This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa File: 67a05e70-e633-381a-b8e2-b5e6e9e22526.roa (raw, json) Hash identifier: cgeyRFZPJrCL4LiZ6FB3+tbLNjp3UI5eu2HUSNj1Dv0= Subject key identifier: 46:AF:46:B0:4A:48:9A:70:3E:FC:8E:54:EB:AB:55:7A:7D:B9:F2:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16E4DFCEA21E88CA08600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 36625 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:6e:4d:fc:ea:21:e8:8c:a0:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=cd4ac7a5-e927-4af4-8a95-28aaa070a3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:4e:52:e5:b4:51:50:0b:01:51:99:0b:cf: 6e:48:a5:61:c7:e3:1d:55:3a:85:9f:f6:49:91:14: c8:d9:f4:81:f6:a3:7c:8a:2a:31:d9:66:1e:6c:29: 6f:f3:f5:10:f7:e1:89:97:96:db:df:5f:93:a3:d5: f5:77:42:68:57:d9:15:4d:15:72:af:60:69:88:d0: 51:ec:18:4e:a5:9b:62:cd:de:10:33:f4:98:84:94: ed:48:2a:dc:ea:ca:71:62:dc:fc:55:41:c3:04:3c: 64:8f:34:5e:0c:12:33:61:4d:80:e6:9c:62:cf:3e: 94:2b:56:8b:8f:4f:e1:69:bf:e5:41:60:e6:e5:bd: 8f:43:bc:bc:a6:d0:54:75:a8:6c:4c:da:57:7f:8b: 80:77:bb:61:e3:e4:4f:ed:b4:a0:af:03:a4:4c:0a: 64:76:c9:e7:c7:c7:14:9a:cd:8a:26:13:14:d9:53: b9:8e:4b:56:1d:48:86:2c:57:55:1e:2c:23:a9:3e: 7b:44:3c:4d:bc:f6:52:8e:e9:f1:4b:a1:0f:22:e5: 22:ae:a1:90:eb:80:f3:01:37:88:25:3e:f3:6f:1f: 22:95:a6:74:a0:e4:4f:41:a2:48:17:d0:e7:0c:40: 51:79:25:2e:af:0a:aa:94:91:51:d2:63:31:67:1f: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:46:B0:4A:48:9A:70:3E:FC:8E:54:EB:AB:55:7A:7D:B9:F2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:40:15:dd:5a:22:84:ac:86:fc:00:55:49:e4:1c:39:8d:a0: b0:1d:32:bd:ee:db:c0:2a:12:1d:7d:fd:13:68:a6:bc:9e:c5: 4f:ae:c3:c3:c6:47:17:d2:12:b6:6a:67:3a:2a:a9:31:13:9d: 4e:c0:dc:b4:7c:22:a2:1c:ba:48:f5:49:86:1e:06:b9:7a:2c: 43:a2:19:5e:8b:b3:04:ff:5b:d1:29:db:6b:28:ef:ec:de:54: 66:f6:31:c9:47:ed:96:d3:8f:c9:3b:36:e6:b3:9a:5c:a1:d3: 13:96:64:71:2b:fe:8e:95:a4:a4:45:c5:e2:20:3e:e2:be:b9: 62:9b:a7:7b:e8:c9:9a:f9:0a:80:dc:e4:6b:88:82:be:3c:ca: fc:5e:6c:23:2c:4d:b1:fa:c7:a6:6c:fb:87:05:8a:22:71:37: 82:c5:47:e5:07:ea:69:8c:38:94:56:89:c2:c1:0c:26:71:42: 8b:72:aa:e9:48:bf:3b:d7:9e:ff:69:b5:3e:b9:56:c9:f7:46: e2:e2:f3:24:a1:f1:32:e0:e8:dd:45:72:45:df:38:f4:50:c2: 8e:53:df:81:29:ae:b1:5a:dc:c2:2b:37:ae:27:f7:87:39:f0: 3c:48:65:02:05:13:f3:fa:5b:d1:79:3d:10:bd:22:4c:0f:75: cf:67:74:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0W5N/Ooh6IyghgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk Y2Q0YWM3YTUtZTkyNy00YWY0LThhOTUtMjhhYWEwNzBhM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBtOUuW0UVALAVGZC89uSKVhx+MdVTqFn/ZJ kRTI2fSB9qN8iiox2WYebClv8/UQ9+GJl5bb31+To9X1d0JoV9kVTRVyr2BpiNBR 7BhOpZtizd4QM/SYhJTtSCrc6spxYtz8VUHDBDxkjzReDBIzYU2A5pxizz6UK1aL j0/hab/lQWDm5b2PQ7y8ptBUdahsTNpXf4uAd7th4+RP7bSgrwOkTApkdsnnx8cU ms2KJhMU2VO5jktWHUiGLFdVHiwjqT57RDxNvPZSjunxS6EPIuUirqGQ64DzATeI JT7zbx8ilaZ0oORPQaJIF9DnDEBReSUurwqqlJFR0mMxZx/SYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEavRrBKSJpwPvyOVOurVXp9ufLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjdhMDVlNzAtZTYzMy0z ODFhLWI4ZTItYjVlNmU5ZTIyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7QBXdWiKErIb8AFVJ5Bw5jaCwHTK97tvAKhId ff0TaKa8nsVPrsPDxkcX0hK2amc6KqkxE51OwNy0fCKiHLpI9UmGHga5eixDohle i7ME/1vRKdtrKO/s3lRm9jHJR+2W04/JOzbms5pcodMTlmRxK/6OlaSkRcXiID7i vrlim6d76Mma+QqA3ORriIK+PMr8XmwjLE2x+sembPuHBYoicTeCxUflB+ppjDiU VonCwQwmcUKLcqrpSL87157/abU+uVbJ90bi4vMkofEy4OjdRXJF3zj0UMKOU9+B Ka6xWtzCKzeuJ/eHOfA8SGUCBRPz+lvReT0QvSJMD3XPZ3Rp -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:47 2026 by rpki-client