This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa File: a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa (raw, json) Hash identifier: QpS1o7+HIvnJqu6cOJVFaTODPCgiZmu59r/eHBi2WHw= Subject key identifier: 90:8E:4D:50:D8:F9:B8:38:47:98:56:E3:89:51:1A:5D:81:ED:39:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16462C9BC7705A4E65900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396552 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:64:62:c9:bc:77:05:a4:e6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=02e7b9a3-be25-44aa-8686-9329c1e83d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:75:a3:a8:0b:a7:ed:d6:d5:23:5f:45:97: b0:dd:45:92:a1:f4:44:af:7a:68:4a:5f:30:6c:8e: 21:ec:ef:7b:49:22:c9:fd:2a:41:63:1a:fb:72:df: 93:a7:4d:36:db:b3:10:fe:10:8e:eb:f4:78:b2:67: 71:a9:63:dc:62:05:56:67:4e:0b:d2:65:93:43:29: 87:2f:3d:07:ce:d1:7d:52:4d:7e:a5:3c:31:10:40: 93:43:d2:37:6e:73:5a:da:70:96:83:be:59:a5:56: 47:d7:68:5d:04:4a:92:40:62:23:5e:6c:b2:40:55: 12:9e:eb:0d:63:4c:ec:82:ee:c4:84:65:4f:a5:ed: 1b:13:c5:70:8d:75:d3:1a:48:a6:3d:2d:99:db:68: 85:9d:9d:af:41:b7:bb:41:cb:88:49:90:e9:f7:21: 4d:b6:e7:f1:eb:65:7b:7e:71:18:a4:bd:5d:52:8c: e7:5e:4c:7a:96:04:04:b0:bc:9f:09:a6:ee:7f:64: 69:12:6b:4e:2a:00:c2:3c:b0:c1:ff:f9:f2:48:80: ef:b7:b0:c4:5d:4a:00:58:9b:cc:9b:53:12:7d:c6: d4:e0:21:28:3c:59:50:58:80:d5:99:1e:b8:94:4c: 64:88:a7:e6:f3:20:9b:12:89:05:48:30:9c:71:40: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:4D:50:D8:F9:B8:38:47:98:56:E3:89:51:1A:5D:81:ED:39:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c5:7d:e9:ac:c9:b5:2e:9e:df:f7:95:fc:c0:d0:43:5d:2a: 03:14:9d:2e:6c:0a:f2:35:9a:51:ce:68:06:3b:02:e2:d4:bd: 94:3f:bd:67:3f:33:01:d7:4a:c3:e3:54:d3:c3:ba:d3:40:54: 63:13:6a:35:65:87:fc:32:ca:12:72:21:cc:70:4e:c9:cb:c4: 4e:e1:42:35:41:12:85:44:eb:0f:e4:28:fc:21:89:3c:ff:bc: 5a:8b:74:51:fe:04:12:b1:39:49:b0:5e:5a:0a:7b:7f:91:95: ca:2c:a3:57:16:40:95:39:63:a3:6f:b8:02:fe:ef:ac:a7:e8: 34:72:82:cd:66:86:50:8d:c7:69:2a:30:c7:53:98:21:0d:b5: 23:8a:6f:04:3c:a6:a6:6b:ae:e5:ad:08:a0:3b:50:79:6d:1f: de:9e:9a:4c:60:8e:9e:3d:d9:e1:1e:08:52:51:69:a5:3e:69: 8e:b2:98:02:2a:ac:9a:15:a3:d4:b2:6d:aa:61:7a:23:01:14: da:4e:fd:32:87:40:6d:ca:eb:ef:5c:96:7d:69:7b:d3:1b:34: 4b:df:b7:ed:16:6b:e6:c9:c4:6c:dc:7a:a0:1b:cd:9c:23:a2: de:bf:01:03:f1:73:34:86:16:02:4c:96:77:9c:b9:84:0e:ac: 09:2b:b3:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WRiybx3BaTmWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDJlN2I5YTMtYmUyNS00NGFhLTg2ODYtOTMyOWMxZTgzZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscN1o6gLp+3W1SNfRZew3UWSofREr3poSl8w bI4h7O97SSLJ/SpBYxr7ct+Tp00227MQ/hCO6/R4smdxqWPcYgVWZ04L0mWTQymH Lz0HztF9Uk1+pTwxEECTQ9I3bnNa2nCWg75ZpVZH12hdBEqSQGIjXmyyQFUSnusN Y0zsgu7EhGVPpe0bE8VwjXXTGkimPS2Z22iFnZ2vQbe7QcuISZDp9yFNtufx62V7 fnEYpL1dUoznXkx6lgQEsLyfCabuf2RpEmtOKgDCPLDB//nySIDvt7DEXUoAWJvM m1MSfcbU4CEoPFlQWIDVmR64lExkiKfm8yCbEokFSDCccUBc1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJCOTVDY+bg4R5hW44lRGl2B7TnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdhNjcyMzEtNGFkNS0z MmQxLWFlZDktMTk0ZGQxZWYwZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQArxX3prMm1Lp7f95X8wNBDXSoDFJ0ubAryNZpR zmgGOwLi1L2UP71nPzMB10rD41TTw7rTQFRjE2o1ZYf8MsoSciHMcE7Jy8RO4UI1 QRKFROsP5Cj8IYk8/7xai3RR/gQSsTlJsF5aCnt/kZXKLKNXFkCVOWOjb7gC/u+s p+g0coLNZoZQjcdpKjDHU5ghDbUjim8EPKama67lrQigO1B5bR/enppMYI6ePdnh HghSUWmlPmmOspgCKqyaFaPUsm2qYXojARTaTv0yh0BtyuvvXJZ9aXvTGzRL37ft FmvmycRs3HqgG82cI6LevwED8XM0hhYCTJZ3nLmEDqwJK7O1 -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:21 2026 by rpki-client