This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa File: d23b6cbe-a932-33dc-82e0-dc55ec697715.roa (raw, json) Hash identifier: 9oD+sjzu9GGsJECGeWOc4nagg3ZjGD+8Hm0bajOiAI0= Subject key identifier: AB:61:E7:F4:F7:FC:97:DB:40:20:F7:48:06:25:15:79:FA:76:38:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630E48409B5D695359AF560 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396610 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e4:84:09:b5:d6:95:35:9a:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=f043b220-7ea9-45d4-a33d-ec9fdba2bd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:eb:e2:95:36:44:1c:3d:f6:eb:f7:c7:3b: dd:1a:10:a3:87:7a:c8:c5:bd:80:e2:49:87:ee:33: d6:97:0c:e7:06:c7:91:37:b6:09:48:21:5f:47:54: 4d:ef:8e:b0:8f:20:2f:25:df:5d:6f:22:b5:85:36: a2:d1:bc:b9:1e:4b:af:96:cf:39:cc:1e:8d:5f:dd: 66:b1:b0:a6:61:2c:f8:e0:ed:c0:e6:ae:87:f5:2e: f8:92:13:7f:d7:6b:2a:86:7e:e1:99:75:12:14:8b: a2:9c:86:20:6a:5d:54:84:9e:81:1b:a0:86:b8:82: 72:b1:5b:c8:15:d3:f1:e1:de:0d:1d:10:e7:29:87: f5:dc:02:92:bf:30:a4:4b:68:1f:4c:7b:9d:55:16: 0f:0d:9d:68:ba:fd:e5:5c:bf:6b:ab:7c:1c:5b:78: 89:4c:e7:05:db:d0:03:c6:af:a2:f8:b2:44:28:8f: 5b:cf:b3:07:a2:ac:6b:27:cd:3a:26:76:5b:4d:91: db:ea:e0:3f:6f:ca:1c:50:f7:09:e8:9b:75:21:03: 89:1b:b2:50:86:ad:cf:dd:26:5d:7b:87:03:06:55: 2b:5e:5e:56:c1:57:e8:04:a6:00:a7:0f:bb:d9:2d: 39:f4:a7:18:f2:ec:64:cc:c0:23:e7:bd:f9:65:18: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:E7:F4:F7:FC:97:DB:40:20:F7:48:06:25:15:79:FA:76:38:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c0:8e:5c:98:9a:6f:8d:be:0c:c0:a1:ec:c1:14:3d:6c:ee: 43:a8:ba:d8:25:cc:c0:0d:65:23:7b:fe:99:e3:a7:49:91:8f: 10:32:b9:8b:54:d2:1f:15:fe:ae:3f:52:b2:38:bf:62:3c:da: 14:3b:aa:98:c9:7e:ff:68:3d:d0:05:82:2f:12:7e:b7:9a:a6: e4:ce:55:45:27:df:8f:13:5d:9f:c8:4f:fd:4f:b2:81:57:d8: 2a:4c:20:2c:1b:3d:e3:49:c9:10:21:9c:1f:0b:32:f5:35:80: f1:25:87:ea:19:7e:40:76:70:b8:e7:7e:bf:b3:25:09:d8:40: 27:47:38:94:f2:13:9d:65:05:33:cd:c9:f6:0c:94:ea:bc:fb: 2c:47:b5:a0:ce:9d:72:15:ab:b8:9f:8c:fc:6b:1e:f4:44:70: 34:33:92:21:98:3c:b3:37:f5:78:0f:ab:61:a6:91:a7:9d:54: af:43:98:4c:21:0e:a3:08:00:4d:e4:4e:2b:95:c0:1a:f5:aa: 5c:5c:ef:75:6a:d3:33:6e:d1:73:85:7e:bf:7e:62:34:a7:fd: 51:87:69:b4:c4:dd:8c:57:e1:15:c5:78:7e:2e:52:ca:0d:db: 76:a3:7a:ea:16:9d:76:38:35:d9:2b:22:a7:83:26:f6:f0:0b: 2a:d8:d9:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMOSECbXWlTWa9WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjA0M2IyMjAtN2VhOS00NWQ0LWEzM2QtZWM5ZmRiYTJiZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lLr4pU2RBw99uv3xzvdGhCjh3rIxb2A4kmH 7jPWlwznBseRN7YJSCFfR1RN746wjyAvJd9dbyK1hTai0by5Hkuvls85zB6NX91m sbCmYSz44O3A5q6H9S74khN/12sqhn7hmXUSFIuinIYgal1UhJ6BG6CGuIJysVvI FdPx4d4NHRDnKYf13AKSvzCkS2gfTHudVRYPDZ1ouv3lXL9rq3wcW3iJTOcF29AD xq+i+LJEKI9bz7MHoqxrJ806JnZbTZHb6uA/b8ocUPcJ6Jt1IQOJG7JQhq3P3SZd e4cDBlUrXl5WwVfoBKYApw+72S059KcY8uxkzMAj5735ZRjoCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKth5/T3/JfbQCD3SAYlFXn6djgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDIzYjZjYmUtYTkzMi0z M2RjLTgyZTAtZGM1NWVjNjk3NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4wI5cmJpvjb4MwKHswRQ9bO5DqLrYJczADWUj e/6Z46dJkY8QMrmLVNIfFf6uP1KyOL9iPNoUO6qYyX7/aD3QBYIvEn63mqbkzlVF J9+PE12fyE/9T7KBV9gqTCAsGz3jSckQIZwfCzL1NYDxJYfqGX5AdnC4536/syUJ 2EAnRziU8hOdZQUzzcn2DJTqvPssR7Wgzp1yFau4n4z8ax70RHA0M5IhmDyzN/V4 D6thppGnnVSvQ5hMIQ6jCABN5E4rlcAa9apcXO91atMzbtFzhX6/fmI0p/1Rh2m0 xN2MV+EVxXh+LlLKDdt2o3rqFp12ODXZKyKngyb28Asq2Nmk -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:57 2025 by rpki-client