This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa File: c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa (raw, json) Hash identifier: MmcqVBeYoKvufZNqq4rpPtJ1dqVww6E+fSPtSteCAVc= Subject key identifier: 21:0A:9F:CA:42:16:4F:CA:FB:43:29:3F:03:ED:E0:A1:A5:EB:98:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16410663907AB85D47A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 397202 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:64:10:66:39:07:ab:85:d4:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=0a39002a-5d75-4fc2-9a1c-ea7393f6d3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:4a:02:44:e9:d4:b2:3a:81:44:b1:19:e8: 75:65:e6:5b:d9:23:d1:fb:d2:27:c5:3b:81:47:cb: c8:85:62:b3:07:59:c1:87:9d:41:1b:fc:23:d3:83: e5:7f:a3:db:16:21:f3:b9:1f:95:63:16:25:cc:f6: 68:6a:1e:a2:d9:b9:df:0c:e3:68:ed:03:37:c9:9b: c3:64:19:c0:26:e4:28:8a:07:a0:3b:e5:b5:40:91: a0:27:47:e9:18:9e:de:6f:a8:28:40:22:5d:97:26: 41:ce:6d:39:06:7d:bc:0e:81:38:2e:97:17:4b:ad: f8:ec:54:17:a2:40:e0:bb:52:fb:69:b9:54:10:e4: 3a:1f:12:b2:df:0f:9a:d0:42:f8:08:e7:20:0f:d4: c4:2b:81:be:a7:91:f2:28:4f:cf:a6:8f:f7:76:49: 88:6f:6a:8c:43:c2:6f:88:9a:0f:72:df:46:1a:7c: 10:86:ec:42:cc:83:cd:d5:68:0f:78:d9:79:33:4c: 98:01:73:eb:44:5c:4d:c5:c4:ad:ed:30:2a:9c:f0: 06:41:18:af:76:a9:24:fb:1e:73:0f:e5:b8:0b:7c: 13:0b:8c:21:c3:41:a0:02:4b:ae:91:6c:45:eb:5d: 10:6d:1e:ba:62:dc:b0:e8:ad:8d:fe:c0:c0:c8:25: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:9F:CA:42:16:4F:CA:FB:43:29:3F:03:ED:E0:A1:A5:EB:98:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:19:e9:3f:b2:30:9d:98:44:3f:b8:6c:57:9a:73:66:5b:44: 19:1a:4d:c9:68:84:5b:6f:21:4b:12:0f:5b:fb:a1:ab:f0:06: c5:fe:8b:a7:7e:45:62:c6:77:0c:2c:7b:b5:2d:6c:98:8a:97: f2:c0:26:b1:24:d1:4c:73:79:9b:66:cf:16:00:bb:14:51:e3: 3d:16:f6:a6:8c:e4:60:54:2e:15:cd:c4:7c:93:d2:c5:9b:6d: 8c:dc:7f:95:a1:a0:c4:16:62:01:43:17:b4:da:87:d0:cc:1a: 1c:ba:2b:b1:84:e3:99:74:87:34:b8:31:4b:86:fc:11:82:27: e9:74:20:e7:02:b7:b3:85:4c:75:d2:6e:90:ce:84:82:fa:49: 6e:b4:28:da:d1:bf:1c:69:63:67:b9:a2:46:a2:f3:50:36:77: 27:38:4e:19:eb:12:41:74:34:e2:26:78:8c:93:9f:84:ad:c9: 79:11:37:a4:20:1d:0f:e0:2c:6b:d4:ea:80:fb:a8:a2:9a:20: 6a:a2:75:6c:f3:24:c0:15:87:9d:dc:2c:1f:99:fa:7a:78:53: bd:1e:b5:72:c7:85:53:11:14:9e:bf:a2:22:d7:7a:f2:3a:98: 34:5c:a8:ed:af:b6:9e:e3:e1:df:27:ad:a3:c5:60:c6:00:0b: f5:90:9b:a9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WQQZjkHq4XUegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MGEzOTAwMmEtNWQ3NS00ZmMyLTlhMWMtZWE3MzkzZjZkM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI5KAkTp1LI6gUSxGeh1ZeZb2SPR+9InxTuB R8vIhWKzB1nBh51BG/wj04Plf6PbFiHzuR+VYxYlzPZoah6i2bnfDONo7QM3yZvD ZBnAJuQoigegO+W1QJGgJ0fpGJ7eb6goQCJdlyZBzm05Bn28DoE4LpcXS6347FQX okDgu1L7ablUEOQ6HxKy3w+a0EL4COcgD9TEK4G+p5HyKE/Ppo/3dkmIb2qMQ8Jv iJoPct9GGnwQhuxCzIPN1WgPeNl5M0yYAXPrRFxNxcSt7TAqnPAGQRivdqkk+x5z D+W4C3wTC4whw0GgAkuukWxF610QbR66Ytyw6K2N/sDAyCXQcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCEKn8pCFk/K+0MpPwPt4KGl65hPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzE3ZmQ3ZTgtZWY1ZC0z MjRiLWJkNjQtZGI2ZjQ5ZTNmMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAWGek/sjCdmEQ/uGxXmnNmW0QZGk3JaIRbbyFL Eg9b+6Gr8AbF/ounfkVixncMLHu1LWyYipfywCaxJNFMc3mbZs8WALsUUeM9Fvam jORgVC4VzcR8k9LFm22M3H+VoaDEFmIBQxe02ofQzBocuiuxhOOZdIc0uDFLhvwR gifpdCDnArezhUx10m6QzoSC+klutCja0b8caWNnuaJGovNQNncnOE4Z6xJBdDTi JniMk5+Ercl5ETekIB0P4Cxr1OqA+6iimiBqonVs8yTAFYed3Cwfmfp6eFO9HrVy x4VTERSev6Ii13ryOpg0XKjtr7ae4+HfJ62jxWDGAAv1kJup -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:56 2026 by rpki-client