This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa File: db4c71a8-97dc-378d-930c-482311834625.roa (raw, json) Hash identifier: jJcIBuzjGSCIHAYFe5Ac3K15Zkz44fBsEbSEicgNbXo= Subject key identifier: 09:0B:5F:B8:00:F2:31:15:A0:22:90:59:BC:E4:46:18:9E:48:97:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C1963F7CF0D3DDEE69C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396582 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:19:63:f7:cf:0d:3d:de:e6:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=21d0578f-3905-4a64-92c0-c6b7bbea3f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:2c:57:ce:e1:e7:f1:0e:29:51:c3:23:66: 57:8b:49:63:09:cf:84:d8:b3:ec:7e:7d:25:0d:ae: 0f:35:7d:79:d7:fe:61:b3:71:5a:76:0a:df:7f:88: b3:ba:37:6c:31:05:f2:c8:68:26:2f:f8:f3:11:57: 73:30:62:b2:e8:88:a4:87:64:27:78:e1:9c:03:df: 4f:77:51:2d:cb:42:80:02:39:7e:bf:e1:e6:8f:ea: 21:b0:40:d1:f0:0c:90:da:5b:44:11:58:25:23:07: 71:71:d2:9f:d9:8e:83:84:bd:52:37:20:3f:3a:a6: 47:52:b1:70:6e:7c:0c:4e:30:2a:28:56:03:cd:6e: 0a:b5:85:ee:93:d2:09:e7:b2:15:25:d3:85:0c:8b: 4c:a0:60:bd:40:6f:7b:a3:d4:07:93:57:f5:07:88: 4b:c3:79:89:66:1c:7b:ae:1e:34:6a:1b:2d:d3:12: ae:6b:f8:9f:1c:9f:56:46:13:68:97:e5:b2:2d:56: 29:61:0a:8c:18:38:2b:08:fe:c2:21:50:8d:30:d5: 3e:a9:cd:78:ce:ce:c8:2b:dc:4f:e5:c1:b8:af:35: e7:c9:65:be:a0:51:f4:a8:7b:13:c0:e3:f8:ae:78: 61:4b:02:7a:20:e2:e0:11:50:f4:b7:cd:83:b3:f2: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0B:5F:B8:00:F2:31:15:A0:22:90:59:BC:E4:46:18:9E:48:97:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:61:05:30:20:65:3c:50:c4:af:36:96:3c:15:8b:db:78:69: 6f:23:7b:80:bf:43:d0:08:4b:b5:4d:a1:13:67:96:25:88:5a: af:22:0a:81:da:8d:49:79:80:3c:9a:f5:b3:ad:41:bb:f0:10: ca:3e:17:25:c3:0f:29:d2:c0:f4:a1:f7:b4:70:4d:06:bb:53: 99:9c:a1:26:dd:d9:a8:45:ff:11:79:67:a4:86:23:88:13:70: b9:25:40:61:1b:94:f6:99:53:e1:f1:09:5d:a4:07:aa:e8:ac: 4e:2d:2e:22:80:b1:de:bd:bd:11:3e:e1:52:f3:ef:cc:26:39: 2f:8b:e5:2a:30:7d:e5:0d:8e:9d:51:f6:08:28:3d:2b:2e:8f: e6:1a:bd:cd:09:48:e2:69:60:29:23:e6:ed:dd:4a:fb:4a:9b: c8:5d:e5:56:0c:07:13:0c:bd:e0:fd:6f:21:08:0f:7f:9a:95: c3:bb:e2:ae:5d:09:d5:7e:bd:fc:74:2b:db:ba:f8:93:38:2b: d2:be:f2:d8:aa:53:b7:f4:da:7b:5e:64:65:e2:69:96:2c:97: 59:9c:60:f4:18:88:5e:b2:34:2b:ae:26:38:18:a8:0a:ac:ad: 11:40:24:61:cf:c4:6a:df:62:02:ac:96:ba:8b:0a:85:0d:07: f2:e5:a1:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBlj988NPd7mnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk MjFkMDU3OGYtMzkwNS00YTY0LTkyYzAtYzZiN2JiZWEzZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45QsV87h5/EOKVHDI2ZXi0ljCc+E2LPsfn0l Da4PNX151/5hs3Fadgrff4izujdsMQXyyGgmL/jzEVdzMGKy6Iikh2QneOGcA99P d1Ety0KAAjl+v+Hmj+ohsEDR8AyQ2ltEEVglIwdxcdKf2Y6DhL1SNyA/OqZHUrFw bnwMTjAqKFYDzW4KtYXuk9IJ57IVJdOFDItMoGC9QG97o9QHk1f1B4hLw3mJZhx7 rh40ahst0xKua/ifHJ9WRhNol+WyLVYpYQqMGDgrCP7CIVCNMNU+qc14zs7IK9xP 5cG4rzXnyWW+oFH0qHsTwOP4rnhhSwJ6IOLgEVD0t82Ds/JeVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAkLX7gA8jEVoCKQWbzkRhieSJcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0YzcxYTgtOTdkYy0z NzhkLTkzMGMtNDgyMzExODM0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5YQUwIGU8UMSvNpY8FYvbeGlvI3uAv0PQCEu1 TaETZ5YliFqvIgqB2o1JeYA8mvWzrUG78BDKPhclww8p0sD0ofe0cE0Gu1OZnKEm 3dmoRf8ReWekhiOIE3C5JUBhG5T2mVPh8QldpAeq6KxOLS4igLHevb0RPuFS8+/M Jjkvi+UqMH3lDY6dUfYIKD0rLo/mGr3NCUjiaWApI+bt3Ur7SpvIXeVWDAcTDL3g /W8hCA9/mpXDu+KuXQnVfr38dCvbuviTOCvSvvLYqlO39Np7XmRl4mmWLJdZnGD0 GIhesjQrriY4GKgKrK0RQCRhz8Rq32ICrJa6iwqFDQfy5aGy -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:47 2026 by rpki-client