This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa File: c1f640a7-5a4a-357a-8532-645c9226a461.roa (raw, json) Hash identifier: +wvZqe50MqFgmUCRQQg0z2Szf6likXOFbnYISzIMApM= Subject key identifier: FA:DA:E4:F3:7B:8C:65:01:5B:49:5A:29:51:5B:B0:32:AE:49:80:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630E3CD58CFD27A08963858 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396567 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e3:cd:58:cf:d2:7a:08:96:38:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=8f39fa3a-deb0-49ec-9956-39e88001626c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:d3:d2:e2:1f:40:d7:5a:8c:73:a0:3d:57: 15:28:61:1f:4d:41:03:40:32:12:a7:1d:ee:f1:57: c9:6d:fa:b1:08:4c:55:08:da:7b:2a:55:e7:20:66: 5c:1c:52:7e:e0:58:95:e0:5b:cf:51:7d:f9:28:20: c7:e4:b9:86:f9:51:27:b8:c3:21:31:47:14:96:2b: 01:06:d3:7a:18:20:93:f9:62:20:8f:cf:b6:cf:f7: 8c:f8:05:ee:a9:b0:3d:e6:34:5d:45:42:95:52:5f: ad:43:1b:0b:0d:66:ee:6d:4e:de:af:26:83:37:a2: a6:92:64:df:ee:18:5e:93:d7:03:d1:1b:fd:69:db: d3:12:eb:50:ad:b7:e9:1c:07:3e:59:45:56:0b:84: dc:8a:28:10:37:41:27:78:fc:63:12:e3:e0:fd:f8: 1d:5f:41:e0:46:21:c3:37:fb:1d:c1:33:6a:dc:9f: 93:43:d0:6a:45:b6:46:c7:d1:48:bb:48:0b:18:ba: 4f:45:75:88:63:46:0e:f0:91:c3:75:65:8d:ec:52: f2:a2:f6:b8:6a:75:fc:7b:1b:ba:fd:6f:f0:38:ee: 7b:9e:4b:d0:c8:19:51:05:c0:d6:12:1b:0e:c4:e9: 74:13:63:66:e2:4a:b9:f9:0a:46:09:10:95:ec:a7: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:E4:F3:7B:8C:65:01:5B:49:5A:29:51:5B:B0:32:AE:49:80:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2e:bd:ae:de:49:21:06:be:e3:48:b3:0b:c1:f4:2a:a4:97: 4a:5f:92:da:4b:69:b7:b9:d3:66:b4:43:eb:d3:07:74:e9:f4: a7:11:b4:79:b9:4d:b5:4e:4d:2a:a7:ec:bf:32:05:d9:76:68: 35:53:d7:5d:92:10:4a:84:72:8f:f9:ab:2d:d2:b7:68:25:2d: ba:d9:3b:d6:31:c0:8b:7a:01:b5:b2:e8:a3:3c:fa:6a:34:ae: 91:10:e6:f9:83:04:9d:cb:48:e9:6b:47:40:fe:f2:63:ee:a0: 88:56:df:7a:77:35:14:52:e6:7f:e0:c4:9c:8f:fa:98:34:47: f0:cd:97:2a:6d:3f:7b:ee:39:5b:1b:79:01:fa:2c:51:e4:ef: 62:16:5c:a9:4f:9e:c9:5e:b3:45:16:76:83:83:3b:20:8f:75: 8d:81:1b:6c:42:54:09:6a:cd:05:a5:42:6a:32:04:52:9f:81: b7:5b:f8:b2:f8:61:fc:5a:5e:a1:30:07:63:9d:33:98:d1:02: 69:54:c3:02:76:24:93:25:7a:5b:a2:62:26:e1:37:7a:64:c1: 16:6a:af:05:c6:23:d3:58:2e:72:f6:98:b8:36:ea:e1:91:b3: b3:ff:a9:35:0c:ab:5e:b9:7a:40:7c:08:84:85:02:6e:c0:bf: 2c:e9:14:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMOPNWM/SegiWOFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk OGYzOWZhM2EtZGViMC00OWVjLTk5NTYtMzllODgwMDE2MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUTT0uIfQNdajHOgPVcVKGEfTUEDQDISpx3u 8VfJbfqxCExVCNp7KlXnIGZcHFJ+4FiV4FvPUX35KCDH5LmG+VEnuMMhMUcUlisB BtN6GCCT+WIgj8+2z/eM+AXuqbA95jRdRUKVUl+tQxsLDWbubU7eryaDN6KmkmTf 7hhek9cD0Rv9advTEutQrbfpHAc+WUVWC4TciigQN0EnePxjEuPg/fgdX0HgRiHD N/sdwTNq3J+TQ9BqRbZGx9FIu0gLGLpPRXWIY0YO8JHDdWWN7FLyova4anX8exu6 /W/wOO57nkvQyBlRBcDWEhsOxOl0E2Nm4kq5+QpGCRCV7Kf8VwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPra5PN7jGUBW0laKVFbsDKuSYCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFmNjQwYTctNWE0YS0z NTdhLTg1MzItNjQ1YzkyMjZhNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKLr2u3kkhBr7jSLMLwfQqpJdKX5LaS2m3udNm tEPr0wd06fSnEbR5uU21Tk0qp+y/MgXZdmg1U9ddkhBKhHKP+ast0rdoJS262TvW McCLegG1suijPPpqNK6REOb5gwSdy0jpa0dA/vJj7qCIVt96dzUUUuZ/4MScj/qY NEfwzZcqbT977jlbG3kB+ixR5O9iFlypT57JXrNFFnaDgzsgj3WNgRtsQlQJas0F pUJqMgRSn4G3W/iy+GH8Wl6hMAdjnTOY0QJpVMMCdiSTJXpbomIm4Td6ZMEWaq8F xiPTWC5y9pi4NurhkbOz/6k1DKteuXpAfAiEhQJuwL8s6RQB -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:40 2025 by rpki-client