This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa File: cafd18e4-756a-3743-bb03-ea11c8166322.roa (raw, json) Hash identifier: gDOZc+z+L0eZLIIetsDbNY2+A6vvoX8fllO2Jkiv8tA= Subject key identifier: 54:02:44:60:B9:61:75:F5:A9:65:CD:D4:AC:D1:9B:11:3E:D2:B3:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630E513B41F971AD85BEE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396597 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e5:13:b4:1f:97:1a:d8:5b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=dd7cf66b-0fb2-46dd-9b35-7fb7a39d0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:80:0e:ee:a9:3a:d6:4b:41:6e:ca:f6:ef: 16:9b:ff:d3:18:98:22:ce:e7:cd:9b:2e:dd:4c:5c: 44:47:27:5d:45:86:2d:2b:8e:ff:46:fe:a0:1a:46: ae:46:98:d6:ab:a0:94:d2:d3:7c:18:2b:fd:7c:cc: b9:d9:b0:77:d6:b4:79:d6:45:31:aa:ab:f5:2c:8f: 85:15:a1:b8:f9:2c:69:7b:8f:f7:d7:31:5d:f3:f4: 7e:d8:07:bb:e8:3c:4b:9e:98:ce:26:bb:98:21:a5: 05:e1:bf:95:f1:0b:f5:56:87:5b:07:52:65:2b:cf: 6c:9b:24:ca:a8:5a:f8:26:d5:49:69:a3:f5:54:05: 87:eb:24:fc:4b:b1:85:dc:6b:a3:c7:c8:25:8a:97: 12:88:3f:5b:ac:a3:9d:ca:80:e1:59:d4:7a:ae:b7: 2c:fd:3d:ee:39:a0:6b:7d:55:65:03:bb:70:0e:87: 8d:33:a2:c2:02:24:0a:3f:7e:ac:d5:62:6a:3f:0b: b5:ae:3d:92:df:32:82:51:d4:bd:44:18:6c:10:49: 63:3c:27:a9:93:f7:31:4c:ba:7c:16:e1:29:ba:1e: 49:59:6c:b5:ee:cd:ec:b5:e2:51:f0:1e:34:6e:6f: a5:90:bc:b9:4a:64:14:d1:53:08:85:46:7d:83:82: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:02:44:60:B9:61:75:F5:A9:65:CD:D4:AC:D1:9B:11:3E:D2:B3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0f:83:6a:cb:a1:e6:24:d1:67:ee:04:d9:15:1b:f5:45:db: 95:48:cb:e5:74:f0:3d:4c:15:4b:2d:41:b5:a8:53:17:29:28: 40:06:fe:b9:3a:8a:ba:ab:b9:67:02:08:3c:cf:39:36:28:23: 68:16:56:36:4d:11:ac:c4:cb:17:4f:42:28:31:a0:e5:0d:41: ee:cd:79:c3:99:da:8c:ff:3c:4e:e0:18:f7:cf:8b:18:57:fa: 0b:b0:d6:2e:75:66:d9:96:78:49:cb:75:47:59:5c:a6:f8:af: f7:d0:e2:0e:37:47:3f:55:e3:11:93:5c:cb:bc:66:f0:ec:d9: 1b:cd:50:6e:28:f1:92:8e:2e:67:5b:91:61:dd:82:49:c1:f3: 5b:4f:6a:c7:7b:f7:67:96:16:49:b3:cf:77:83:66:dc:cf:b2: 3b:ca:fc:a6:aa:c0:b9:4d:cc:3c:94:9e:c0:8d:e8:d4:5d:c6: aa:5a:56:3d:50:fe:55:46:da:a7:be:30:66:6b:fd:f6:c2:7f: c1:db:be:6f:29:4f:b1:fc:ad:6f:53:70:9e:da:87:4c:3c:4e: 14:10:53:0e:b3:b6:5c:db:0e:71:ec:06:5a:84:16:15:49:98: 90:90:54:78:be:8d:fd:a2:e8:da:fd:0f:f0:e6:a1:17:fe:da: 07:50:07:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMOUTtB+XGthb7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZGQ3Y2Y2NmItMGZiMi00NmRkLTliMzUtN2ZiN2EzOWQwZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlauADu6pOtZLQW7K9u8Wm//TGJgizufNmy7d TFxERyddRYYtK47/Rv6gGkauRpjWq6CU0tN8GCv9fMy52bB31rR51kUxqqv1LI+F FaG4+Sxpe4/31zFd8/R+2Ae76DxLnpjOJruYIaUF4b+V8Qv1VodbB1JlK89smyTK qFr4JtVJaaP1VAWH6yT8S7GF3Gujx8glipcSiD9brKOdyoDhWdR6rrcs/T3uOaBr fVVlA7twDoeNM6LCAiQKP36s1WJqPwu1rj2S3zKCUdS9RBhsEEljPCepk/cxTLp8 FuEpuh5JWWy17s3steJR8B40bm+lkLy5SmQU0VMIhUZ9g4I5GQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFQCRGC5YXX1qWXN1KzRmxE+0rONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmZDE4ZTQtNzU2YS0z NzQzLWJiMDMtZWExMWM4MTY2MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6D4Nqy6HmJNFn7gTZFRv1RduVSMvldPA9TBVL LUG1qFMXKShABv65Ooq6q7lnAgg8zzk2KCNoFlY2TRGsxMsXT0IoMaDlDUHuzXnD mdqM/zxO4Bj3z4sYV/oLsNYudWbZlnhJy3VHWVym+K/30OION0c/VeMRk1zLvGbw 7NkbzVBuKPGSji5nW5Fh3YJJwfNbT2rHe/dnlhZJs893g2bcz7I7yvymqsC5Tcw8 lJ7AjejUXcaqWlY9UP5VRtqnvjBma/32wn/B275vKU+x/K1vU3Ce2odMPE4UEFMO s7Zc2w5x7AZahBYVSZiQkFR4vo39ouja/Q/w5qEX/toHUAfA -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:28 2025 by rpki-client