This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa File: a21d70ab-a157-3b94-a224-f34d1ef3955a.roa (raw, json) Hash identifier: /GzBZy07X8VFOLbwKA29N60aIv7LwIL6DOo6gJVA9us= Subject key identifier: 02:90:62:51:C8:F0:1C:8C:76:6A:BA:65:64:92:FF:C5:16:70:C4:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC03333FCE50041A529C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 397207 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:03:33:3f:ce:50:04:1a:52:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1afaff96-7fd9-4340-b323-6c5e52f3b40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:33:c0:9c:3e:2a:90:ee:4e:7b:fe:55:ca: 2c:35:32:a0:71:b6:db:95:15:7e:6b:d1:07:8a:b4: 2a:bf:97:d5:0b:20:7a:1f:24:18:08:81:44:ed:d3: 84:99:4e:a3:3b:ad:c8:8b:cd:f8:38:93:82:7d:e4: 70:18:6b:2e:13:46:5a:5c:36:6e:24:9f:e5:8f:38: 23:43:bc:f7:21:08:4c:7f:f4:51:e1:a8:e9:cf:5a: 5a:49:23:fb:0f:5d:7c:e6:ca:4c:05:ce:88:aa:9f: 46:5d:83:30:e9:8e:48:aa:7e:b6:cb:c6:8a:81:88: 5e:71:40:8d:c3:e1:7b:64:92:49:d7:01:57:d0:e5: 33:8b:fd:da:d8:d9:f0:72:c2:e3:15:f6:b3:16:09: 9f:dc:c5:da:d7:96:83:f6:08:dd:ac:9a:57:72:9f: 0c:e8:d4:2d:c3:f4:23:e8:9b:45:33:a1:a1:01:96: 44:9b:75:c4:b6:a0:e0:cc:c2:01:41:73:32:32:40: ca:08:50:75:7c:23:52:ec:f3:39:de:c4:0c:d0:21: 5e:88:96:55:71:e3:f0:da:bc:02:12:f3:72:c3:51: cd:9f:c2:f7:c8:c5:01:a2:8e:da:56:b1:9c:df:c9: 32:f2:fc:e3:bd:ff:cb:ba:c2:54:5a:eb:f7:d2:b0: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:62:51:C8:F0:1C:8C:76:6A:BA:65:64:92:FF:C5:16:70:C4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ec:cf:33:4f:30:ea:10:11:c9:38:6f:7a:02:db:b5:a9:c8: 85:80:04:2d:dd:cc:3b:e4:73:c4:8f:a5:70:ff:40:ac:59:3e: 3a:25:b9:a2:8e:01:f8:9c:75:7b:b6:20:2a:eb:64:e9:4e:aa: 37:d8:69:61:84:88:6f:c7:86:32:bb:b5:4e:e0:c0:8a:f0:82: c7:c2:30:62:aa:80:2e:38:44:82:78:2d:c4:5b:c1:47:dd:5b: 5a:ea:64:f6:a1:4b:93:c2:ac:d3:3f:65:49:b3:e9:ba:13:13: 22:38:54:78:3b:0f:59:70:40:a5:30:ea:0d:06:89:f0:28:87: 69:c7:c7:2c:fa:93:28:a6:ee:74:2f:89:cd:6d:8a:3c:d4:58: 36:eb:e3:56:54:5e:ca:86:01:e1:81:3d:42:37:b7:c9:93:61: 87:3e:f2:aa:2c:88:e1:4e:61:73:ca:0c:5d:0f:0f:30:28:8b: 6b:22:1e:8f:55:7e:a0:65:1c:e8:dc:99:da:8c:fd:53:5a:de: 06:b2:31:c2:b5:a5:81:7c:41:66:6e:57:4d:24:88:2e:9c:79: 79:72:b5:32:07:44:f5:b5:84:42:07:80:f9:73:61:76:94:23: 1b:9d:d3:34:8c:d9:77:cb:04:e4:e9:23:78:84:4f:30:f3:6e: 68:03:a3:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3AMzP85QBBpSnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWFmYWZmOTYtN2ZkOS00MzQwLWIzMjMtNmM1ZTUyZjNiNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkUzwJw+KpDuTnv+VcosNTKgcbbblRV+a9EH irQqv5fVCyB6HyQYCIFE7dOEmU6jO63Ii834OJOCfeRwGGsuE0ZaXDZuJJ/ljzgj Q7z3IQhMf/RR4ajpz1paSSP7D1185spMBc6Iqp9GXYMw6Y5Iqn62y8aKgYhecUCN w+F7ZJJJ1wFX0OUzi/3a2NnwcsLjFfazFgmf3MXa15aD9gjdrJpXcp8M6NQtw/Qj 6JtFM6GhAZZEm3XEtqDgzMIBQXMyMkDKCFB1fCNS7PM53sQM0CFeiJZVcePw2rwC EvNyw1HNn8L3yMUBoo7aVrGc38ky8vzjvf/LusJUWuv30rBG7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKQYlHI8ByMdmq6ZWSS/8UWcMRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIxZDcwYWItYTE1Ny0z Yjk0LWEyMjQtZjM0ZDFlZjM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrszzNPMOoQEck4b3oC27WpyIWABC3dzDvkc8SPpXD/QKxZPjol uaKOAficdXu2ICrrZOlOqjfYaWGEiG/HhjK7tU7gwIrwgsfCMGKqgC44RIJ4LcRb wUfdW1rqZPahS5PCrNM/ZUmz6boTEyI4VHg7D1lwQKUw6g0GifAoh2nHxyz6kyim 7nQvic1tijzUWDbr41ZUXsqGAeGBPUI3t8mTYYc+8qosiOFOYXPKDF0PDzAoi2si Ho9VfqBlHOjcmdqM/VNa3gayMcK1pYF8QWZuV00kiC6ceXlytTIHRPW1hEIHgPlz YXaUIxud0zSM2XfLBOTpI3iETzDzbmgDozc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:19 2026 by rpki-client