This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa File: ceaf848a-a95c-37a9-b202-2ac941822059.roa (raw, json) Hash identifier: l2YxXfMNQVOvxDLOKMY7EPdcRrePO1wEXJ1c5KHcg0U= Subject key identifier: DE:8E:51:8E:A1:7F:8B:28:F2:17:D6:F2:FA:FE:F2:AC:B6:24:C2:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C50D164E2B3DEEA994DADE4A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 397207 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:64:e2:b3:de:ea:99:4d:ad:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=43298618-a1ec-4f1d-8848-48c75c5b2e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:40:ef:2d:a6:cf:f1:23:7f:1d:12:ba:c3: 78:7f:67:ff:c2:27:bf:79:e5:70:8e:5c:88:1b:11: d0:10:7e:16:0f:be:f1:5a:a1:65:38:07:fa:f2:48: 04:c9:55:44:b3:bc:0e:c3:d6:b7:fb:18:9c:c7:be: b8:be:7b:7d:a9:32:30:29:59:6d:ed:34:6e:61:a0: 00:ac:fb:43:cf:a2:ea:b9:a3:db:e9:d8:a7:f2:9c: 95:0c:6e:41:49:d5:26:c0:c5:fe:5c:07:01:b1:cc: 90:1e:6b:d5:ef:a9:4b:f6:9a:06:58:a4:c0:78:a7: 63:b7:2c:e4:a0:d7:cf:b5:f1:d3:07:13:37:77:cd: a7:8d:96:ca:d3:6b:3b:21:a2:e0:d6:54:5b:de:23: c0:00:a3:0d:76:f4:ff:0a:04:66:9a:7a:b0:36:fa: 8c:74:9f:d3:47:5c:0c:27:a1:44:28:8a:90:53:54: e3:60:bd:ca:fb:a0:3d:f8:5c:9e:17:1c:eb:1d:68: 3f:b8:0a:39:73:ab:50:08:52:db:08:e9:c0:de:db: 5e:45:67:00:0c:c5:92:05:bd:6d:81:77:72:df:a9: 38:34:09:28:95:b4:9d:06:1c:11:ff:26:09:c0:69: f1:30:7b:b4:b2:e5:41:e8:ee:aa:d3:c6:53:7b:1e: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:51:8E:A1:7F:8B:28:F2:17:D6:F2:FA:FE:F2:AC:B6:24:C2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:68:ef:d9:0e:14:b5:13:19:a7:03:b7:fe:74:22:7e:22:d0: a2:f9:47:e4:02:c5:41:df:ee:a5:42:14:05:c1:86:a8:64:e9: 8e:4c:31:f6:b7:62:b0:93:1d:28:7e:d2:ad:df:b0:1f:88:b7: e6:a5:74:37:bf:eb:1f:65:45:3e:cb:ac:79:e7:2c:96:4f:0d: 6f:21:48:37:85:d5:bb:6b:18:5e:64:25:d0:ff:56:08:32:b4: 4b:41:9c:c4:dd:d1:4f:b6:c6:82:7d:fc:63:da:24:84:00:2a: db:b6:82:49:7b:14:6d:9b:bd:ef:18:13:9e:19:53:3d:6a:24: 5b:67:c0:9f:10:44:96:1b:47:5f:b2:d2:75:17:48:44:d7:c2: 2d:01:f1:69:1f:d3:e2:30:97:01:e5:28:0b:91:14:78:99:81: c6:74:66:92:ad:06:d2:54:6e:c2:23:53:e2:28:2d:1b:1d:77: f8:41:49:41:45:fe:a1:2a:1b:41:ab:47:23:ff:66:5f:38:aa: aa:47:6d:7f:dc:89:5b:24:39:0b:0f:0c:93:f6:ba:76:64:c9: 05:57:b3:18:9b:f1:c4:66:b5:62:8f:fe:f9:05:44:a5:8a:1b: 3b:6f:a5:11:4f:22:bb:2c:42:69:cf:57:3f:b6:a5:94:a9:37: ef:1e:7c:b4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExQ0WTis97qmU2t5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NDMyOTg2MTgtYTFlYy00ZjFkLTg4NDgtNDhjNzVjNWIyZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA465A7y2mz/Ejfx0SusN4f2f/wie/eeVwjlyI GxHQEH4WD77xWqFlOAf68kgEyVVEs7wOw9a3+xicx764vnt9qTIwKVlt7TRuYaAA rPtDz6LquaPb6din8pyVDG5BSdUmwMX+XAcBscyQHmvV76lL9poGWKTAeKdjtyzk oNfPtfHTBxM3d82njZbK02s7IaLg1lRb3iPAAKMNdvT/CgRmmnqwNvqMdJ/TR1wM J6FEKIqQU1TjYL3K+6A9+FyeFxzrHWg/uAo5c6tQCFLbCOnA3tteRWcADMWSBb1t gXdy36k4NAkolbSdBhwR/yYJwGnxMHu0suVB6O6q08ZTex4LUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN6OUY6hf4so8hfW8vr+8qy2JMIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhZjg0OGEtYTk1Yy0z N2E5LWIyMDItMmFjOTQxODIyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKaO/ZDhS1ExmnA7f+dCJ+ItCi+UfkAsVB3+6l QhQFwYaoZOmOTDH2t2Kwkx0oftKt37AfiLfmpXQ3v+sfZUU+y6x55yyWTw1vIUg3 hdW7axheZCXQ/1YIMrRLQZzE3dFPtsaCffxj2iSEACrbtoJJexRtm73vGBOeGVM9 aiRbZ8CfEESWG0dfstJ1F0hE18ItAfFpH9PiMJcB5SgLkRR4mYHGdGaSrQbSVG7C I1PiKC0bHXf4QUlBRf6hKhtBq0cj/2ZfOKqqR21/3IlbJDkLDwyT9rp2ZMkFV7MY m/HEZrVij/75BUSlihs7b6URTyK7LEJpz1c/tqWUqTfvHny0 -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:50 2026 by rpki-client