This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa File: 7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa (raw, json) Hash identifier: jW4cGzFOPfwoJt9uVI7QxKXmuN+WnSvg6dCHKoqjapI= Subject key identifier: CE:B2:C3:F9:5E:8A:02:05:2E:39:EB:15:82:70:17:60:2B:5E:2E:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB023AE0864408CC0DF6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396584 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:02:3a:e0:86:44:08:cc:0d:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=551ac552-9d6f-4159-834b-1cc06c75a0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:c1:35:cb:29:60:73:67:7d:09:28:2e:f0: 81:c7:e5:c0:b5:27:85:e9:6b:06:74:0f:14:0e:68: ce:54:c7:b4:05:89:ed:2f:c4:b5:61:db:e6:ed:b1: 5c:58:41:63:c7:13:a1:5f:fd:0e:17:11:b1:2e:ed: a4:0d:66:c7:63:29:b5:63:5f:bb:7d:60:71:bd:c6: 2d:62:dd:ab:d1:33:99:ef:06:3e:62:f0:2c:13:49: 76:75:31:ae:d0:71:af:ac:8a:d1:0a:bf:22:74:2e: 16:0b:08:c2:cf:5e:e8:e5:92:a5:ce:d1:16:6d:28: e2:89:27:9b:25:8a:dd:f1:96:5c:ca:57:ca:13:9f: 65:36:3a:b4:85:e3:d4:1f:47:ce:33:70:cc:7c:23: cb:8b:f1:92:76:d2:90:e5:85:ba:0a:96:cc:fa:f6: 79:66:0a:07:a6:66:79:d2:53:23:a3:f7:ff:46:85: b8:4d:23:32:98:56:45:ac:16:4c:f8:3c:e6:c9:7f: 45:84:65:ac:76:70:84:b2:36:e3:4f:a9:4e:07:42: bf:db:3b:7e:ab:58:3a:da:eb:f1:a4:9e:f3:d1:17: a0:fd:70:15:af:e2:dc:e0:f4:92:b7:70:2e:95:81: e0:e7:bc:bc:9d:40:38:04:75:61:19:b9:e3:9b:eb: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B2:C3:F9:5E:8A:02:05:2E:39:EB:15:82:70:17:60:2B:5E:2E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:27:e8:b1:01:60:38:e9:2c:c0:7c:50:32:8c:f0:a0:62:78: 30:46:bb:6a:33:14:f2:db:2b:b1:a6:b4:7e:df:3e:31:f2:50: 62:9d:f7:94:62:8c:fe:e8:74:d5:37:4c:38:86:47:0a:71:10: e3:c0:10:20:55:89:af:bb:d2:2e:8c:38:67:c5:b1:3e:9e:6e: f5:cb:3d:98:37:81:ab:61:e0:41:98:14:a3:15:b6:25:1a:c6: a4:76:69:01:36:8c:65:25:47:1f:e0:e1:9b:97:0a:9e:58:51: e7:9e:50:e0:dc:50:b0:71:ce:46:77:b5:01:4e:df:95:d0:f9: 18:32:29:be:6f:dd:24:60:5b:88:83:b3:84:db:98:a8:2d:00: 73:98:3b:cd:75:33:c6:9e:47:08:eb:86:55:7c:87:ac:b6:08: 7a:87:92:14:ef:fc:db:ec:8d:59:a9:14:87:8e:55:5b:59:8e: 1e:ec:de:b3:27:b6:f4:d4:ad:98:09:0a:0c:a4:c2:75:89:4f: 0f:c9:90:f0:b4:87:05:c8:a5:8e:4c:3a:f6:ee:7e:c6:cf:fa: 0d:28:23:34:2e:02:19:bf:40:ef:53:58:7e:17:93:49:39:c0: 64:d3:7d:8f:0c:21:fe:19:41:d9:fb:72:87:c1:b4:48:fb:04: f5:8c:ee:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRywI64IZECMwN9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NTUxYWM1NTItOWQ2Zi00MTU5LTgzNGItMWNjMDZjNzVhMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfnBNcspYHNnfQkoLvCBx+XAtSeF6WsGdA8U DmjOVMe0BYntL8S1Ydvm7bFcWEFjxxOhX/0OFxGxLu2kDWbHYym1Y1+7fWBxvcYt Yt2r0TOZ7wY+YvAsE0l2dTGu0HGvrIrRCr8idC4WCwjCz17o5ZKlztEWbSjiiSeb JYrd8ZZcylfKE59lNjq0hePUH0fOM3DMfCPLi/GSdtKQ5YW6CpbM+vZ5ZgoHpmZ5 0lMjo/f/RoW4TSMymFZFrBZM+DzmyX9FhGWsdnCEsjbjT6lOB0K/2zt+q1g62uvx pJ7z0Reg/XAVr+Lc4PSSt3AulYHg57y8nUA4BHVhGbnjm+uEiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM6yw/leigIFLjnrFYJwF2ArXi7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2E0ODAyY2EtYzIzNy0z NWI5LWE1MDEtNmZlOGY5ZDRhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4n6LEBYDjpLMB8UDKM8KBieDBGu2ozFPLbK7GmtH7fPjHyUGKd 95RijP7odNU3TDiGRwpxEOPAECBVia+70i6MOGfFsT6ebvXLPZg3gath4EGYFKMV tiUaxqR2aQE2jGUlRx/g4ZuXCp5YUeeeUODcULBxzkZ3tQFO35XQ+RgyKb5v3SRg W4iDs4TbmKgtAHOYO811M8aeRwjrhlV8h6y2CHqHkhTv/NvsjVmpFIeOVVtZjh7s 3rMntvTUrZgJCgykwnWJTw/JkPC0hwXIpY5MOvbufsbP+g0oIzQuAhm/QO9TWH4X k0k5wGTTfY8MIf4ZQdn7cofBtEj7BPWM7pA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:06 2025 by rpki-client