This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fc04765-1449-3c0a-9a72-a0d857dd764d.roa File: 5fc04765-1449-3c0a-9a72-a0d857dd764d.roa (raw, json) Hash identifier: wUT8wN1a8/6Txj14xi3pjFLelDUsE3/bFPAxxT+Uq6c= Subject key identifier: 90:A3:1E:9A:19:73:E1:74:41:39:3A:07:3E:87:B9:5E:75:F0:CF:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C166E18A8C7B33397A5E3 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fc04765-1449-3c0a-9a72-a0d857dd764d.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 36620 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:16:6e:18:a8:c7:b3:33:97:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=3bd43caa-233a-4e3f-a75c-6de5a8d112cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:77:b6:1b:25:a5:c0:62:95:3f:b4:8a:3c: 6e:e0:d8:af:99:c2:0e:d1:1a:24:b8:fa:66:36:26: d4:fe:01:38:45:68:22:34:c2:06:f0:29:10:fc:2b: 9c:ff:87:8f:a0:9d:19:fd:d6:f5:0f:7c:0b:04:14: 95:c4:c6:fa:ac:88:6a:68:56:9f:a1:04:e1:e6:80: c0:6b:64:06:a9:8e:9b:b7:b4:cc:dc:0c:c4:83:83: e6:37:a0:30:88:d9:8b:18:86:00:e0:c7:5b:5d:3a: 80:44:61:05:24:9a:2d:53:0b:25:0a:03:5f:54:20: 44:73:e7:f0:71:64:1a:5c:62:7c:c4:cd:fb:f0:44: ed:51:fb:aa:0c:b5:46:40:f4:aa:b0:ce:7a:56:37: ba:dd:c9:41:b5:c8:4e:e6:13:36:5d:d9:ba:ba:26: f2:34:43:7f:56:df:7b:42:47:25:d8:58:cb:9a:8a: 38:dd:c0:fd:1f:fe:97:3d:83:c3:f7:5f:29:85:0c: fa:45:55:2b:3e:22:a7:6c:89:79:62:31:05:de:b9: 25:27:49:e6:7d:c1:b7:54:3f:be:7f:97:ba:76:f5: 22:aa:72:7e:fc:24:7b:94:02:a8:51:65:8f:60:eb: 8f:ed:cd:8d:e5:8b:53:93:e5:a3:ab:09:01:2a:fe: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:1E:9A:19:73:E1:74:41:39:3A:07:3E:87:B9:5E:75:F0:CF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fc04765-1449-3c0a-9a72-a0d857dd764d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1f:18:65:7f:9a:06:da:be:cb:4c:8a:fc:bb:06:84:41:61: 34:5c:33:1f:6a:67:db:a9:25:60:64:23:2f:06:98:77:b3:23: 13:f6:db:1c:18:7f:4d:40:32:43:75:89:24:b5:a0:46:89:c0: c8:95:4c:be:df:08:b6:1f:64:a7:7f:a0:ef:c0:ae:25:0a:01: 80:5c:11:6b:73:2b:a5:62:df:58:11:94:eb:a2:42:52:4b:b9: cf:5b:2d:0e:1a:4b:cc:d6:c7:1b:e9:a4:2c:de:00:20:c1:d4: a4:ae:0b:95:ba:3c:e6:f2:d1:92:25:aa:ed:1d:d4:ff:5d:61: 6f:e7:95:ea:ba:af:aa:77:29:25:69:61:bd:79:97:8b:eb:be: d2:2d:16:3e:41:0d:90:6d:c4:f4:8e:de:7a:00:8f:d4:74:78: cc:3f:8e:c2:3a:0d:1f:bf:b1:21:d6:71:6f:4d:be:35:0d:45: fb:70:f2:46:7c:60:34:e4:19:8b:60:98:a2:20:c2:55:4f:50: a3:e5:57:e6:ef:c6:38:91:2e:c9:02:c0:ca:49:0d:70:2e:61: b6:5c:6e:99:17:f2:4c:f4:18:2a:d1:e4:6c:e4:62:98:b4:7e: c7:f4:c2:59:49:53:73:ef:d3:a4:17:09:04:e9:b6:5b:e5:32: 9e:7a:73:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBZuGKjHszOXpeMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk M2JkNDNjYWEtMjMzYS00ZTNmLWE3NWMtNmRlNWE4ZDExMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GR3thslpcBilT+0ijxu4NivmcIO0RokuPpm NibU/gE4RWgiNMIG8CkQ/Cuc/4ePoJ0Z/db1D3wLBBSVxMb6rIhqaFafoQTh5oDA a2QGqY6bt7TM3AzEg4PmN6AwiNmLGIYA4MdbXTqARGEFJJotUwslCgNfVCBEc+fw cWQaXGJ8xM378ETtUfuqDLVGQPSqsM56Vje63clBtchO5hM2Xdm6uibyNEN/Vt97 Qkcl2FjLmoo43cD9H/6XPYPD918phQz6RVUrPiKnbIl5YjEF3rklJ0nmfcG3VD++ f5e6dvUiqnJ+/CR7lAKoUWWPYOuP7c2N5YtTk+WjqwkBKv7mVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJCjHpoZc+F0QTk6Bz6HuV518M8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWZjMDQ3NjUtMTQ0OS0z YzBhLTlhNzItYTBkODU3ZGQ3NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAgHxhlf5oG2r7LTIr8uwaEQWE0XDMfamfbqSVg ZCMvBph3syMT9tscGH9NQDJDdYkktaBGicDIlUy+3wi2H2Snf6DvwK4lCgGAXBFr cyulYt9YEZTrokJSS7nPWy0OGkvM1scb6aQs3gAgwdSkrguVujzm8tGSJartHdT/ XWFv55Xquq+qdyklaWG9eZeL677SLRY+QQ2QbcT0jt56AI/UdHjMP47COg0fv7Eh 1nFvTb41DUX7cPJGfGA05BmLYJiiIMJVT1Cj5Vfm78Y4kS7JAsDKSQ1wLmG2XG6Z F/JM9Bgq0eRs5GKYtH7H9MJZSVNz79OkFwkE6bZb5TKeenPZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:06 2026 by rpki-client