This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9fdf2e4-e999-3940-acaa-04aed9839875.roa File: c9fdf2e4-e999-3940-acaa-04aed9839875.roa (raw, json) Hash identifier: ip+ZdNRvNdxWK0BMf3csfLxUuxivOzEJNIm3fdovuMA= Subject key identifier: 12:BF:5A:37:44:3F:FE:95:4C:21:97:84:5D:D0:8B:AD:1A:FB:86:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D16A816FF35B4CB2F631C4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9fdf2e4-e999-3940-acaa-04aed9839875.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 396827 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:6a:81:6f:f3:5b:4c:b2:f6:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=9687cf3d-2b4c-4185-b75a-fc1a3aa44011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:b9:83:91:1e:93:a1:65:2a:08:05:ee:a9: 6d:4f:69:dd:31:94:ec:c2:91:ac:c1:ce:2d:34:2d: cb:c4:d0:78:e0:71:93:9f:1c:4b:30:62:69:81:1e: 97:c3:f9:03:1a:0c:ed:f2:d6:ab:bb:74:18:6a:cb: 67:d5:9f:bc:bd:18:5b:52:53:23:4f:33:24:e7:8b: cd:18:e1:36:06:ee:ef:0c:3e:fe:a6:b7:68:46:ec: 28:1f:09:fc:bf:7f:41:ad:73:32:e3:e8:d3:51:55: f7:57:03:f8:80:3e:45:40:df:9e:36:24:c8:31:39: 19:35:32:c9:f8:f5:20:d9:0d:67:54:a3:f8:29:85: 3c:67:f0:7f:08:2c:0c:10:29:ad:a0:f4:8b:ca:3b: 99:a6:e2:39:65:46:33:07:7f:80:c0:b5:9b:37:2e: 0d:9d:ac:c5:8b:61:b2:bd:50:9c:24:5f:5a:4d:fe: c2:31:47:2d:88:7f:d3:7a:05:67:fe:71:b1:76:49: d3:db:e8:ac:17:5a:56:79:f5:5d:25:77:ea:09:d1: d6:5c:1e:ba:1d:a9:60:27:d5:08:1a:68:1f:e5:7e: b5:af:3d:6f:de:1d:7d:6a:db:9e:24:74:1d:b9:65: ea:43:e9:a4:24:fa:94:b9:8e:8f:cf:8e:07:41:3b: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BF:5A:37:44:3F:FE:95:4C:21:97:84:5D:D0:8B:AD:1A:FB:86:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9fdf2e4-e999-3940-acaa-04aed9839875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fe:22:73:1d:84:70:dc:55:ca:df:fe:57:c5:ec:16:df:71: b8:be:46:b8:87:08:f8:57:40:35:1c:d5:df:e4:23:2c:c4:f9: b7:1b:ef:24:74:f0:ce:29:c3:95:67:a2:8f:ca:fe:7e:df:0c: 7a:c9:86:26:9f:a1:00:68:bd:65:92:0b:94:5b:b0:9c:be:6e: b3:4c:af:92:ba:b3:82:a7:ee:d7:16:e3:f7:56:bf:f1:48:b6: 04:21:c8:9f:78:dd:62:26:e8:76:99:a0:21:74:87:33:63:21: 8f:f6:4e:6d:09:18:a6:ec:49:2b:5b:d7:57:55:e5:1e:be:13: 72:e9:fe:b9:6f:53:23:37:ff:65:4c:6b:53:9f:24:b4:b9:1e: 3e:56:44:cf:04:36:44:6b:e7:00:54:fd:b4:bd:ef:6b:b3:92: bd:2c:eb:de:73:b1:a0:c5:f7:b5:df:1c:cc:f3:b9:80:5f:12: f6:32:4e:0d:5e:8a:ab:5a:ee:7e:22:53:b7:d8:41:9a:5a:20: e3:50:30:e2:05:10:96:d3:6d:73:2e:77:a7:4c:35:7b:31:ce: 65:8f:70:8c:a5:c0:51:3f:77:6b:50:d3:9a:3d:8c:4f:5a:f7: 9d:5e:43:0f:e7:2d:1f:43:8a:4f:45:ed:0d:27:19:60:22:e4: 01:b0:fc:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WqBb/NbTLL2McQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OTY4N2NmM2QtMmI0Yy00MTg1LWI3NWEtZmMxYTNhYTQ0MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljy5g5Eek6FlKggF7qltT2ndMZTswpGswc4t NC3LxNB44HGTnxxLMGJpgR6Xw/kDGgzt8taru3QYastn1Z+8vRhbUlMjTzMk54vN GOE2Bu7vDD7+prdoRuwoHwn8v39BrXMy4+jTUVX3VwP4gD5FQN+eNiTIMTkZNTLJ +PUg2Q1nVKP4KYU8Z/B/CCwMECmtoPSLyjuZpuI5ZUYzB3+AwLWbNy4NnazFi2Gy vVCcJF9aTf7CMUctiH/TegVn/nGxdknT2+isF1pWefVdJXfqCdHWXB66HalgJ9UI Gmgf5X61rz1v3h19atueJHQduWXqQ+mkJPqUuY6Pz44HQTsxSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBK/WjdEP/6VTCGXhF3Qi60a+4ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzlmZGYyZTQtZTk5OS0z OTQwLWFjYWEtMDRhZWQ5ODM5ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAG/iJzHYRw3FXK3/5XxewW33G4vka4hwj4V0A1 HNXf5CMsxPm3G+8kdPDOKcOVZ6KPyv5+3wx6yYYmn6EAaL1lkguUW7Ccvm6zTK+S urOCp+7XFuP3Vr/xSLYEIcifeN1iJuh2maAhdIczYyGP9k5tCRim7EkrW9dXVeUe vhNy6f65b1MjN/9lTGtTnyS0uR4+VkTPBDZEa+cAVP20ve9rs5K9LOvec7Ggxfe1 3xzM87mAXxL2Mk4NXoqrWu5+IlO32EGaWiDjUDDiBRCW021zLnenTDV7Mc5lj3CM pcBRP3drUNOaPYxPWvedXkMP5y0fQ4pPRe0NJxlgIuQBsPxc -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:59 2026 by rpki-client