This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa File: 9ba1d956-f68f-3af1-88ad-304f049f02c4.roa (raw, json) Hash identifier: PbWHoy5tn0CFq/M9eOVDkTAELZbI4w6KFRwH/O8UzSA= Subject key identifier: 62:1B:9C:B1:BA:5B:C6:9D:42:25:E3:F9:5D:BB:AF:EB:3C:0E:4C:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD5FB4776F68A5FE375AB4C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 7342 IP address blocks: 2620:74:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:47:76:f6:8a:5f:e3:75:ab:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=b86b33c7-72f3-4738-a7d3-3a83705fafe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:0e:8d:f1:f3:a4:61:35:ff:45:61:87:20: d8:10:3c:d5:c7:9a:29:b0:a1:44:85:da:79:cc:4f: cf:67:95:0a:59:1e:28:a7:20:5a:5e:c4:7e:b7:b5: 0b:b7:b4:f3:42:a0:18:f9:95:ce:b5:ce:ae:3f:1b: 83:25:c7:38:58:eb:0c:df:3b:eb:c9:b8:16:cd:4a: 9f:74:de:49:8b:7d:78:43:cf:85:77:23:ff:d8:2b: 29:d2:6c:fe:7c:2b:a9:bd:91:a6:79:01:78:d9:0f: 89:87:44:d9:4c:c0:e1:5e:8c:06:18:2c:88:ac:ca: 8e:2b:23:f7:a4:5b:57:e6:95:8e:12:69:88:72:78: 96:83:9e:9a:7f:0c:a2:83:89:0f:91:49:3f:c7:e7: 74:c3:c6:4f:f2:04:2d:e3:35:82:34:bf:29:c4:53: b1:d1:19:47:54:b8:ea:50:65:d0:eb:0b:d0:42:61: b3:51:27:d5:46:f9:02:6d:aa:8b:eb:e8:42:06:92: d0:dc:91:36:52:3f:58:0f:2e:9c:eb:2e:6c:35:b3: fa:d3:5c:1a:4d:16:2d:3c:ca:a1:0c:db:c4:b6:8b: e0:c2:9e:dd:19:f5:37:c7:a2:31:96:9f:a9:e7:6f: d2:11:22:cb:84:9d:e8:3b:c0:f7:3a:0b:be:dd:c6: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:9C:B1:BA:5B:C6:9D:42:25:E3:F9:5D:BB:AF:EB:3C:0E:4C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:da:5e:34:fa:6b:1f:97:a0:c7:ed:b3:2c:fe:85:92:45:ad: 20:15:65:0f:f8:ed:8e:a0:e8:5c:2c:13:d8:7e:8e:d6:1e:b8: a0:de:3d:7a:1a:2c:c9:1b:68:e4:36:f4:d1:1b:81:95:96:b7: 63:a9:e2:3e:5f:ba:61:01:e4:ff:88:51:24:88:8a:96:03:00: f8:c8:1b:b4:f6:2f:a2:13:be:5d:2f:00:86:79:d9:9d:2a:18: bb:69:cd:7e:2e:6c:70:30:0e:09:2d:6d:89:ea:17:27:ff:d9: ab:52:e8:b8:bf:42:f7:10:f9:66:5c:eb:bb:34:39:f2:ff:a2: f5:b3:d2:39:e2:cf:fa:a6:30:42:df:3c:70:ac:1f:32:57:09: 53:35:19:52:24:c7:1f:68:f7:e7:5f:e0:29:f3:c8:ef:52:d1: 42:e6:02:b2:15:f3:7b:9e:4d:f1:56:65:e5:c9:02:33:4f:d7: bd:cb:91:61:3f:73:fc:3a:cd:af:02:99:50:8c:91:b0:b2:28: 45:38:7a:19:69:ce:57:a3:37:4b:ef:cc:d3:90:85:d6:95:af: a0:24:0d:98:b0:3b:28:d3:7b:7e:e3:12:36:89:0a:73:ad:de: 8f:2b:80:b1:25:a4:21:94:4a:0d:7c:30:6b:69:8c:b6:4c:63: 14:94:a9:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvV+0d29opf43WrTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk Yjg2YjMzYzctNzJmMy00NzM4LWE3ZDMtM2E4MzcwNWZhZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAsOjfHzpGE1/0VhhyDYEDzVx5opsKFEhdp5 zE/PZ5UKWR4opyBaXsR+t7ULt7TzQqAY+ZXOtc6uPxuDJcc4WOsM3zvrybgWzUqf dN5Ji314Q8+FdyP/2Csp0mz+fCupvZGmeQF42Q+Jh0TZTMDhXowGGCyIrMqOKyP3 pFtX5pWOEmmIcniWg56afwyig4kPkUk/x+d0w8ZP8gQt4zWCNL8pxFOx0RlHVLjq UGXQ6wvQQmGzUSfVRvkCbaqL6+hCBpLQ3JE2Uj9YDy6c6y5sNbP601waTRYtPMqh DNvEtovgwp7dGfU3x6Ixlp+p52/SESLLhJ3oO8D3Ogu+3caT8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGIbnLG6W8adQiXj+V27r+s8DkyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWJhMWQ5NTYtZjY4Zi0z YWYxLTg4YWQtMzA0ZjA0OWYwMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvaXjT6ax+XoMftsyz+hZJFrSAVZQ/47Y6g6FwsE9h+jtYeuKDe PXoaLMkbaOQ29NEbgZWWt2Op4j5fumEB5P+IUSSIipYDAPjIG7T2L6ITvl0vAIZ5 2Z0qGLtpzX4ubHAwDgktbYnqFyf/2atS6Li/QvcQ+WZc67s0OfL/ovWz0jniz/qm MELfPHCsHzJXCVM1GVIkxx9o9+df4CnzyO9S0ULmArIV83ueTfFWZeXJAjNP173L kWE/c/w6za8CmVCMkbCyKEU4ehlpzlejN0vvzNOQhdaVr6AkDZiwOyjTe37jEjaJ CnOt3o8rgLElpCGUSg18MGtpjLZMYxSUqdM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:19 2025 by rpki-client