This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa File: ae30b946-695a-3c1c-bfeb-9162e713e318.roa (raw, json) Hash identifier: NWF57HBvbqV9Wgtk44t/iT6kZclz02z7ZuJOqBOX0UQ= Subject key identifier: 49:31:84:55:29:DC:ED:9B:74:E7:A2:22:17:7A:1F:3C:54:5E:4A:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB00A67E57F77B52838500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 21313 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:00:a6:7e:57:f7:7b:52:83:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=0d5710d6-c160-4a6e-b3c6-5c667b8abf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:84:3e:03:12:a9:9e:33:85:14:65:32:b7: 42:35:6c:f6:0e:39:3e:da:9e:1f:cb:99:57:68:49: 2e:f5:4e:72:29:d0:9c:d1:32:c0:c2:7e:38:25:1d: 91:b0:af:34:0f:df:d9:f2:2a:1e:b8:7a:66:3f:ea: d6:4f:0d:00:4f:8e:47:f2:9d:3d:11:c1:0f:c2:b4: 30:28:1c:63:21:c2:52:73:61:ef:af:8f:a5:19:be: c6:cd:0c:11:df:9e:dd:10:21:47:94:a0:97:61:63: 52:d3:97:79:1f:0d:d4:fa:d3:c5:42:11:dd:90:02: 58:85:80:9e:62:75:84:c9:67:d2:90:f5:39:62:d9: 85:1f:fd:61:a8:95:a9:77:50:82:0e:da:2f:29:aa: 6d:c1:aa:99:a1:9e:a4:75:dc:06:fe:25:37:28:cd: 3b:09:d9:44:cb:50:5f:2a:c4:4e:4c:d8:b9:29:00: e6:d1:81:27:02:08:0a:79:fd:86:79:4d:b9:5a:69: ef:0f:14:94:4c:37:fd:50:82:fd:1c:e5:cb:b4:3b: 95:8f:7f:1a:44:e6:38:90:d8:83:c0:ed:fe:ce:2f: 1c:2e:44:ff:19:4b:91:23:eb:94:ae:a7:4b:48:dd: d3:87:0d:7a:95:58:e6:4b:da:d1:ad:e0:c0:91:6f: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:31:84:55:29:DC:ED:9B:74:E7:A2:22:17:7A:1F:3C:54:5E:4A:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:12:87:f0:4f:7c:df:cc:e7:fb:94:3c:e4:bb:6e:a0:d2:3b: ad:69:2e:53:48:cb:fc:3b:be:90:5b:d0:79:23:a5:cb:2e:68: 4f:b9:9d:e4:20:09:4e:b1:1e:f9:c2:4f:4a:37:9a:14:8d:5c: aa:7e:29:1e:9b:20:2a:53:f7:a2:68:34:dc:9e:81:19:f5:9f: d8:8e:98:d2:ad:1d:58:a8:48:e9:f8:43:ff:cf:d5:e6:18:00: 35:b8:bf:f6:5e:17:3f:74:f2:e8:f6:e3:6f:4c:73:8b:0e:85: 7e:b5:08:78:ab:b6:78:d8:75:22:72:48:af:ab:9d:ed:69:12: 77:30:81:a0:c4:14:f5:e3:9f:85:7c:51:e3:cb:50:01:c5:52: d8:c2:57:e8:a5:ca:c0:a3:5e:f0:ca:31:b2:41:9b:69:64:2d: e3:5e:d0:a2:7a:4f:1b:9e:e1:d6:66:f1:b4:3a:67:00:07:d0: ad:1d:a8:4d:2d:36:a6:26:98:02:b8:b5:d4:3d:41:41:94:7e: 15:67:ea:7e:ca:00:42:b5:c9:1e:98:2f:72:e0:27:ae:10:a7: 1b:86:d7:7e:f3:98:c5:3f:a8:eb:fc:79:dc:f6:df:1b:45:08: f5:e8:d2:c4:b6:4d:11:ac:04:9d:64:73:71:36:16:d4:00:da: de:7d:05:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRywCmflf3e1KDhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MGQ1NzEwZDYtYzE2MC00YTZlLWIzYzYtNWM2NjdiOGFiZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhayEPgMSqZ4zhRRlMrdCNWz2Djk+2p4fy5lX aEku9U5yKdCc0TLAwn44JR2RsK80D9/Z8ioeuHpmP+rWTw0AT45H8p09EcEPwrQw KBxjIcJSc2Hvr4+lGb7GzQwR357dECFHlKCXYWNS05d5Hw3U+tPFQhHdkAJYhYCe YnWEyWfSkPU5YtmFH/1hqJWpd1CCDtovKaptwaqZoZ6kddwG/iU3KM07CdlEy1Bf KsROTNi5KQDm0YEnAggKef2GeU25WmnvDxSUTDf9UIL9HOXLtDuVj38aROY4kNiD wO3+zi8cLkT/GUuRI+uUrqdLSN3Thw16lVjmS9rRreDAkW9EcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkxhFUp3O2bdOeiIhd6HzxUXkraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWUzMGI5NDYtNjk1YS0z YzFjLWJmZWItOTE2MmU3MTNlMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4Sh/BPfN/M5/uUPOS7bqDSO61pLlNIy/w7vpBb0HkjpcsuaE+5 neQgCU6xHvnCT0o3mhSNXKp+KR6bICpT96JoNNyegRn1n9iOmNKtHVioSOn4Q//P 1eYYADW4v/ZeFz908uj2429Mc4sOhX61CHirtnjYdSJySK+rne1pEncwgaDEFPXj n4V8UePLUAHFUtjCV+ilysCjXvDKMbJBm2lkLeNe0KJ6Txue4dZm8bQ6ZwAH0K0d qE0tNqYmmAK4tdQ9QUGUfhVn6n7KAEK1yR6YL3LgJ64QpxuG137zmMU/qOv8edz2 3xtFCPXo0sS2TRGsBJ1kc3E2FtQA2t59BVU= -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:27 2025 by rpki-client