This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: e951Oy+BfvRnF3QUJuDcH7VM0wB6vpanzii/abFrgZU= Subject key identifier: E8:97:C1:D7:11:FA:72:AB:A3:65:37:AA:9C:90:E2:A5:5F:C4:53:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC00B05492F9A29E9D0B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:00:b0:54:92:f9:a2:9e:9d:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=0bec824a-98f9-4f4c-929a-0172833267b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:0b:89:06:bf:e1:bb:58:6b:64:2b:6c:4b: 0a:95:22:14:db:f6:4a:64:3a:32:2b:d6:46:81:57: db:b3:16:74:64:15:7d:8a:9e:68:fd:3f:1a:a8:9a: e1:71:cf:69:8c:86:31:ed:d9:09:11:64:a8:8f:b3: c7:43:3e:c3:ad:1e:7a:81:3c:0e:90:dc:b0:85:bf: 36:61:b6:94:0f:54:12:91:f4:84:2c:9f:96:ca:51: cb:48:60:5f:29:0b:1b:db:66:15:be:43:67:27:b5: c0:9d:c3:32:cd:d3:c9:72:79:39:06:b4:bd:3a:82: b8:b3:13:f1:4c:b5:20:1a:4e:10:98:9b:47:42:02: 5a:ef:7a:ef:f5:9c:da:82:c8:d3:51:6f:23:9b:01: 6f:d1:32:25:44:4e:60:38:d2:4c:5f:a4:48:9d:61: 74:74:df:65:4f:12:d7:85:e0:28:b5:a6:fc:8d:b8: 5d:4c:26:1e:e7:33:12:27:eb:36:bc:53:31:db:b2: ea:8a:d9:0a:ac:eb:1d:46:b9:33:25:df:c1:db:1f: 4f:fe:ce:d1:8f:8f:6a:b1:d7:23:14:97:c6:26:09: c4:0d:99:e9:cc:a6:37:58:43:18:f4:73:ca:ae:bb: af:d4:56:ca:ff:22:20:c5:21:b7:a5:5b:d1:b0:d6: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:97:C1:D7:11:FA:72:AB:A3:65:37:AA:9C:90:E2:A5:5F:C4:53:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:22:ee:f6:9c:34:68:07:d2:4a:9d:78:e3:64:f6:56:a3:e4: 91:b1:63:0c:b2:8c:41:8f:56:5c:71:0d:69:7c:ff:01:e0:16: 4b:52:1d:74:95:05:e0:03:4e:8d:01:3c:56:d8:06:04:f7:68: 92:73:e0:83:3e:94:2c:8e:e6:28:e2:31:3e:28:51:7a:32:10: 94:b6:1b:85:89:36:07:8c:7f:0d:06:b7:64:09:14:57:d6:58: b9:40:d7:60:47:dc:01:65:c5:13:dd:9f:ce:4c:47:df:44:94: 78:fe:8b:e7:d5:ee:8d:75:77:ca:e1:37:92:d5:f6:b7:b5:e3: 22:4b:0d:86:76:13:b9:c2:03:c4:ce:d2:dd:fc:1d:97:62:0b: a8:12:7b:df:a6:9c:86:6d:ab:f9:c3:f4:65:9b:3c:35:e9:6f: 9a:ab:3a:4c:e1:33:6b:40:d6:25:a4:55:76:1c:e9:3b:57:50: 86:64:a7:29:45:78:6a:e7:8f:0a:f7:65:a5:9b:38:e5:be:b9: 93:8f:d4:8f:6e:d0:a2:bb:26:9d:9f:f0:45:5e:71:bc:92:9c: 90:b2:f7:22:b8:f8:7b:b2:93:08:05:7b:69:35:46:1b:33:47: ba:ae:ab:af:7f:1d:6b:13:3f:7b:42:b1:ae:09:8f:d7:2c:8d: c2:83:86:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3ACwVJL5op6dCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MGJlYzgyNGEtOThmOS00ZjRjLTkyOWEtMDE3MjgzMzI2N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywULiQa/4btYa2QrbEsKlSIU2/ZKZDoyK9ZG gVfbsxZ0ZBV9ip5o/T8aqJrhcc9pjIYx7dkJEWSoj7PHQz7DrR56gTwOkNywhb82 YbaUD1QSkfSELJ+WylHLSGBfKQsb22YVvkNnJ7XAncMyzdPJcnk5BrS9OoK4sxPx TLUgGk4QmJtHQgJa73rv9ZzagsjTUW8jmwFv0TIlRE5gONJMX6RInWF0dN9lTxLX heAotab8jbhdTCYe5zMSJ+s2vFMx27LqitkKrOsdRrkzJd/B2x9P/s7Rj49qsdcj FJfGJgnEDZnpzKY3WEMY9HPKrruv1FbK/yIgxSG3pVvRsNavkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiXwdcR+nKro2U3qpyQ4qVfxFMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEi7vacNGgH0kqdeONk9laj5JGxYwyyjEGPVlxxDWl8/wHgFktS HXSVBeADTo0BPFbYBgT3aJJz4IM+lCyO5ijiMT4oUXoyEJS2G4WJNgeMfw0Gt2QJ FFfWWLlA12BH3AFlxRPdn85MR99ElHj+i+fV7o11d8rhN5LV9re14yJLDYZ2E7nC A8TO0t38HZdiC6gSe9+mnIZtq/nD9GWbPDXpb5qrOkzhM2tA1iWkVXYc6TtXUIZk pylFeGrnjwr3ZaWbOOW+uZOP1I9u0KK7Jp2f8EVecbySnJCy9yK4+HuykwgFe2k1 RhszR7quq69/HWsTP3tCsa4Jj9csjcKDho4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:21 2026 by rpki-client