This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa File: d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa (raw, json) Hash identifier: hUY9xjjG091Z+PWGxrqFmjT9sGXhpRMuu2BWBEsTFvk= Subject key identifier: E7:D1:E6:50:6E:76:57:6A:F1:D3:BD:32:E7:2B:10:9E:3B:A7:2F:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BD1CB1AB7C4AE522383ED2400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 396540 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:1a:b7:c4:ae:52:23:83:ed:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=494fe1d9-3717-4316-83c8-5d96a8a36e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:b8:18:dc:c5:a7:31:e1:65:92:8c:ff:00: fc:06:b1:28:13:46:9a:6c:55:6b:b8:06:79:2d:4e: 55:69:7c:a3:82:71:47:84:38:ba:b7:cf:39:e3:01: 48:c0:40:bc:0d:e8:02:8e:65:9c:38:fa:ba:51:ec: 6b:a9:fe:e4:de:5d:70:ff:f5:b3:8a:cc:f0:3d:7e: c0:0d:5a:05:e7:43:c2:18:bf:f2:ac:1b:63:09:52: 04:0e:bf:09:3f:9f:cf:11:fe:3c:bb:07:8f:33:7d: df:ae:d8:60:c2:26:be:62:8a:5e:28:18:0a:d2:89: 9e:dd:44:f6:07:31:31:69:a4:60:e2:82:6b:ff:55: 67:17:c5:de:f7:22:27:64:fe:64:67:a0:a2:02:6b: 7b:9a:c6:5a:46:83:82:eb:bd:98:a0:59:78:76:d1: d8:4b:1d:9f:53:c0:a1:2c:ee:c2:e8:45:46:2e:44: 8a:34:87:80:a7:e7:1d:0e:81:c9:fe:b8:6f:43:2d: 1b:19:27:30:eb:64:80:bb:e2:90:21:6f:cd:e4:77: 31:37:3d:fc:e2:60:6c:b7:02:95:eb:d6:9a:81:dd: 58:fe:f7:a3:6e:f3:d8:19:af:e9:ce:0e:16:e9:0b: 99:ff:1f:6c:ad:1c:13:2c:c0:1c:36:2c:02:49:44: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D1:E6:50:6E:76:57:6A:F1:D3:BD:32:E7:2B:10:9E:3B:A7:2F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b0:d4:2a:27:0b:33:ac:e8:a6:78:a2:6a:ae:fc:a3:4b:3c: fa:51:bc:74:7f:8b:35:0a:6e:a2:9f:84:84:36:6f:c1:ac:4c: 0d:ca:59:39:ab:80:07:41:92:f0:70:5f:1f:65:0a:1a:a0:73: 4d:83:7f:02:a1:41:0c:d5:6a:b8:92:90:dd:df:23:5d:e0:4b: 3d:65:e0:f9:6a:13:4e:6f:a1:4d:e1:5e:74:e1:b0:4a:7f:e7: 6e:c8:4f:8c:ba:6e:5c:26:75:e0:0d:cd:b6:fa:91:87:44:6f: 67:ab:28:32:84:5d:78:a5:04:7b:f6:23:b7:64:1f:5c:5e:4d: a6:af:7b:1d:8a:13:c8:80:df:37:e4:79:1e:2d:54:9c:73:44: 72:6b:29:35:35:33:3d:6c:03:15:69:a8:6e:72:8d:78:a3:88: 1a:78:61:bb:53:19:a4:34:d7:fb:b1:c1:5e:21:90:cf:47:b1: 9a:c4:b0:09:de:21:8d:77:b0:88:8a:f3:42:90:a2:30:30:3f: 81:bd:37:e9:28:52:9a:dc:61:ae:01:67:d0:78:56:6f:91:1f: 51:78:94:d9:58:13:f3:4a:41:00:60:51:c6:6b:59:02:6f:36: 92:8a:18:62:f4:b8:8a:9a:26:13:74:23:32:0c:a0:25:b6:8e: 7d:4c:a0:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvRyxq3xK5SI4PtJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NDk0ZmUxZDktMzcxNy00MzE2LTgzYzgtNWQ5NmE4YTM2ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjO4GNzFpzHhZZKM/wD8BrEoE0aabFVruAZ5 LU5VaXyjgnFHhDi6t8854wFIwEC8DegCjmWcOPq6Uexrqf7k3l1w//WziszwPX7A DVoF50PCGL/yrBtjCVIEDr8JP5/PEf48uwePM33frthgwia+YopeKBgK0ome3UT2 BzExaaRg4oJr/1VnF8Xe9yInZP5kZ6CiAmt7msZaRoOC672YoFl4dtHYSx2fU8Ch LO7C6EVGLkSKNIeAp+cdDoHJ/rhvQy0bGScw62SAu+KQIW/N5HcxNz384mBstwKV 69aagd1Y/vejbvPYGa/pzg4W6QuZ/x9srRwTLMAcNiwCSUR92QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfR5lBudldq8dO9MucrEJ47py8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDZjMGI0YTYtYWM3Ni0z NmRiLWEyZWEtZGI0Njg1ZDI2NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHyw1ConCzOs6KZ4omqu/KNLPPpRvHR/izUKbqKfhIQ2b8GsTA3K WTmrgAdBkvBwXx9lChqgc02DfwKhQQzVariSkN3fI13gSz1l4PlqE05voU3hXnTh sEp/527IT4y6blwmdeANzbb6kYdEb2erKDKEXXilBHv2I7dkH1xeTaavex2KE8iA 3zfkeR4tVJxzRHJrKTU1Mz1sAxVpqG5yjXijiBp4YbtTGaQ01/uxwV4hkM9HsZrE sAneIY13sIiK80KQojAwP4G9N+koUprcYa4BZ9B4Vm+RH1F4lNlYE/NKQQBgUcZr WQJvNpKKGGL0uIqaJhN0IzIMoCW2jn1MoEM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:53 2025 by rpki-client