This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa File: b394f078-30ab-3099-bca3-d281d10a1e38.roa (raw, json) Hash identifier: rxrpJMkO6v4cIklirYvexNQ1vv4534+m/dIrkHDZVp0= Subject key identifier: 83:6A:7F:CA:83:48:28:04:6A:59:E1:7C:56:49:04:FA:6C:98:25:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBE1D6F6AD46CA200CB554 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 397197 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e1:d6:f6:ad:46:ca:20:0c:b5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2babc664-aa65-4059-a32c-bac18e86ca4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:07:d9:4b:2e:29:a5:d9:3f:e0:ec:23:5c: 70:62:53:58:65:a3:3d:87:77:d9:5a:6e:65:62:58: 9d:df:f5:7d:ee:6c:82:ac:9b:a1:6d:02:ac:4a:bf: 08:fa:aa:5c:a6:de:ad:f9:7a:6a:be:da:d5:80:dc: 29:53:18:80:82:90:ac:e9:b4:a0:e3:b4:31:61:56: 78:ae:d0:4e:0d:9a:e2:1e:9a:03:54:f1:ec:ac:dc: c5:e2:8c:4f:0f:ab:b0:9c:fb:35:b4:b5:18:f8:cf: ee:10:16:f7:4c:ff:e2:69:3e:5d:43:44:cf:59:08: 65:6f:b4:21:b8:9c:e1:5e:6f:36:bb:89:23:44:8a: 41:10:3f:8e:7c:a9:f2:b0:e5:14:1d:95:d7:2c:1a: 72:1d:11:7f:c3:f6:82:3d:3e:65:50:51:04:94:fc: 60:e3:3e:6d:48:8d:32:8c:ad:2c:27:0d:d8:2b:12: ff:4a:cd:00:a6:b0:29:c1:16:d7:84:72:6b:22:c8: 60:73:77:77:e1:a8:d2:74:45:52:37:9f:9d:a7:1c: d9:01:e8:57:ac:96:72:e1:37:e2:ba:7d:0d:a1:97: 20:50:93:78:fc:da:fc:1b:89:f8:46:98:d6:58:51: 1c:8a:bd:a7:74:b4:5b:25:df:e6:8c:9a:5f:1e:c6: b9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:7F:CA:83:48:28:04:6A:59:E1:7C:56:49:04:FA:6C:98:25:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0f:ce:b1:f7:1d:96:95:8d:76:83:40:be:f6:3b:13:ae:73: 3b:86:cb:3c:c1:02:53:35:28:14:0b:1f:c9:d4:35:ed:e2:8f: cf:ea:0f:82:0b:9f:d0:73:8f:53:35:81:ca:36:b3:89:e5:68: 72:22:48:11:33:50:7e:78:82:7e:4b:b6:b8:c2:2d:c5:3c:2d: 97:c6:d5:66:c0:03:55:b8:45:c5:03:fb:a1:bd:5f:e3:bb:0d: 3d:4f:e6:2f:4c:fb:68:5b:f5:98:47:1a:13:b2:13:46:56:0a: c7:fe:7e:76:1b:98:bc:59:aa:6b:ad:ad:39:1f:f8:29:50:cc: 83:af:e3:f4:eb:03:06:a4:38:33:f7:ca:a7:78:5b:bb:50:65: 64:58:e3:e2:a1:c2:b5:22:a7:3f:3a:7d:3b:95:03:8b:e8:f4: 62:9c:95:fb:6e:69:67:a3:9d:81:81:87:0a:72:f5:c4:05:25: 61:ab:b9:50:d2:d6:dd:e9:89:c2:0a:c3:9e:4b:bb:60:5e:e4: 05:ab:ae:be:f3:a1:46:3f:4c:73:8f:f9:6e:11:e0:db:3c:74: 81:a7:01:49:f6:68:da:30:19:f1:eb:b0:99:5f:d9:e5:c1:f9: 9c:db:7a:9e:de:0d:ff:74:9a:d8:0b:34:07:03:5f:7b:d2:c9: 18:fd:d3:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2+HW9q1GyiAMtVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmJhYmM2NjQtYWE2NS00MDU5LWEzMmMtYmFjMThlODZjYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKkH2UsuKaXZP+DsI1xwYlNYZaM9h3fZWm5l Ylid3/V97myCrJuhbQKsSr8I+qpcpt6t+XpqvtrVgNwpUxiAgpCs6bSg47QxYVZ4 rtBODZriHpoDVPHsrNzF4oxPD6uwnPs1tLUY+M/uEBb3TP/iaT5dQ0TPWQhlb7Qh uJzhXm82u4kjRIpBED+OfKnysOUUHZXXLBpyHRF/w/aCPT5lUFEElPxg4z5tSI0y jK0sJw3YKxL/Ss0AprApwRbXhHJrIshgc3d34ajSdEVSN5+dpxzZAehXrJZy4Tfi un0NoZcgUJN4/Nr8G4n4RpjWWFEcir2ndLRbJd/mjJpfHsa5BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFINqf8qDSCgEalnhfFZJBPpsmCXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM5NGYwNzgtMzBhYi0z MDk5LWJjYTMtZDI4MWQxMGExZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAPzrH3HZaVjXaDQL72OxOuczuGyzzBAlM1KBQLH8nUNe3ij8/q D4ILn9Bzj1M1gco2s4nlaHIiSBEzUH54gn5LtrjCLcU8LZfG1WbAA1W4RcUD+6G9 X+O7DT1P5i9M+2hb9ZhHGhOyE0ZWCsf+fnYbmLxZqmutrTkf+ClQzIOv4/TrAwak ODP3yqd4W7tQZWRY4+KhwrUipz86fTuVA4vo9GKclftuaWejnYGBhwpy9cQFJWGr uVDS1t3picIKw55Lu2Be5AWrrr7zoUY/THOP+W4R4Ns8dIGnAUn2aNowGfHrsJlf 2eXB+Zzbep7eDf90mtgLNAcDX3vSyRj90yU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:08 2026 by rpki-client