This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa File: 8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa (raw, json) Hash identifier: G4LtSvrSaCNuTPFUJggl8FRZqyWuf9FQZLPFrMgZN8Y= Subject key identifier: FC:ED:0E:F3:80:CD:6C:9A:86:03:FC:CD:30:2D:E8:E7:05:C9:E9:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630DF4F8C8D06D757857EF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396573 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:df:4f:8c:8d:06:d7:57:85:7e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=5d5b766e-fb13-4080-9a79-40b501b371db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:c8:41:b4:22:4a:d7:e5:4b:a3:f6:f6:68: 71:8e:af:74:81:5e:d9:57:02:6c:ca:9b:9f:3f:a4: 1a:a0:67:69:0e:6e:78:ca:2a:a0:78:35:0c:f1:e3: 6f:5f:ea:d0:25:04:77:f4:c5:6d:bf:92:b1:ff:89: d8:7b:51:1b:3d:13:0c:ca:1e:ae:b0:3f:36:db:ca: 03:5e:71:68:b6:8f:76:ea:7d:07:5f:8b:fb:b8:1c: f3:4e:dc:0d:75:8e:c6:c9:24:3c:ef:e4:49:96:0a: c3:ba:71:b5:3b:fc:d7:ae:a8:f9:ab:e4:e0:f2:5c: b5:9f:35:31:e0:cd:53:a5:f5:0c:c6:e6:d3:30:ef: 2b:b7:30:44:69:a5:69:63:83:59:7f:2a:6d:28:13: 75:8a:57:85:7c:03:0a:b7:6a:4b:1f:93:77:95:bb: 21:6c:b6:47:be:83:4d:e5:f5:b6:47:2f:4b:57:5c: e0:88:ad:76:4e:ba:93:48:d7:98:4a:10:9e:58:82: 9f:3e:de:19:10:7d:68:55:57:bf:55:47:22:32:38: e7:e4:67:ba:d3:20:3b:74:ad:4f:2c:c2:9b:6a:f3: 79:ce:8e:40:50:d0:89:5c:8a:c9:f4:94:a3:48:f3: 29:33:fe:21:28:db:5c:73:b3:0e:5e:02:9a:69:b9: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:0E:F3:80:CD:6C:9A:86:03:FC:CD:30:2D:E8:E7:05:C9:E9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4f:8d:90:f8:f0:b9:77:f9:04:b5:98:a6:ba:72:9a:c9:90: 62:65:af:45:c3:a2:c9:0f:7a:f8:e4:32:48:fb:02:72:c3:1b: ef:7b:9f:61:c0:d0:1c:19:46:ea:cf:90:71:42:96:8d:8f:28: 99:dc:b6:2e:5c:31:d2:f2:c8:9e:30:49:46:87:9e:28:2f:44: d0:86:66:2e:1d:31:1e:ef:a6:f0:de:3c:70:da:95:91:01:93: 99:f1:8c:d2:01:d3:4d:93:6f:55:24:7b:0f:9d:d0:2a:3b:a1: 0b:6c:69:b6:6f:a5:97:d2:a9:62:08:03:1b:ec:bf:7c:bd:dd: 04:bf:66:98:64:a5:a3:ac:5a:b6:5c:c5:1b:46:86:ad:84:cd: 03:09:99:89:f7:99:b7:f0:83:66:ac:df:c3:e3:b2:b7:b5:2d: 7c:de:b3:8e:8e:b1:58:02:b3:0c:a7:14:41:a3:b3:c3:bc:38: 51:58:6d:07:75:98:2f:e4:60:bc:36:a7:8a:c9:d0:64:a7:18: a3:8e:a0:22:74:64:02:85:fc:8c:e8:c3:4f:33:3e:f0:57:25: 50:b3:cd:b1:aa:b7:ef:a8:8d:8d:f8:d4:12:98:65:7b:de:c8: eb:cf:34:af:40:08:19:ec:47:5c:d9:67:ca:08:cf:3e:c3:03: 02:64:71:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMN9PjI0G11eFfvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NWQ1Yjc2NmUtZmIxMy00MDgwLTlhNzktNDBiNTAxYjM3MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix7IQbQiStflS6P29mhxjq90gV7ZVwJsypuf P6QaoGdpDm54yiqgeDUM8eNvX+rQJQR39MVtv5Kx/4nYe1EbPRMMyh6usD8228oD XnFoto926n0HX4v7uBzzTtwNdY7GySQ87+RJlgrDunG1O/zXrqj5q+Tg8ly1nzUx 4M1TpfUMxubTMO8rtzBEaaVpY4NZfyptKBN1ileFfAMKt2pLH5N3lbshbLZHvoNN 5fW2Ry9LV1zgiK12TrqTSNeYShCeWIKfPt4ZEH1oVVe/VUciMjjn5Ge60yA7dK1P LMKbavN5zo5AUNCJXIrJ9JSjSPMpM/4hKNtcc7MOXgKaabnYSwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPztDvOAzWyahgP8zTAt6OcFyekSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU5ZDMzOTUtZDdmMy0z ODRmLTlkOGYtOTIwNjk2NGZmZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGT42Q+PC5d/kEtZimunKayZBiZa9Fw6LJD3r4 5DJI+wJywxvve59hwNAcGUbqz5BxQpaNjyiZ3LYuXDHS8sieMElGh54oL0TQhmYu HTEe76bw3jxw2pWRAZOZ8YzSAdNNk29VJHsPndAqO6ELbGm2b6WX0qliCAMb7L98 vd0Ev2aYZKWjrFq2XMUbRoathM0DCZmJ95m38INmrN/D47K3tS183rOOjrFYArMM pxRBo7PDvDhRWG0HdZgv5GC8NqeKydBkpxijjqAidGQChfyM6MNPMz7wVyVQs82x qrfvqI2N+NQSmGV73sjrzzSvQAgZ7Edc2WfKCM8+wwMCZHHw -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:39 2025 by rpki-client