This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa File: db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa (raw, json) Hash identifier: 5CDB7UvtC8f9fyLObSEVkNSrTx/72HqVeYRsCnx7lfQ= Subject key identifier: 5B:F8:4A:A3:81:E1:AB:7B:07:A3:1D:76:B2:01:0C:63:AA:77:83:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C1630DDD986E05A1A4A91BEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 397207 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:dd:d9:86:e0:5a:1a:4a:91:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=5593dd53-6c54-4402-904b-b2930e81fbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:3e:c7:e6:df:81:bc:9e:f9:37:21:86:01: f9:c6:d0:5f:ce:9a:2a:af:d9:b1:e9:16:c0:f0:ef: ae:3a:4c:c3:ff:47:bc:c9:6e:6c:a2:d0:07:85:34: 00:4f:5f:66:c2:d0:ba:d3:b8:b7:1d:56:68:01:11: d6:fe:30:f2:82:36:cf:55:ee:8f:2f:03:64:88:6b: 2c:ff:b2:6d:30:3a:aa:ea:25:14:ac:23:9f:09:58: 37:14:f6:25:2f:21:ec:c9:ea:42:cf:d5:88:75:e2: b5:f2:1d:6b:4c:ea:e4:f3:fe:c9:7e:bd:7b:7f:35: 4d:da:85:0e:94:6f:ac:5d:52:22:61:06:a0:e0:dc: 0b:d7:97:0b:0a:95:0c:33:30:2a:47:a3:1e:53:42: af:69:3c:03:f9:06:45:c6:d2:e2:46:9d:77:a8:50: 6d:8c:f0:d1:dd:d9:39:2b:0e:5f:36:e4:e2:29:c7: 20:78:c4:64:32:35:b4:1b:da:14:21:c9:63:36:e5: 83:07:10:7c:dd:bc:d8:49:d8:c7:16:6b:3c:75:a6: c8:55:0c:a8:78:72:85:2c:c7:4f:82:f6:43:38:17: 15:a5:84:f3:5f:58:a8:c1:c7:91:a7:8c:9f:86:94: 15:c1:30:09:ac:15:ae:7f:d3:52:88:8f:e9:16:c1: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:4A:A3:81:E1:AB:7B:07:A3:1D:76:B2:01:0C:63:AA:77:83:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3b:c4:19:61:7f:5b:f6:43:26:e3:e7:6d:5f:fc:2c:b6:6e: cf:dd:eb:24:7b:68:ba:00:1d:2d:bc:e0:bf:f3:f4:ec:85:a9: b9:44:22:16:0f:cd:cd:36:0e:a0:eb:34:64:31:2d:33:58:d2: f4:14:fd:41:ee:b6:a9:be:9e:66:b2:b8:21:45:a3:33:79:aa: 2c:8a:dc:25:08:ed:19:81:f1:9d:47:70:67:ed:aa:17:6d:4c: 6c:c1:6d:85:67:00:8c:fb:46:56:81:9c:3a:31:c9:5e:17:5f: 8b:f7:f0:67:8c:0e:73:8b:44:37:4f:33:29:a2:12:4a:5c:3a: 5a:f7:f8:ff:9e:bc:85:03:9f:db:96:57:af:eb:df:7f:44:67: 82:ee:05:27:04:f0:91:9f:72:f9:40:52:f6:ac:70:d8:f1:02: 36:82:f0:6b:f2:e6:08:1d:c7:5e:05:66:cd:12:c5:64:44:eb: 79:af:6d:6d:d6:8e:f9:94:d3:6b:18:85:50:be:00:9f:f5:71: f1:74:42:49:09:68:71:2e:2b:ef:88:65:d2:19:2d:b5:9e:2c: d4:f9:8c:f1:ca:ab:20:a6:4a:c9:f8:1c:50:94:ae:0d:49:f2: ed:05:b7:02:13:6b:03:88:84:25:e0:98:58:a5:10:50:06:1e: 4f:8d:8b:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwWMN3ZhuBaGkqRvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NTU5M2RkNTMtNmM1NC00NDAyLTkwNGItYjI5MzBlODFmYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/8+x+bfgbye+TchhgH5xtBfzpoqr9mx6RbA 8O+uOkzD/0e8yW5sotAHhTQAT19mwtC607i3HVZoARHW/jDygjbPVe6PLwNkiGss /7JtMDqq6iUUrCOfCVg3FPYlLyHsyepCz9WIdeK18h1rTOrk8/7Jfr17fzVN2oUO lG+sXVIiYQag4NwL15cLCpUMMzAqR6MeU0KvaTwD+QZFxtLiRp13qFBtjPDR3dk5 Kw5fNuTiKccgeMRkMjW0G9oUIcljNuWDBxB83bzYSdjHFms8dabIVQyoeHKFLMdP gvZDOBcVpYTzX1iowceRp4yfhpQVwTAJrBWuf9NSiI/pFsG8WQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFv4SqOB4at7B6MddrIBDGOqd4NuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0MmUzMGEtOTljZi0z Y2RkLTkwYjEtODkwMWU1ZjAzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLO8QZYX9b9kMm4+dtX/wstm7P3eske2i6AB0t vOC/8/Tsham5RCIWD83NNg6g6zRkMS0zWNL0FP1B7rapvp5msrghRaMzeaositwl CO0ZgfGdR3Bn7aoXbUxswW2FZwCM+0ZWgZw6McleF1+L9/BnjA5zi0Q3TzMpohJK XDpa9/j/nryFA5/bllev699/RGeC7gUnBPCRn3L5QFL2rHDY8QI2gvBr8uYIHcde BWbNEsVkROt5r21t1o75lNNrGIVQvgCf9XHxdEJJCWhxLivviGXSGS21nizU+Yzx yqsgpkrJ+BxQlK4NSfLtBbcCE2sDiIQl4JhYpRBQBh5PjYuy -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:16 2025 by rpki-client