This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa File: d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa (raw, json) Hash identifier: +xzH15sUA5NV15LzZ7gryq7/O5hdb/hl5oyENkyPbWc= Subject key identifier: 9E:74:CD:64:7A:A0:7F:3E:82:B1:9A:2B:F8:C0:04:8F:0F:8B:A3:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC05057A8285E884D54A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 36617 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:05:05:7a:82:85:e8:84:d5:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=565f4d7e-9576-4585-ba06-51a32922442e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:75:4b:8c:21:4d:bd:a7:0f:56:75:b6:ef: 2d:df:22:6b:4f:24:67:bf:0c:ce:4b:8b:84:95:01: b3:47:5e:13:bc:c7:02:aa:9d:7f:8b:d6:ba:65:3a: 22:3f:08:ad:af:da:a0:c1:d4:d7:de:71:28:cf:61: 80:7a:81:e8:45:cb:e4:75:68:b9:0e:6d:58:ad:4b: 9b:df:7a:f1:fd:8d:63:2a:0b:88:92:77:db:c4:dd: 85:4f:04:8e:ec:43:e7:40:55:cd:c0:61:96:68:6c: 8b:a6:7a:e9:ec:70:94:4e:2a:f8:f1:14:5a:b9:41: 4c:bf:5f:27:bf:09:6d:0b:a9:21:38:61:80:44:cb: 18:52:9d:22:a9:c2:45:a1:fe:81:2f:95:8a:75:bb: c1:7a:cd:92:65:08:c8:28:3d:17:ac:06:0d:dd:a0: 26:fc:d9:51:9a:49:fa:1a:c1:68:ec:a4:4f:43:f8: be:13:05:8d:bf:ef:b2:38:b0:46:bd:43:cb:ad:70: 09:04:4c:77:5c:ac:ba:dc:88:ce:f4:76:b6:44:dc: 8d:08:e1:26:46:13:a0:0e:f3:5d:b6:d4:f3:94:a1: 6d:94:58:0d:ba:5e:6e:8c:38:cc:42:0b:a6:1f:c9: ed:f7:04:d8:a2:ab:24:23:66:e0:d6:b5:58:15:2a: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:CD:64:7A:A0:7F:3E:82:B1:9A:2B:F8:C0:04:8F:0F:8B:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e1:a4:63:de:db:3a:b8:f7:d1:9e:0c:3d:e0:f8:1a:1a:a0: 96:ef:3b:a3:1e:f3:26:b9:62:a8:c9:ae:91:86:7e:81:5a:ea: 5c:07:8d:73:09:90:70:26:36:f4:ca:78:ca:87:78:a5:9a:50: 12:a8:e4:fe:9d:ee:a8:fe:c1:3f:a2:59:44:22:2a:e1:17:a2: 12:ab:7a:d5:2b:ea:03:84:b8:2a:1d:38:3c:d8:a3:97:4f:b2: fd:e1:ef:5e:b2:77:ec:82:ca:8e:6b:cc:c5:0b:ec:9f:b2:ad: bd:69:70:2d:51:00:f9:10:2d:c5:bb:80:b1:97:a6:53:5d:3a: 22:da:f7:f9:d2:22:7a:97:17:1a:18:71:e0:ce:43:e8:a2:b9: 67:98:e8:03:ce:d2:75:fd:46:f9:86:29:8e:2e:6b:fe:8c:47: bd:82:a0:42:f2:8a:00:83:ab:ec:26:78:7e:a7:40:4f:9e:b2: 08:91:15:1b:a3:df:94:ae:87:09:4d:e9:65:24:2b:c1:44:31: ef:1a:de:0c:ec:2b:3e:b1:c2:cd:b1:3b:41:4b:ba:82:ad:7c: 81:36:86:f2:af:7f:d5:6f:fd:03:ce:52:f8:bc:fc:67:72:69: 09:67:0f:c4:d3:05:a0:34:d5:34:13:96:70:f2:b2:db:e0:72: b6:a8:36:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3AUFeoKF6ITVSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTY1ZjRkN2UtOTU3Ni00NTg1LWJhMDYtNTFhMzI5MjI0NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qt1S4whTb2nD1Z1tu8t3yJrTyRnvwzOS4uE lQGzR14TvMcCqp1/i9a6ZToiPwitr9qgwdTX3nEoz2GAeoHoRcvkdWi5Dm1YrUub 33rx/Y1jKguIknfbxN2FTwSO7EPnQFXNwGGWaGyLpnrp7HCUTir48RRauUFMv18n vwltC6khOGGARMsYUp0iqcJFof6BL5WKdbvBes2SZQjIKD0XrAYN3aAm/NlRmkn6 GsFo7KRPQ/i+EwWNv++yOLBGvUPLrXAJBEx3XKy63IjO9Ha2RNyNCOEmRhOgDvNd ttTzlKFtlFgNul5ujDjMQgumH8nt9wTYoqskI2bg1rVYFSq3iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ50zWR6oH8+grGaK/jABI8Pi6MrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdmYTY0ZWItYzliNy0z NzZlLThiMmEtMmNlMTZlOWQ1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7hpGPe2zq499GeDD3g+BoaoJbvO6Me8ya5YqjJrpGGfoFa6lwH jXMJkHAmNvTKeMqHeKWaUBKo5P6d7qj+wT+iWUQiKuEXohKretUr6gOEuCodODzY o5dPsv3h716yd+yCyo5rzMUL7J+yrb1pcC1RAPkQLcW7gLGXplNdOiLa9/nSInqX FxoYceDOQ+iiuWeY6APO0nX9RvmGKY4ua/6MR72CoELyigCDq+wmeH6nQE+esgiR FRuj35SuhwlN6WUkK8FEMe8a3gzsKz6xws2xO0FLuoKtfIE2hvKvf9Vv/QPOUvi8 /GdyaQlnD8TTBaA01TQTlnDystvgcraoNgg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:31:02 2026 by rpki-client