This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa File: 89c0097c-ba53-3eda-b8f4-83253c50f6be.roa (raw, json) Hash identifier: B+Jfo2JqY/KBMeK7ppVDDn6Cia5PdwIj0K8c1cv/Eno= Subject key identifier: F3:6B:97:EB:FE:B8:79:07:9C:B5:4B:24:61:B8:14:2A:DE:E7:95:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16E2B46A22AFED9F27E10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 36620 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:6e:2b:46:a2:2a:fe:d9:f2:7e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=8a0d2d99-23f4-445e-953f-ecc45fab0ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:13:60:21:a0:fd:b8:90:af:1d:dd:f6:db: 82:6a:ca:56:c9:32:4c:6d:1b:2a:97:6b:0e:07:29: 0f:5d:a4:0f:04:d0:26:44:1d:fc:93:f5:31:54:09: e9:7d:14:b4:77:71:53:56:b0:ec:28:91:f7:85:97: c9:41:94:0f:66:46:39:67:57:d6:26:60:d9:0b:bf: 57:26:44:cc:d1:1d:61:45:2e:47:1d:67:97:48:18: a6:36:d4:a7:d4:8d:4c:61:47:54:5f:cc:f9:d7:8d: 48:bd:37:84:44:7b:c0:17:36:72:40:26:b8:4e:75: d3:96:65:c0:e0:dc:a0:47:7d:3c:55:cd:f5:01:19: c1:50:f3:94:34:be:cb:04:b0:b2:be:61:18:84:95: 99:d2:1d:4a:ce:07:f5:eb:05:c4:ad:a5:89:e3:81: df:cd:55:9b:5e:7f:16:e9:ff:2a:2c:83:05:39:08: f6:0f:fc:55:c2:54:67:03:0c:2a:66:9d:dd:8c:74: ed:37:06:4d:8a:2e:39:79:e0:3d:ef:aa:86:63:9d: 5c:42:f1:d1:b9:82:d2:6d:59:79:2a:37:92:e2:63: 9b:a4:a6:a1:0d:66:f9:8d:1b:49:c9:b8:7f:93:88: cb:72:f6:3a:6f:3d:26:df:82:45:e6:e9:bd:3b:e8: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6B:97:EB:FE:B8:79:07:9C:B5:4B:24:61:B8:14:2A:DE:E7:95:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a6:21:b6:b4:2a:58:46:69:16:5f:a6:20:aa:e9:d5:0e:26: f3:b6:de:d7:a7:ad:a2:cb:57:80:aa:ff:2d:62:bf:85:17:53: 67:6b:e6:d1:20:03:1b:7e:dc:0a:9f:6e:e6:f5:01:2d:81:2e: cd:58:e1:52:20:34:9d:a9:be:cf:50:28:fb:e6:e4:9c:08:0f: 82:f0:6b:b6:7f:4d:91:b0:8d:08:ee:57:ef:dc:8b:c6:42:38: 5c:05:7e:4b:41:d2:2b:e9:37:3f:e9:47:47:97:31:87:02:da: 27:65:5c:2a:9a:da:ef:ad:e1:88:8b:85:9e:d8:cf:14:ab:94: a3:87:06:34:b5:82:15:53:40:3f:03:22:54:2c:71:b9:6a:04: bb:14:85:24:b3:7a:7a:51:fb:90:ee:75:45:13:70:52:21:af: 71:19:89:06:02:9c:c3:8e:ff:60:c9:c0:d3:9e:17:d3:5d:97: 3e:64:65:d6:9a:b5:f6:8a:8c:65:38:23:39:89:87:5e:e8:16: 65:1f:c6:05:98:89:4a:08:03:2b:de:de:1a:98:26:c0:46:74: 30:51:f8:5f:83:3b:8f:7f:0e:79:f0:f4:fc:0e:35:49:f5:06: f6:c4:13:15:5d:ac:11:db:34:d5:0d:35:c1:e2:33:2b:d4:c0: 86:d2:c1:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0W4rRqIq/tnyfhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OGEwZDJkOTktMjNmNC00NDVlLTk1M2YtZWNjNDVmYWIwZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ITYCGg/biQrx3d9tuCaspWyTJMbRsql2sO BykPXaQPBNAmRB38k/UxVAnpfRS0d3FTVrDsKJH3hZfJQZQPZkY5Z1fWJmDZC79X JkTM0R1hRS5HHWeXSBimNtSn1I1MYUdUX8z5141IvTeERHvAFzZyQCa4TnXTlmXA 4NygR308Vc31ARnBUPOUNL7LBLCyvmEYhJWZ0h1Kzgf16wXEraWJ44HfzVWbXn8W 6f8qLIMFOQj2D/xVwlRnAwwqZp3djHTtNwZNii45eeA976qGY51cQvHRuYLSbVl5 KjeS4mObpKahDWb5jRtJybh/k4jLcvY6bz0m34JF5um9O+hLJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPNrl+v+uHkHnLVLJGG4FCre55VaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODljMDA5N2MtYmE1My0z ZWRhLWI4ZjQtODMyNTNjNTBmNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLpiG2tCpYRmkWX6YgqunVDibztt7Xp62iy1eA qv8tYr+FF1Nna+bRIAMbftwKn27m9QEtgS7NWOFSIDSdqb7PUCj75uScCA+C8Gu2 f02RsI0I7lfv3IvGQjhcBX5LQdIr6Tc/6UdHlzGHAtonZVwqmtrvreGIi4We2M8U q5SjhwY0tYIVU0A/AyJULHG5agS7FIUks3p6UfuQ7nVFE3BSIa9xGYkGApzDjv9g ycDTnhfTXZc+ZGXWmrX2ioxlOCM5iYde6BZlH8YFmIlKCAMr3t4amCbARnQwUfhf gzuPfw558PT8DjVJ9Qb2xBMVXawR2zTVDTXB4jMr1MCG0sEA -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:24 2026 by rpki-client