This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa File: bf7da230-50ad-3769-8c60-561c844420a1.roa (raw, json) Hash identifier: +9eeThBaVLEUkI4/9x1rkVmuAOlz4SwTWdlux8Wm+cQ= Subject key identifier: 0D:D5:B7:EF:CD:03:8F:FF:12:AC:6A:74:82:63:2B:11:C3:8A:88:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB1F47779E46D5A99CE200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396591 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:1f:47:77:9e:46:d5:a9:9c:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=bd49c843-3473-4b9c-bfac-95218edf0086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:d8:36:e9:8c:d2:95:32:52:90:58:bb:4f: 65:50:c0:a1:fc:4a:9a:95:a1:08:86:94:21:05:95: 08:82:ae:c3:50:a4:92:12:c9:9f:5e:f8:56:0f:61: 30:27:cd:64:5a:0b:61:dd:86:c9:5c:90:60:ab:95: 73:71:25:d0:df:ea:9e:7d:38:c2:37:65:ef:d2:90: 97:21:45:1a:f4:49:61:f7:69:da:fd:50:c9:ec:0d: ad:af:83:43:70:ee:3a:a0:e0:07:3e:e1:c6:de:a5: ed:a7:67:ce:98:16:d6:5d:09:18:81:0e:91:de:95: 6b:2d:b7:2e:45:54:ec:82:45:53:ee:a6:7d:d7:82: ee:b9:dd:f7:c6:fb:88:0c:2a:d3:ec:e9:46:a5:17: f2:2e:0f:b2:9d:20:ae:11:9e:8e:f2:c2:b3:f9:85: 88:ee:5b:a9:fb:f7:5f:c1:fe:d4:e9:fb:25:d9:0f: c4:5a:44:b4:5a:6f:df:1a:a0:63:09:3c:8b:75:14: 22:ed:83:08:74:c9:8b:4e:da:43:54:3f:65:9c:07: 47:24:9a:0e:9a:9c:bc:89:73:56:cd:0b:cb:d6:4b: 77:72:92:f7:ac:f6:26:4d:d7:58:b8:da:b6:90:45: 31:cb:3f:9a:17:6f:cb:b1:94:f1:0d:c4:e6:61:fb: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:B7:EF:CD:03:8F:FF:12:AC:6A:74:82:63:2B:11:C3:8A:88:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:52:2a:dc:d2:34:16:73:50:32:8d:e9:03:cc:0c:01:33:d5: 22:6c:0a:02:59:b0:2a:f7:bd:ea:a1:e5:96:6f:0e:8c:17:75: a2:57:f5:d7:f5:89:45:66:4a:8b:0f:01:22:86:59:e3:56:e0: e1:52:46:01:72:b5:d2:fe:5c:8a:8b:eb:ac:71:cb:56:8d:82: 4e:14:c1:d2:f2:c9:a9:51:44:f2:5a:13:e7:cc:ec:8d:4d:48: b1:3e:04:66:58:99:5f:1d:a2:77:d7:8a:fc:4f:61:2e:82:18: bc:f3:5f:d6:17:6a:8d:2e:23:2c:54:de:6c:b2:6b:09:76:26: 60:f3:67:ba:55:b1:a4:8c:56:e8:d0:db:50:c1:a6:ce:a7:67: 9e:6c:03:13:09:a0:e7:51:65:9d:74:56:c1:6f:ba:96:a9:cd: a7:eb:ee:b2:bb:a0:aa:c2:50:c0:49:e2:b2:ef:b8:54:2d:05: dd:cf:a1:bc:65:f5:03:33:eb:b3:14:81:90:78:25:e7:ff:b4: 53:99:1d:87:1a:56:9d:c3:0f:1b:79:55:cc:d8:ab:5e:53:11: 6f:a2:22:7b:01:ef:14:6f:57:74:85:33:e9:4a:a0:d9:f9:af: cf:d4:86:aa:31:74:4c:b4:1c:96:12:87:cc:00:7f:f4:13:d8: 06:cf:b0:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyx9Hd55G1amc4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmQ0OWM4NDMtMzQ3My00YjljLWJmYWMtOTUyMThlZGYwMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllzYNumM0pUyUpBYu09lUMCh/EqalaEIhpQh BZUIgq7DUKSSEsmfXvhWD2EwJ81kWgth3YbJXJBgq5VzcSXQ3+qefTjCN2Xv0pCX IUUa9Elh92na/VDJ7A2tr4NDcO46oOAHPuHG3qXtp2fOmBbWXQkYgQ6R3pVrLbcu RVTsgkVT7qZ914Luud33xvuIDCrT7OlGpRfyLg+ynSCuEZ6O8sKz+YWI7lup+/df wf7U6fsl2Q/EWkS0Wm/fGqBjCTyLdRQi7YMIdMmLTtpDVD9lnAdHJJoOmpy8iXNW zQvL1kt3cpL3rPYmTddYuNq2kEUxyz+aF2/LsZTxDcTmYfuySwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3Vt+/NA4//EqxqdIJjKxHDiohfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY3ZGEyMzAtNTBhZC0z NzY5LThjNjAtNTYxYzg0NDQyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENSKtzSNBZzUDKN6QPMDAEz1SJsCgJZsCr3veqh5ZZvDowXdaJX 9df1iUVmSosPASKGWeNW4OFSRgFytdL+XIqL66xxy1aNgk4UwdLyyalRRPJaE+fM 7I1NSLE+BGZYmV8donfXivxPYS6CGLzzX9YXao0uIyxU3myyawl2JmDzZ7pVsaSM VujQ21DBps6nZ55sAxMJoOdRZZ10VsFvupapzafr7rK7oKrCUMBJ4rLvuFQtBd3P obxl9QMz67MUgZB4Jef/tFOZHYcaVp3DDxt5VczYq15TEW+iInsB7xRvV3SFM+lK oNn5r8/UhqoxdEy0HJYSh8wAf/QT2AbPsKg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:20:09 2025 by rpki-client