This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa File: 6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa (raw, json) Hash identifier: O/MTJPuwlhVSbttessBZKFMxmFibPFyTMqjeEYyRTxw= Subject key identifier: F4:98:21:A9:35:ED:43:41:E8:A9:88:43:35:45:22:0B:FB:27:C1:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D169C1887F0D31B1E04E68 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 20362 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:69:c1:88:7f:0d:31:b1:e0:4e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=40156b50-517f-42f8-8b2d-fd09ea7eac19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:82:09:19:1f:12:f6:f3:a4:33:b2:92:a8:db: b0:7b:30:42:2d:19:32:8d:8e:0b:06:60:da:4a:a2: a0:90:b2:f0:21:fd:82:d9:79:95:c3:31:1c:c2:79: 83:91:9f:93:f5:e6:05:fe:39:c4:42:58:f5:64:8a: 3b:ab:9f:cb:58:e5:95:ee:df:0e:d7:f0:57:cc:2b: 95:44:f9:09:51:0e:56:1f:18:00:39:f7:b0:c2:08: d3:55:26:59:98:64:81:0f:23:33:d6:e5:74:64:d0: b7:a5:93:39:dd:da:49:45:78:40:2b:1b:65:25:44: 70:7f:f3:f3:21:38:6d:ae:d3:4f:16:a6:e3:8a:1b: 74:30:fe:6e:84:8e:01:1d:ba:a4:b3:72:63:04:a6: 22:95:ee:e2:ae:10:e8:4b:4f:e5:93:da:3c:25:a5: c6:27:73:f1:f8:cf:d9:b8:c5:f3:9d:89:31:8c:9c: c2:fe:29:64:26:f5:0e:c9:0d:36:51:20:96:1b:27: 9f:b5:16:96:fb:11:8a:83:23:2b:b9:93:c7:29:82: 10:b2:f7:6c:c4:28:59:de:3c:59:b0:26:cc:79:0a: 78:44:14:d4:6c:71:28:df:4b:5f:40:83:05:8e:4f: 50:58:52:06:5c:df:5e:aa:6d:79:b7:47:a1:8f:7d: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:21:A9:35:ED:43:41:E8:A9:88:43:35:45:22:0B:FB:27:C1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:24:15:9c:07:9e:d4:63:de:ba:8e:63:b4:48:d2:24:6c:c3: 16:cd:02:80:6e:a8:21:d4:27:2a:92:bf:f6:fc:2c:49:c7:35: 40:9a:f5:12:0e:2f:13:a5:51:f0:4a:ff:13:6e:21:41:71:a7: 5f:c3:cb:6d:c8:90:80:f4:52:41:b2:a5:ee:e1:f8:b8:8a:7f: fc:b0:ca:bd:7c:2a:21:2a:a0:f9:db:6f:bf:ca:29:e2:bc:e7: 87:28:5f:10:dc:d5:06:cf:66:0e:13:3f:69:04:76:cb:60:f6: d1:67:3e:26:73:2c:77:74:ae:9b:20:f2:d5:d8:fc:de:fe:df: 04:1b:0a:29:4c:fd:88:d6:58:33:12:0c:c3:73:70:df:7d:ed: f6:f9:81:7c:77:04:0a:3b:2f:a3:44:2f:73:97:69:af:86:8f: ef:8a:48:c8:ab:8c:2b:33:46:c7:e9:11:e9:8d:c7:0d:a2:73: 7e:02:77:19:9d:95:82:0c:9b:b7:2d:d5:ce:69:05:c1:bd:5c: 27:21:8b:69:80:77:b0:d2:af:18:66:16:a3:25:a6:fa:9f:b4: 83:e7:78:df:be:4b:c3:83:6c:1e:6d:22:c0:f5:a6:34:02:43: ce:be:72:b9:ba:ad:29:21:ac:14:fc:db:4b:f7:60:37:01:a2: 07:c0:51:fc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WnBiH8NMbHgTmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NDAxNTZiNTAtNTE3Zi00MmY4LThiMmQtZmQwOWVhN2VhYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoIJGR8S9vOkM7KSqNuwezBCLRkyjY4LBmDa SqKgkLLwIf2C2XmVwzEcwnmDkZ+T9eYF/jnEQlj1ZIo7q5/LWOWV7t8O1/BXzCuV RPkJUQ5WHxgAOfewwgjTVSZZmGSBDyMz1uV0ZNC3pZM53dpJRXhAKxtlJURwf/Pz IThtrtNPFqbjiht0MP5uhI4BHbqks3JjBKYile7irhDoS0/lk9o8JaXGJ3Px+M/Z uMXznYkxjJzC/ilkJvUOyQ02USCWGyeftRaW+xGKgyMruZPHKYIQsvdsxChZ3jxZ sCbMeQp4RBTUbHEo30tfQIMFjk9QWFIGXN9eqm15t0ehj33PZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPSYIak17UNB6KmIQzVFIgv7J8HZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkzNmQwZDYtMzA4YS0z ZmJjLWI4ZjAtNmQyNmEyYTgzYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApJBWcB57UY966jmO0SNIkbMMWzQKAbqgh1Ccq kr/2/CxJxzVAmvUSDi8TpVHwSv8TbiFBcadfw8ttyJCA9FJBsqXu4fi4in/8sMq9 fCohKqD522+/yinivOeHKF8Q3NUGz2YOEz9pBHbLYPbRZz4mcyx3dK6bIPLV2Pze /t8EGwopTP2I1lgzEgzDc3Dffe32+YF8dwQKOy+jRC9zl2mvho/vikjIq4wrM0bH 6RHpjccNonN+AncZnZWCDJu3LdXOaQXBvVwnIYtpgHew0q8YZhajJab6n7SD53jf vkvDg2webSLA9aY0AkPOvnK5uq0pIawU/NtL92A3AaIHwFH8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:02 2026 by rpki-client