:43:7e:2c:97:52:21: b8:c7:1d:f9:87:48:f3:7a:fc:33:c6:eb:4a:77:9e:d7:75:73: 28:f5:a8:6a:ab:6a:27:42:a2:2b:f5:80:5f:a3:b3:30:4e:35: 0f:42:be:3c:08:34:17:27:f7:80:c0:97:12:e4:4b:c4:59:3d: 81:e8:8c:bc:86:e0:07:41:d0:af:74:4e:ce:42:d9:44:47:19: 8c:5d:40:2a:d9:60:86:c0:a8:80:cc:a6:de:54:41:74:81:73: 6e:27:86:68:59:52:b6:81:9a:f0:5f:8a:19:ff:d4:76:46:45: 5d:80:77:f4:63:06:05:8d:45:fb:72:93:dc:8b:91:69:76:0e: 2d:8c:10:34:5d:03:7d:aa:b8:67:9f:ca:87:e0:2a:6e:51:fc: 14:55:49:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyxf/rzD228wWPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YWNmNzYxMWUtNTczZS00MDM4LWJlNTMtYzNlNDA3YjNkNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI6YXRR0uMbhefBtT2+MfXsRJqVDUdIeaPoP b39D9QUR4uUJdHtstFEvC8k8Ee4uCvQXle7b9tKcsWn2XrKqzSzJTZ36YrKpE8Tw CfQe2WkfAHGw1jTWLPX4Z9eujJTNdKrbuZjWZOKS1jcijI14B2uMImKX5krz2LVB IJCxX5Rn2Rn2p5ScDpkOZK+wU3qm3IKOwGZGXP1Iyqd5vxTkNMQLDWb2SPqI2pjS knLAyMk3rBzK/XbLyL5GmZYasrk/lzR4psqwPKluK37NOm2p4ydl1lKE0SJ5YFxE v8y/1GERFmHtd1xgRegqXbLODObB4yPYIqQn3YtM+9m66l2eGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHf5vm+KixERDhA7jIkaWYo3FCi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzYTg3ZDItYTc3Mi0z NDk1LWFkMzgtMmNiMGZiNDg0ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLQg1PwQttD21r2O7JFH2ZJQxnpQAf7gmIrBpJUqmydxtXNJTLZ xGk9YocfIq4nWiYV+lsT1vokinBpEOYTqWMbqE2N0oj37eb7G/7xObLFFnQRxRIn 6oX9SLhwvmZ2Eeg/LtCKFUN+LJdSIbjHHfmHSPN6/DPG60p3ntd1cyj1qGqraidC oiv1gF+jszBONQ9CvjwINBcn94DAlxLkS8RZPYHojLyG4AdB0K90Ts5C2URHGYxd QCrZYIbAqIDMpt5UQXSBc24nhmhZUraBmvBfihn/1HZGRV2Ad/RjBgWNRftyk9yL kWl2Di2MEDRdA32quGefyofgKm5R/BRVSc8= -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:39 2025 by rpki-client