This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa File: a20abcd6-8b8e-342f-8560-fe83689bcf27.roa (raw, json) Hash identifier: pzzRakJbcEiuWs4XuH5Wm+cn4V/hsAUg9ZAYdbzDAv0= Subject key identifier: 98:D2:BC:54:B8:97:11:10:6C:9D:40:3A:A0:9B:31:F9:65:76:D0:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D1673D85453A8FCAA02480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396604 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:67:3d:85:45:3a:8f:ca:a0:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=3e71ce46-aa52-47af-a6b0-f29d9bf1b807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:39:65:29:c9:fa:37:ba:75:05:bb:93:07: 6d:f1:59:c1:13:33:b4:66:b2:da:77:f8:9a:e3:ac: c7:4d:c0:78:f6:39:ec:83:63:71:69:c5:84:34:31: b2:a1:a2:9b:a4:e3:43:52:ea:35:da:a2:8b:2f:d4: b9:2a:e4:a0:f0:f5:8e:2b:7d:02:63:bc:6c:5f:f6: 16:4e:4d:4a:73:88:d9:ad:6e:bb:b6:a1:f9:80:e1: 6d:42:b2:86:eb:5e:04:de:04:3b:6a:27:b6:7b:72: 2c:4f:fb:a9:94:ce:eb:83:5f:c5:4e:13:83:8d:26: 9a:81:f9:34:37:f9:4f:19:77:bf:3b:12:4d:d3:0f: 7b:b9:bd:cd:91:ef:4d:4c:89:08:f6:6d:f1:f3:58: 80:5e:a6:d7:dc:c5:69:47:d5:53:0b:6e:c8:da:2c: 5c:c9:eb:cc:d8:1c:69:fc:1c:fe:76:b8:f1:4c:8f: 0e:d0:72:58:fa:a0:fe:6e:ce:06:08:ee:26:f9:09: 6e:98:67:63:5d:87:48:3a:56:d7:3d:18:07:e6:f3: 84:38:fc:67:3d:80:26:31:0e:b5:b8:70:73:63:f6: 0b:7a:85:ce:fe:6b:3d:1e:ce:dc:06:ad:e5:f5:07: 5f:1d:3f:71:b1:74:79:f1:55:51:9e:e7:6c:b9:7c: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D2:BC:54:B8:97:11:10:6C:9D:40:3A:A0:9B:31:F9:65:76:D0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8a:5d:42:1a:45:13:81:b6:a9:0a:e8:01:f4:13:57:d0:c2: 2e:7c:8f:60:b0:33:2b:95:08:20:0b:a1:bc:05:e9:54:52:24: 26:4e:d1:56:5b:c6:52:7a:b8:8b:71:21:d1:d4:a8:86:1d:27: 64:4a:8d:53:61:d4:75:66:91:7d:68:56:55:85:25:af:af:20: b4:e7:fd:72:25:61:f6:a4:ff:88:45:9e:0c:3e:84:48:16:19: 8e:11:0e:8b:07:27:4d:a9:47:2f:a6:56:46:76:ad:2a:f7:c6: e6:e5:a3:90:dd:be:53:30:dd:6c:c8:a1:4b:62:bf:10:2f:ea: c0:27:9f:73:3f:aa:93:14:ce:1d:47:ba:78:ee:eb:b8:40:9a: d8:ee:3e:0e:ee:91:7a:1e:92:32:56:74:36:1f:5c:fb:41:26: 08:1e:8d:ed:e3:da:18:c6:28:18:9b:67:43:c1:b3:04:19:51: 2c:29:b9:ae:09:1a:38:f4:ab:53:ac:49:d5:7d:28:0a:b8:53: 60:1d:cb:a7:54:c7:4e:08:a8:11:3a:32:46:17:81:9d:06:77: d5:f7:f5:83:3c:28:07:08:81:4d:1e:99:1b:96:8e:7b:06:bd: 9a:85:7c:5b:9d:49:a0:00:50:e7:70:5e:4a:0d:d9:5c:4d:41: 03:ef:b1:db -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0Wc9hUU6j8qgJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk M2U3MWNlNDYtYWE1Mi00N2FmLWE2YjAtZjI5ZDliZjFiODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWY5ZSnJ+je6dQW7kwdt8VnBEzO0ZrLad/ia 46zHTcB49jnsg2NxacWENDGyoaKbpONDUuo12qKLL9S5KuSg8PWOK30CY7xsX/YW Tk1Kc4jZrW67tqH5gOFtQrKG614E3gQ7aie2e3IsT/uplM7rg1/FThODjSaagfk0 N/lPGXe/OxJN0w97ub3Nke9NTIkI9m3x81iAXqbX3MVpR9VTC27I2ixcyevM2Bxp /Bz+drjxTI8O0HJY+qD+bs4GCO4m+QlumGdjXYdIOlbXPRgH5vOEOPxnPYAmMQ61 uHBzY/YLeoXO/ms9Hs7cBq3l9QdfHT9xsXR58VVRnudsuXzvUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJjSvFS4lxEQbJ1AOqCbMflldtABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwYWJjZDYtOGI4ZS0z NDJmLTg1NjAtZmU4MzY4OWJjZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnil1CGkUTgbapCugB9BNX0MIufI9gsDMrlQgg C6G8BelUUiQmTtFWW8ZSeriLcSHR1KiGHSdkSo1TYdR1ZpF9aFZVhSWvryC05/1y JWH2pP+IRZ4MPoRIFhmOEQ6LBydNqUcvplZGdq0q98bm5aOQ3b5TMN1syKFLYr8Q L+rAJ59zP6qTFM4dR7p47uu4QJrY7j4O7pF6HpIyVnQ2H1z7QSYIHo3t49oYxigY m2dDwbMEGVEsKbmuCRo49KtTrEnVfSgKuFNgHcunVMdOCKgROjJGF4GdBnfV9/WD PCgHCIFNHpkblo57Br2ahXxbnUmgAFDncF5KDdlcTUED77Hb -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:39 2026 by rpki-client