This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa
File: afb7aa4a-02a7-3488-8fda-585f32d697c2.roa (raw, json)
Hash identifier: SWqtdt2jgimFzMbrLsxlD/+9o6I6MbR8PAUKUHWb7qc=
Subject key identifier: AF:4C:14:AB:F0:D2:80:72:F3:47:F2:A7:4D:67:AC:94:72:8A:F3:FD
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C645C15048AD063F5CB878AC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa
Signing time: Fri 02 Jan 2026 14:00:39 +0000
ROA not before: Fri 02 Jan 2026 14:00:39 +0000
ROA not after: Thu 02 Apr 2026 13:00:39 +0000
asID: 397207
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:64:5c:15:04:8a:d0:63:f5:cb:87:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 2 14:00:39 2026 GMT
Not After : Apr 2 13:00:39 2026 GMT
Subject: CN=a584da60-a25e-4a29-906f-b5b2af9f1735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:d1:0c:bc:66:5f:1f:83:1c:96:b3:f3:c3:
ce:7b:2b:3c:a7:05:ce:35:2c:b0:e2:de:c9:1c:82:
21:e9:10:74:be:36:b5:35:b4:72:cb:9f:7e:76:e1:
62:e9:24:26:9d:20:b3:5f:55:7d:9d:1a:67:f8:cb:
f9:4c:e4:78:d9:7a:e0:b7:9b:f9:c4:51:13:af:96:
b0:4a:c1:79:2e:8f:b0:24:50:87:37:ce:bf:e0:8a:
c9:8a:46:0e:d8:56:b7:43:ab:7d:f7:44:51:1e:60:
ca:1f:44:df:21:1f:08:63:af:78:f4:36:d2:4f:90:
2a:73:59:68:de:40:ba:49:c2:56:dd:32:7e:dd:75:
7b:5c:85:5a:a9:9e:ec:d7:f4:c4:ca:9c:52:11:53:
38:c3:bb:5c:e9:31:c6:3e:3b:2b:62:59:60:ad:7d:
16:62:57:b7:ad:54:95:b4:a5:6c:52:59:91:b7:c3:
5f:5b:43:2a:bc:f6:1d:cb:72:c9:3e:c2:f3:03:b8:
33:9d:35:06:9e:f5:35:de:09:f3:ca:f4:ac:08:fe:
fd:a4:59:bf:71:d2:16:40:e1:fc:d8:67:5a:54:da:
2f:d6:e7:4a:d4:33:63:f2:a1:99:7d:fb:41:12:2c:
77:f8:d7:db:4a:f8:1f:3f:ab:82:8f:ee:78:e3:39:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4C:14:AB:F0:D2:80:72:F3:47:F2:A7:4D:67:AC:94:72:8A:F3:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c4:bc:1c:fd:d7:89:13:7a:57:90:ac:8d:0c:4a:99:6d:06:
bb:44:3a:c4:a7:a1:4d:d9:ac:49:8f:f0:ee:f3:5f:6e:f8:78:
8b:08:85:fd:b0:4e:67:82:1f:d4:ed:ea:99:77:c3:35:79:77:
f5:14:ea:47:d1:33:28:29:1f:eb:eb:0a:f0:0c:bb:e8:b5:84:
77:bd:6f:52:cd:68:36:e9:64:ee:27:e9:25:d1:51:62:f0:d1:
87:c2:d2:2c:2d:9e:1c:68:4d:0f:93:56:bd:6d:fb:d8:8d:3f:
e5:8e:af:49:f2:9b:e8:19:2f:33:cc:cc:4d:24:38:79:76:bd:
ba:a7:11:28:f2:00:04:d2:cc:69:df:d9:a4:e1:11:b7:ab:71:
3f:14:c6:03:35:5c:9f:32:ce:df:d5:50:e9:ab:f7:d9:67:e1:
bb:62:79:d9:40:87:95:e7:88:62:a2:56:55:2c:98:7f:1d:a0:
fa:71:c7:24:92:86:9a:dd:29:33:bc:01:93:86:ef:22:6e:23:
19:76:53:97:df:62:77:12:43:45:b8:ce:e2:d4:b1:2e:e6:05:
b8:bb:14:1d:d6:bc:19:d9:bc:30:d5:50:58:9e:b9:fe:ef:6a:
ad:eb:f9:a5:b7:57:41:45:8e:98:66:2c:b3:55:e2:d5:3b:37:
e4:65:b1:06
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBUEitBj9cuHisAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk
YTU4NGRhNjAtYTI1ZS00YTI5LTkwNmYtYjViMmFmOWYxNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrfRDLxmXx+DHJaz88POeys8pwXONSyw4t7J
HIIh6RB0vja1NbRyy59+duFi6SQmnSCzX1V9nRpn+Mv5TOR42Xrgt5v5xFETr5aw
SsF5Lo+wJFCHN86/4IrJikYO2Fa3Q6t990RRHmDKH0TfIR8IY6949DbST5Aqc1lo
3kC6ScJW3TJ+3XV7XIVaqZ7s1/TEypxSEVM4w7tc6THGPjsrYllgrX0WYle3rVSV
tKVsUlmRt8NfW0MqvPYdy3LJPsLzA7gznTUGnvU13gnzyvSsCP79pFm/cdIWQOH8
2GdaVNov1udK1DNj8qGZfftBEix3+NfbSvgfP6uCj+544zmOWwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK9MFKvw0oBy80fyp01nrJRyivP9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZiN2FhNGEtMDJhNy0z
NDg4LThmZGEtNTg1ZjMyZDY5N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAdxLwc/deJE3pXkKyNDEqZbQa7RDrEp6FN2axJ
j/Du819u+HiLCIX9sE5ngh/U7eqZd8M1eXf1FOpH0TMoKR/r6wrwDLvotYR3vW9S
zWg26WTuJ+kl0VFi8NGHwtIsLZ4caE0Pk1a9bfvYjT/ljq9J8pvoGS8zzMxNJDh5
dr26pxEo8gAE0sxp39mk4RG3q3E/FMYDNVyfMs7f1VDpq/fZZ+G7YnnZQIeV54hi
olZVLJh/HaD6ccckkoaa3SkzvAGThu8ibiMZdlOX32J3EkNFuM7i1LEu5gW4uxQd
1rwZ2bww1VBYnrn+72qt6/mlt1dBRY6YZiyzVeLVOzfkZbEG
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:51 2026 by rpki-client