This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa File: 697b5991-20b5-30f0-a736-3f611edf5c89.roa (raw, json) Hash identifier: stpsnnd/gde8/iKAl57UcNMgOnGZS+EspRBanSQiEfw= Subject key identifier: 32:73:E1:08:EE:4D:62:66:37:B1:0A:CC:DC:7A:36:20:C8:1E:CA:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C02A617211CFC9A018B2B9C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 396588 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:17:21:1c:fc:9a:01:8b:2b:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=636084c3-00a8-4176-ae6d-40875b2a8f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:15:9d:ca:35:4e:f8:ec:44:16:2b:93:9e:78: 6c:af:ed:f9:38:e0:9f:66:66:5c:44:32:cb:85:53: d9:21:e6:24:17:2a:0e:06:f2:fb:2c:2b:0c:12:a8: cf:4d:5f:b0:7a:be:5f:c1:f6:69:ee:d8:b5:fd:89: 72:3c:ab:19:d0:52:af:16:86:46:7b:be:b4:34:a4: 10:7e:a5:2b:82:10:78:6b:5b:78:be:b3:4d:2c:17: f9:cb:f0:28:8c:b6:e5:1a:c5:dd:e6:10:c1:4b:6e: 23:90:ab:14:8b:76:e0:70:a9:56:20:00:6f:12:77: 36:fe:84:7e:da:d4:d3:25:c5:fa:8c:fc:1f:a0:6f: f5:ac:29:ff:bb:e4:27:bc:21:85:7b:7f:76:19:a9: 8c:97:e3:62:b0:ad:9c:b4:1c:33:d1:46:fc:38:c8: fa:c1:4d:e8:c3:dc:e4:a0:6a:c3:96:5d:74:45:96: 96:e3:bf:21:df:16:d2:e6:56:fe:1c:90:62:35:ce: 54:14:72:e3:b1:c4:2a:ed:3c:fa:68:01:11:ce:b3: 76:f6:15:e3:6a:23:0e:fb:bf:af:81:9c:b1:b4:5e: 85:79:0d:e6:d6:c8:3e:5b:53:b1:ec:58:b7:be:ca: ee:93:a7:98:fe:cf:ae:dd:b4:42:22:3d:6b:ac:c3: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:E1:08:EE:4D:62:66:37:B1:0A:CC:DC:7A:36:20:C8:1E:CA:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8a:10:ff:d1:0c:30:90:d8:59:e7:ac:ab:e6:ca:a3:29:77: cd:96:2f:da:11:f6:b9:b9:3a:59:d3:b3:5a:fe:e6:4a:69:b3: 2f:a2:cf:2e:be:65:7a:c4:be:bb:93:65:69:8c:06:bd:22:18: ee:ab:43:ef:90:e5:f7:05:51:5b:0c:6b:85:84:14:24:0e:28: cd:b5:b6:1a:d7:6b:1d:5c:0f:22:f4:9d:0e:ad:47:37:da:c4: 03:00:eb:99:19:cb:b7:83:6f:1a:9d:1c:49:28:d8:b0:93:da: 46:01:42:52:5a:8d:37:68:36:18:a2:ca:c0:ae:dd:33:76:9d: 2a:f2:9c:81:0d:17:b5:1b:16:82:d3:bc:a8:62:6e:f8:a8:02: f9:65:1a:04:bd:61:9b:01:00:8c:3b:33:91:57:c5:96:57:ed: ad:68:3c:6c:b4:ce:16:19:03:88:fa:2e:52:74:94:c1:d3:71: fd:ad:c3:4b:f1:9b:94:52:13:4f:78:cf:b3:cc:76:26:a1:92: 3f:75:d9:7b:18:db:9d:6d:a8:ea:1a:3e:d6:33:ba:25:f2:78: df:fa:9c:6f:3b:aa:ea:7c:13:c2:91:fd:03:6f:d6:57:5f:9c: ca:2b:0a:11:d4:78:8c:57:20:b4:2b:8b:69:c1:0a:b3:83:bf: 92:d5:c8:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwCphchHPyaAYsrnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk NjM2MDg0YzMtMDBhOC00MTc2LWFlNmQtNDA4NzViMmE4ZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hWdyjVO+OxEFiuTnnhsr+35OOCfZmZcRDLL hVPZIeYkFyoOBvL7LCsMEqjPTV+wer5fwfZp7ti1/YlyPKsZ0FKvFoZGe760NKQQ fqUrghB4a1t4vrNNLBf5y/AojLblGsXd5hDBS24jkKsUi3bgcKlWIABvEnc2/oR+ 2tTTJcX6jPwfoG/1rCn/u+QnvCGFe392GamMl+NisK2ctBwz0Ub8OMj6wU3ow9zk oGrDll10RZaW478h3xbS5lb+HJBiNc5UFHLjscQq7Tz6aAERzrN29hXjaiMO+7+v gZyxtF6FeQ3m1sg+W1Ox7Fi3vsruk6eY/s+u3bRCIj1rrMNt5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDJz4QjuTWJmN7EKzNx6NiDIHsqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk3YjU5OTEtMjBiNS0z MGYwLWE3MzYtM2Y2MTFlZGY1Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5ihD/0QwwkNhZ56yr5sqjKXfNli/aEfa5uTpZ 07Na/uZKabMvos8uvmV6xL67k2VpjAa9Ihjuq0PvkOX3BVFbDGuFhBQkDijNtbYa 12sdXA8i9J0OrUc32sQDAOuZGcu3g28anRxJKNiwk9pGAUJSWo03aDYYosrArt0z dp0q8pyBDRe1GxaC07yoYm74qAL5ZRoEvWGbAQCMOzORV8WWV+2taDxstM4WGQOI +i5SdJTB03H9rcNL8ZuUUhNPeM+zzHYmoZI/ddl7GNudbajqGj7WM7ol8njf+pxv O6rqfBPCkf0Db9ZXX5zKKwoR1HiMVyC0K4tpwQqzg7+S1cjw -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:06 2025 by rpki-client