This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa File: ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa (raw, json) Hash identifier: 5RfJYiVupOXtpAyUUX0t8RwLeaRps3PCmy209kMwNpo= Subject key identifier: 60:CE:26:78:0A:E3:B8:DD:54:E5:FB:BC:43:32:A4:99:02:45:5C:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630E397B4B91900F2A34B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396605 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e3:97:b4:b9:19:00:f2:a3:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=5140ceee-a3f2-43f8-8df7-9fe96a780222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:7c:2e:09:14:a9:05:45:39:4c:3d:b7:69: 77:56:ab:89:fe:9e:0e:8c:af:1f:ac:be:cd:a3:68: cf:6f:e6:f0:75:86:c9:4b:1d:a1:63:ef:12:7c:fe: af:81:f6:84:3d:b7:9c:bd:fd:30:e2:e2:b7:d6:24: f9:0c:84:d9:b7:c6:0c:96:a0:e0:ca:17:e9:a8:f7: 76:80:66:65:3c:f9:3e:54:8f:45:56:66:a0:5a:2b: 6d:64:0b:49:eb:9a:1b:f8:bb:e2:fa:ab:4d:e8:8e: ba:f8:06:3b:1b:3b:e1:85:41:79:16:12:93:fe:51: ed:06:37:fb:21:ce:28:7c:6c:b2:67:19:c0:ed:d3: fd:f9:f7:4c:ee:8f:e1:7a:78:81:6b:76:6b:2b:28: d0:29:de:1e:0a:43:ff:dd:b6:72:35:68:37:f7:bb: ec:63:0c:b1:4b:5a:19:1e:20:e0:f1:07:0f:77:83: 6f:5c:38:d5:9e:42:3a:b0:29:34:20:73:32:25:64: f9:30:d9:49:e9:3d:ff:06:bc:ed:da:4b:cc:45:24: a9:45:1a:cc:57:ce:b9:d4:83:2a:fb:76:c3:71:59: ab:38:5f:e9:ad:62:b1:66:71:42:69:42:65:3c:1b: 0d:13:2f:19:43:9a:2c:34:86:cf:c4:57:5f:a8:59: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CE:26:78:0A:E3:B8:DD:54:E5:FB:BC:43:32:A4:99:02:45:5C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5c:33:3d:58:c1:2a:ae:24:6e:91:a8:9a:ff:2b:4f:6e:16: b5:24:b7:c7:c1:5f:22:ad:ae:1f:cb:2f:12:dd:e6:fe:7d:7f: 7b:8c:20:94:19:ec:c0:50:1f:3b:cf:0d:97:05:c4:c6:a3:2a: 99:c8:bd:89:26:25:d9:82:ed:08:a6:2b:1f:06:8e:dc:80:81: d8:da:4c:22:97:20:15:f6:fa:14:31:5a:cf:24:e3:98:3b:7e: 83:fd:bf:ce:ee:a3:bd:f5:91:65:ed:13:b6:01:14:2a:e4:3c: a4:be:ac:74:c8:c1:c3:2e:0a:7f:ce:43:2b:5a:f1:73:07:69: f4:a7:9f:fe:7e:9f:8a:cc:f8:4b:0d:f4:6e:77:1b:8a:87:8a: 99:67:fe:13:1b:8d:5e:96:04:51:80:38:be:f9:f6:4b:53:09: f2:87:99:c3:3d:a7:82:a2:d0:53:96:94:ef:ef:a5:19:08:2c: bf:06:30:9b:99:de:fd:29:59:27:cf:76:64:95:7b:26:8b:ec: 90:d5:b0:a5:bc:51:53:a7:e3:be:40:f4:4a:07:17:33:ab:39: cc:a7:02:2b:77:6a:46:bd:d5:e4:a2:8b:52:d7:7e:aa:25:1a: c8:17:24:1c:4d:e4:ef:8c:2a:e0:28:50:0f:37:77:1e:16:57: 8e:41:80:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMOOXtLkZAPKjS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NTE0MGNlZWUtYTNmMi00M2Y4LThkZjctOWZlOTZhNzgwMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArup8LgkUqQVFOUw9t2l3VquJ/p4OjK8frL7N o2jPb+bwdYbJSx2hY+8SfP6vgfaEPbecvf0w4uK31iT5DITZt8YMlqDgyhfpqPd2 gGZlPPk+VI9FVmagWittZAtJ65ob+Lvi+qtN6I66+AY7GzvhhUF5FhKT/lHtBjf7 Ic4ofGyyZxnA7dP9+fdM7o/heniBa3ZrKyjQKd4eCkP/3bZyNWg397vsYwyxS1oZ HiDg8QcPd4NvXDjVnkI6sCk0IHMyJWT5MNlJ6T3/Brzt2kvMRSSpRRrMV8651IMq +3bDcVmrOF/prWKxZnFCaUJlPBsNEy8ZQ5osNIbPxFdfqFnlBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGDOJngK47jdVOX7vEMypJkCRVz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWQ3ZjI3ZDgtNjUzNi0z NGU0LWFhODUtZmNhYWRhOWIxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBIXDM9WMEqriRukaia/ytPbha1JLfHwV8ira4f yy8S3eb+fX97jCCUGezAUB87zw2XBcTGoyqZyL2JJiXZgu0IpisfBo7cgIHY2kwi lyAV9voUMVrPJOOYO36D/b/O7qO99ZFl7RO2ARQq5Dykvqx0yMHDLgp/zkMrWvFz B2n0p5/+fp+KzPhLDfRudxuKh4qZZ/4TG41elgRRgDi++fZLUwnyh5nDPaeCotBT lpTv76UZCCy/BjCbmd79KVknz3ZklXsmi+yQ1bClvFFTp+O+QPRKBxczqznMpwIr d2pGvdXkootS136qJRrIFyQcTeTvjCrgKFAPN3ceFleOQYDd -----END CERTIFICATE-----Generated at Sat Dec 6 14:44:37 2025 by rpki-client