This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa File: cde84229-d45a-3a8d-bf35-ae39d34e0423.roa (raw, json) Hash identifier: Dxm7TfyLWtEvfRmbzlRdjV0rh7hD+7KL8ECzVL5bXDo= Subject key identifier: F5:36:91:AD:69:1E:1C:5F:45:44:62:87:86:84:D8:16:53:7C:39:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC1A0EAB09D1B90136E190 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396602 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1a:0e:ab:09:d1:b9:01:36:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=8fa02455-c1e7-41c8-9adf-1932dce4389c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:17:a0:ab:5f:57:ff:e0:6e:c8:ff:f4:b2: dc:96:86:97:2b:53:10:05:44:5a:24:76:91:03:c5: 43:5d:fb:7f:dc:28:0b:b6:d6:de:30:66:a0:a7:4b: ef:5e:55:77:84:4e:84:51:26:ad:2a:44:8e:c0:2c: 41:aa:44:6c:c2:fd:dc:42:f9:4a:8b:7f:9c:4a:49: d5:f2:e2:10:33:a0:cb:1e:3f:f8:ed:ff:93:b4:4a: d9:78:f0:6b:65:3f:ad:a2:43:b3:3f:06:db:f1:5b: 96:9d:53:22:bc:b8:1f:9f:60:1d:bb:d5:cb:fa:7a: e2:b2:2c:b8:40:43:32:ea:17:01:d3:c7:b1:1e:e9: 13:96:8c:aa:e0:12:c1:6d:99:48:72:5f:d0:5c:bb: 29:4d:9a:6b:bb:2e:d8:4d:c6:37:f2:cb:44:17:77: 47:c9:9a:63:91:12:20:12:99:7f:47:7c:ca:31:58: ed:d0:c6:4b:d4:ee:f7:70:7e:e9:ba:b0:f8:ff:aa: a2:b5:8d:9e:15:ec:ed:32:ea:b7:51:5e:81:ac:17: 48:02:f7:b7:59:7d:ea:33:78:9c:0d:31:ca:b9:36: ea:3b:ac:f2:86:9d:47:7d:1a:25:fc:b1:b8:75:6e: e9:14:e2:97:51:d1:a0:9d:70:82:dd:3a:fb:39:48: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:36:91:AD:69:1E:1C:5F:45:44:62:87:86:84:D8:16:53:7C:39:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:96:0c:cf:64:c4:ed:f6:bb:85:c3:c2:30:ca:c7:69:2b:3a: f9:ea:66:e8:2e:eb:56:58:c6:a7:de:04:f4:05:b8:d8:fe:f1: db:47:2f:cc:9d:ee:83:3b:6a:15:19:b2:04:2a:5d:b3:67:ec: f4:74:55:01:32:93:be:b0:0d:bb:7e:04:8d:fd:a8:f1:2b:78: 51:54:77:29:08:78:d8:03:f5:3a:f1:32:2e:de:03:f2:dd:63: d5:f5:51:87:38:37:09:0a:e0:82:91:43:dc:2b:5e:8f:a5:da: 87:43:0d:e5:bf:76:03:b7:f3:da:da:5f:66:0f:f8:48:ce:6e: db:38:f6:2a:fe:c6:95:a5:e5:fb:84:3e:21:b3:b7:73:16:e6: c5:fa:56:9e:87:67:ac:d6:0b:51:ce:f4:27:c0:da:a5:78:3c: 05:7b:5c:47:cf:3b:13:66:df:83:2a:bf:6f:60:8b:3b:d6:74: 2e:bf:a3:cb:28:63:f2:db:a3:4f:6a:b2:e9:48:4d:13:6a:c8: ca:14:14:95:88:db:69:eb:d1:03:d7:5f:87:63:de:f7:34:8f: cc:bf:93:bb:1d:a7:33:ff:b5:09:53:4d:8c:15:00:75:24:46: 37:fe:0d:f1:98:85:3f:93:e1:dd:94:c1:c2:13:21:dc:bf:68: 9b:57:1e:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3BoOqwnRuQE24ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OGZhMDI0NTUtYzFlNy00MWM4LTlhZGYtMTkzMmRjZTQzODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL8XoKtfV//gbsj/9LLcloaXK1MQBURaJHaR A8VDXft/3CgLttbeMGagp0vvXlV3hE6EUSatKkSOwCxBqkRswv3cQvlKi3+cSknV 8uIQM6DLHj/47f+TtErZePBrZT+tokOzPwbb8VuWnVMivLgfn2Adu9XL+nrisiy4 QEMy6hcB08exHukTloyq4BLBbZlIcl/QXLspTZpruy7YTcY38stEF3dHyZpjkRIg Epl/R3zKMVjt0MZL1O73cH7purD4/6qitY2eFeztMuq3UV6BrBdIAve3WX3qM3ic DTHKuTbqO6zyhp1HfRol/LG4dW7pFOKXUdGgnXCC3Tr7OUg1sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPU2ka1pHhxfRURih4aE2BZTfDl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlODQyMjktZDQ1YS0z YThkLWJmMzUtYWUzOWQzNGUwNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGWDM9kxO32u4XDwjDKx2krOvnqZugu61ZYxqfeBPQFuNj+8dtH L8yd7oM7ahUZsgQqXbNn7PR0VQEyk76wDbt+BI39qPEreFFUdykIeNgD9TrxMi7e A/LdY9X1UYc4NwkK4IKRQ9wrXo+l2odDDeW/dgO389raX2YP+EjObts49ir+xpWl 5fuEPiGzt3MW5sX6Vp6HZ6zWC1HO9CfA2qV4PAV7XEfPOxNm34Mqv29gizvWdC6/ o8soY/Lbo09qsulITRNqyMoUFJWI22nr0QPXX4dj3vc0j8y/k7sdpzP/tQlTTYwV AHUkRjf+DfGYhT+T4d2UwcITIdy/aJtXHj8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:49 2026 by rpki-client