This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa File: a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa (raw, json) Hash identifier: pxJFqaJ0YdmeUX1gwg8/x3o5ObutVBNL1HkT+ldL67c= Subject key identifier: 21:DF:AA:A4:F4:86:B4:C5:34:18:3E:36:9E:B7:D2:AD:9F:C4:BE:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BEDB5DA4B44D0C50C2586FF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:da:4b:44:d0:c5:0c:25:86:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=9176a931-b5cc-4a31-b5e3-2d9f09fe3f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:81:bc:00:ea:c9:29:0e:1d:f3:72:7d:80: 61:d9:f7:6f:31:d9:c0:98:6a:65:ca:13:04:84:c5: 70:0c:62:cc:16:b5:ef:dc:5f:17:39:72:c4:5a:38: 8d:93:45:6f:ff:92:ce:39:87:15:ed:fb:3d:c1:ab: c8:18:0a:99:0d:ca:d1:ec:22:cb:9b:98:33:98:92: 63:d6:3d:a3:b1:38:c5:34:5b:7e:8b:4a:ef:3a:fd: 6b:eb:66:d0:aa:d2:8a:80:b6:7e:0c:eb:ab:69:dd: 6f:3f:51:aa:53:13:1f:97:32:76:0d:5c:8a:12:39: 7d:2e:1b:79:22:38:8c:fc:6e:62:32:c9:b9:ee:49: 93:cb:74:82:a1:77:20:5f:49:80:67:0f:0f:c1:25: fd:24:82:4c:1a:33:8a:8d:41:80:3c:34:e4:16:33: a4:9d:fa:79:7a:cc:a2:b8:8b:3f:b5:d5:5e:cd:bc: c6:b8:af:39:44:f3:0a:af:2d:0d:da:f8:2e:df:c0: 78:cf:be:0c:77:9d:64:f4:19:a0:c7:d3:fe:93:d7: 93:31:b3:13:3a:ab:55:87:89:af:a0:9d:84:51:57: 1b:8b:a0:38:b1:c0:1f:d4:aa:f6:5e:fb:c5:f6:9c: 4c:22:3e:6a:f9:12:c6:0e:f4:85:f1:1c:82:52:41: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DF:AA:A4:F4:86:B4:C5:34:18:3E:36:9E:B7:D2:AD:9F:C4:BE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fc:83:6f:d9:65:12:98:d9:f0:27:77:6c:5e:db:5a:9b:dc: 66:da:dd:12:f6:f7:aa:63:79:f6:53:38:79:70:9c:71:ac:5b: f4:35:96:d0:01:0d:42:0f:6b:47:b0:f6:62:7f:6b:7e:87:e3: be:12:aa:da:0c:90:10:6f:7e:ce:e3:90:68:af:a9:90:65:bf: 65:cc:04:d0:56:15:70:08:fe:a7:0b:02:5d:b8:ac:f9:04:fc: 79:51:5a:20:77:bf:ed:85:b9:e7:e2:87:a4:ab:89:2a:94:67: 15:be:50:c3:cc:d4:f9:25:84:97:f0:65:aa:d5:ed:09:30:57: 25:d3:ea:92:5c:bc:d7:7b:6b:eb:cb:8c:06:0b:3f:dc:3e:aa: 36:7f:0c:3b:4f:4f:d0:9c:32:33:13:46:79:07:a2:05:5e:c5: 1f:69:0e:85:09:2b:68:0e:ef:19:10:02:93:0b:6a:f9:f6:7a: b0:58:e4:90:30:bb:f9:96:0b:cc:41:ca:fc:44:4b:cf:bf:99: a7:44:9d:17:82:57:82:da:6a:a1:2b:87:52:43:3c:64:22:a4: 54:2b:57:27:06:2b:05:08:92:b7:23:13:8d:7a:33:95:b2:65: a4:3b:45:4d:61:28:d5:0a:f2:29:cd:72:7b:8a:14:2e:0b:e1: 44:a1:01:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvttdpLRNDFDCWG/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk OTE3NmE5MzEtYjVjYy00YTMxLWI1ZTMtMmQ5ZjA5ZmUzZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUqBvADqySkOHfNyfYBh2fdvMdnAmGplyhME hMVwDGLMFrXv3F8XOXLEWjiNk0Vv/5LOOYcV7fs9wavIGAqZDcrR7CLLm5gzmJJj 1j2jsTjFNFt+i0rvOv1r62bQqtKKgLZ+DOurad1vP1GqUxMflzJ2DVyKEjl9Lht5 IjiM/G5iMsm57kmTy3SCoXcgX0mAZw8PwSX9JIJMGjOKjUGAPDTkFjOknfp5esyi uIs/tdVezbzGuK85RPMKry0N2vgu38B4z74Md51k9Bmgx9P+k9eTMbMTOqtVh4mv oJ2EUVcbi6A4scAf1Kr2XvvF9pxMIj5q+RLGDvSF8RyCUkFJtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCHfqqT0hrTFNBg+Np630q2fxL4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQxMWUyYzYtM2FlNC0z MDQ4LWE2YjktMTBiOWY0NGVjZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACr8g2/ZZRKY2fAnd2xe21qb3Gba3RL296pjefZTOHlwnHGsW/Q1 ltABDUIPa0ew9mJ/a36H474SqtoMkBBvfs7jkGivqZBlv2XMBNBWFXAI/qcLAl24 rPkE/HlRWiB3v+2Fuefih6SriSqUZxW+UMPM1PklhJfwZarV7QkwVyXT6pJcvNd7 a+vLjAYLP9w+qjZ/DDtPT9CcMjMTRnkHogVexR9pDoUJK2gO7xkQApMLavn2erBY 5JAwu/mWC8xByvxES8+/madEnReCV4LaaqErh1JDPGQipFQrVycGKwUIkrcjE416 M5WyZaQ7RU1hKNUK8inNcnuKFC4L4UShAdA= -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:10 2025 by rpki-client