This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa File: b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa (raw, json) Hash identifier: ytcdyPe6EOqO1VZ6QEj/r2FuUXjH7K1a+z3Yzyvc4wA= Subject key identifier: CA:1F:21:16:02:3D:50:EA:09:8E:37:B0:3C:6A:77:9B:4D:24:99:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB04A1A24DC49261E1AEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 36632 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:04:a1:a2:4d:c4:92:61:e1:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=26383a16-34f7-4872-b51b-cc138845ba95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:04:97:a4:5c:2b:d1:3c:82:60:2f:54:c1: 42:c4:bc:32:cb:1c:65:8b:f6:6e:ae:ea:b1:3e:e9: 7b:c4:f9:c6:95:68:2f:bb:0f:52:66:e8:3c:d5:27: 60:08:ee:6c:3b:93:90:1a:b8:44:66:2f:47:7f:7c: 2d:80:c2:9d:7e:a2:9c:5a:71:f1:77:bd:08:d9:fa: 25:7a:cd:b2:0e:27:d0:ed:12:49:ad:63:08:58:39: e7:cd:bf:13:e9:7f:4f:ab:df:07:26:5f:8d:66:c0: 87:ce:bb:7a:1f:73:4c:f0:f2:e6:4c:fa:a8:76:57: 39:eb:a9:65:be:83:9c:85:5d:c0:f7:fd:4e:f7:10: 1f:39:9d:86:a4:52:3f:8e:c9:72:03:2d:7c:c4:dc: f4:f1:89:10:ea:1b:a6:34:6e:31:55:1b:df:ea:e8: ae:a6:78:8f:98:56:0c:0d:3b:9e:9e:3a:04:ac:d1: cf:7d:62:43:7c:e1:d7:8e:58:88:7f:07:3d:5c:c0: df:a9:60:a4:a5:62:b5:cd:c5:01:e7:f3:cd:73:2f: 12:9f:5e:23:3e:d7:68:14:58:03:b0:da:e6:62:ff: 89:e1:84:2c:36:f1:c3:d0:a9:8b:ad:6f:18:37:11: a5:e5:92:b5:20:3f:f0:48:f5:bf:ff:22:ad:2d:34: a9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1F:21:16:02:3D:50:EA:09:8E:37:B0:3C:6A:77:9B:4D:24:99:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:12:cd:9b:f8:7d:76:c7:19:34:c2:01:86:5f:ec:ac:83:6a: 8f:95:55:e5:8e:bf:64:97:eb:e6:64:a1:cc:2a:41:43:6d:20: f8:e8:84:ea:be:46:fc:0d:65:89:1d:21:c4:57:6e:b4:7c:7d: 45:b0:bb:a5:3e:a1:ea:66:2d:32:7a:89:81:5a:30:9b:4f:f4: 96:88:75:62:be:13:46:fc:49:f2:0e:c2:f0:32:1b:25:34:0b: 3a:f0:5f:66:90:98:5c:67:33:08:30:59:09:c8:07:19:2c:a8: 14:cd:eb:0b:9f:73:85:3f:c5:67:c5:72:e0:48:67:d9:cb:62: 7f:69:af:03:cc:96:ec:e6:ff:f9:d4:29:5f:ad:85:33:d3:bc: 24:2a:4a:61:fb:c7:bd:04:66:5f:72:9a:b0:29:ac:ee:49:11: d6:a2:1e:08:d8:e9:27:36:04:50:a9:32:3e:1d:fe:43:35:33: 04:ef:cc:04:77:34:df:ff:ad:0e:51:3c:d7:33:69:8f:09:05: 51:70:5e:c7:be:e5:20:2b:0b:86:09:01:46:89:cf:3a:49:54: c4:90:18:01:99:89:53:98:50:28:54:4b:e7:97:0c:15:88:e4: e0:d5:90:f2:a0:cd:38:ed:4c:23:8c:ad:53:03:52:ba:d9:63: 70:68:54:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRywShok3EkmHhrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MjYzODNhMTYtMzRmNy00ODcyLWI1MWItY2MxMzg4NDViYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYYEl6RcK9E8gmAvVMFCxLwyyxxli/Zuruqx Pul7xPnGlWgvuw9SZug81SdgCO5sO5OQGrhEZi9Hf3wtgMKdfqKcWnHxd70I2fol es2yDifQ7RJJrWMIWDnnzb8T6X9Pq98HJl+NZsCHzrt6H3NM8PLmTPqodlc566ll voOchV3A9/1O9xAfOZ2GpFI/jslyAy18xNz08YkQ6humNG4xVRvf6uiupniPmFYM DTuenjoErNHPfWJDfOHXjliIfwc9XMDfqWCkpWK1zcUB5/PNcy8Sn14jPtdoFFgD sNrmYv+J4YQsNvHD0KmLrW8YNxGl5ZK1ID/wSPW//yKtLTSpqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMofIRYCPVDqCY43sDxqd5tNJJm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyMjdmYjAtNGQ0Yi0z MDg5LThiZWMtODBjMGZlMmE0NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkSzZv4fXbHGTTCAYZf7KyDao+VVeWOv2SX6+ZkocwqQUNtIPjo hOq+RvwNZYkdIcRXbrR8fUWwu6U+oepmLTJ6iYFaMJtP9JaIdWK+E0b8SfIOwvAy GyU0CzrwX2aQmFxnMwgwWQnIBxksqBTN6wufc4U/xWfFcuBIZ9nLYn9prwPMluzm //nUKV+thTPTvCQqSmH7x70EZl9ymrAprO5JEdaiHgjY6Sc2BFCpMj4d/kM1MwTv zAR3NN//rQ5RPNczaY8JBVFwXse+5SArC4YJAUaJzzpJVMSQGAGZiVOYUChUS+eX DBWI5ODVkPKgzTjtTCOMrVMDUrrZY3BoVKY= -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:30 2025 by rpki-client