This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa File: bcd1f127-2932-3f37-b293-39529e72599c.roa (raw, json) Hash identifier: P5I9uraM0Fa9WgfLQH9lmo1X/vNQh+qr2XfWxF7GZVk= Subject key identifier: D2:A4:A2:3F:68:E2:D3:E7:60:27:02:55:31:EA:D7:86:85:9B:9C:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBC51881B51D6E365EDD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 21313 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c5:18:81:b5:1d:6e:36:5e:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=c224b36f-866d-46e9-9e53-f088d91f5942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6f:ea:55:7c:8b:46:8a:ce:a5:f4:6a:36:70: 08:35:47:2b:c7:7d:49:16:56:96:54:59:f1:cf:4f: fc:5c:16:27:f9:66:d5:22:32:b2:e9:c4:bd:3f:07: fc:4f:e4:77:a1:a6:56:d0:c8:5c:a0:87:13:7b:28: 50:41:f1:8f:2c:3b:7c:50:eb:88:9f:07:86:c8:02: 7e:64:2f:d8:8d:7e:3f:a9:46:d0:27:36:b3:23:06: 10:fe:ae:b8:98:c8:ce:3d:dd:bd:62:97:96:26:74: 5c:95:b8:8d:d7:05:9f:ee:6a:87:7e:82:aa:f6:6c: c9:ae:3e:c3:cc:89:76:c3:55:ab:2f:12:09:69:d4: eb:e0:c8:b6:0c:c2:50:fa:9b:31:16:28:e0:dd:21: ac:ae:84:6c:9d:dc:72:0d:f0:ce:0f:65:68:04:9a: 97:d9:27:72:78:5c:40:f3:57:95:6d:f3:cf:8b:8c: 9a:79:b2:b7:42:fa:8a:22:73:42:49:05:68:db:2b: 59:23:aa:9f:f1:fa:fb:77:28:ce:a6:c8:29:d0:f4: ad:ce:d6:cd:b7:69:a4:00:14:f6:75:19:3b:9b:23: b8:ac:e2:4a:2a:a0:c6:97:bd:a2:2f:ef:e3:85:13: d9:26:7d:e2:e1:ad:67:12:05:cd:82:4c:cd:c6:24: e0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:A2:3F:68:E2:D3:E7:60:27:02:55:31:EA:D7:86:85:9B:9C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:09:3b:6f:3b:97:94:58:87:a4:86:b3:5d:ea:c0:92:22:6f: 42:43:99:bd:d8:8f:15:cc:ab:75:3f:80:0f:0e:07:c6:1f:c7: 6f:33:c8:be:70:36:d2:9a:2b:34:d7:1b:88:cd:b4:e0:e9:47: f0:a8:ce:bc:de:c0:5e:b5:fa:b0:95:30:57:f2:79:26:fe:c6: b3:e5:c9:62:b2:d6:27:d0:67:e4:68:37:1d:f3:89:02:d9:96: 6c:c1:20:c1:25:4f:b6:d2:f8:8a:9f:8d:c3:cf:d9:fd:d7:22: af:5d:50:3c:09:b4:b5:4e:6c:66:9e:86:cb:e3:26:f7:60:2a: d9:c6:7b:f5:55:aa:f6:fe:6d:e2:3f:bd:94:99:6f:70:a1:3f: 0d:3c:ff:a9:7b:af:3d:f5:2c:cb:d5:35:c2:2b:60:93:09:34: 0f:e0:e4:9f:fe:f9:43:08:5e:10:cf:56:c5:bd:ef:98:39:c8: eb:42:c6:11:40:43:45:66:c3:ed:26:2b:94:f0:53:db:8f:99: 7d:2b:c5:da:fe:6f:69:f9:c9:6d:17:e8:24:bb:d4:e8:87:c3: d3:1d:db:ae:a2:bf:33:c5:48:af:ac:98:66:4c:44:4c:70:2a: 13:40:ce:ae:6b:18:64:30:9c:73:1e:9d:83:c6:d0:a5:f2:e3: af:7e:13:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC28UYgbUdbjZe3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YzIyNGIzNmYtODY2ZC00NmU5LTllNTMtZjA4OGQ5MWY1OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m/qVXyLRorOpfRqNnAINUcrx31JFlaWVFnx z0/8XBYn+WbVIjKy6cS9Pwf8T+R3oaZW0MhcoIcTeyhQQfGPLDt8UOuInweGyAJ+ ZC/YjX4/qUbQJzazIwYQ/q64mMjOPd29YpeWJnRclbiN1wWf7mqHfoKq9mzJrj7D zIl2w1WrLxIJadTr4Mi2DMJQ+psxFijg3SGsroRsndxyDfDOD2VoBJqX2SdyeFxA 81eVbfPPi4yaebK3QvqKInNCSQVo2ytZI6qf8fr7dyjOpsgp0PStztbNt2mkABT2 dRk7myO4rOJKKqDGl72iL+/jhRPZJn3i4a1nEgXNgkzNxiTgvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNKkoj9o4tPnYCcCVTHq14aFm5y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNkMWYxMjctMjkzMi0z ZjM3LWIyOTMtMzk1MjllNzI1OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAJO287l5RYh6SGs13qwJIib0JDmb3YjxXMq3U/gA8OB8Yfx28z yL5wNtKaKzTXG4jNtODpR/CozrzewF61+rCVMFfyeSb+xrPlyWKy1ifQZ+RoNx3z iQLZlmzBIMElT7bS+IqfjcPP2f3XIq9dUDwJtLVObGaehsvjJvdgKtnGe/VVqvb+ beI/vZSZb3ChPw08/6l7rz31LMvVNcIrYJMJNA/g5J/++UMIXhDPVsW975g5yOtC xhFAQ0Vmw+0mK5TwU9uPmX0rxdr+b2n5yW0X6CS71OiHw9Md266ivzPFSK+smGZM RExwKhNAzq5rGGQwnHMenYPG0KXy469+E2A= -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:05 2026 by rpki-client