This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa File: dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json) Hash identifier: Ku6HtP5k19zdFlVdzlOj1heCo19IqK1UFmAqmbR5k5s= Subject key identifier: BF:10:BB:92:B8:22:62:07:D0:A7:11:65:7B:A1:48:16:78:FD:9D:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BC270818692AFEC444F762D20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 7342 IP address blocks: 2620:74:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:81:86:92:af:ec:44:4f:76:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=e4705509-a96d-4e10-80c7-1fda24841a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:18:96:99:a8:2c:57:e9:47:84:25:db:5a: cc:78:af:3c:3d:56:d7:e5:54:b8:78:02:38:ef:c1: a5:ce:db:6d:0a:f9:ef:cf:c8:0b:78:53:ec:33:d2: 83:c0:c7:58:b3:98:c4:a3:1b:70:e4:84:72:46:ca: d1:8a:e6:9e:72:5a:65:49:33:c5:54:1b:5b:0b:a3: ca:9c:9c:89:2f:aa:eb:75:7c:04:83:77:ed:2f:05: f1:9c:1f:c2:ed:70:06:ad:2b:a4:35:dd:0a:81:0c: c6:88:aa:ff:ed:63:7b:c7:7e:8d:86:97:e1:f3:ad: 7b:cd:2c:d3:aa:ab:94:f5:e7:51:1d:b8:69:3a:35: 8f:4c:8a:7a:52:12:4e:be:24:ab:be:7d:66:cd:20: c7:9e:94:ce:17:7c:6b:03:8e:91:c3:d6:f2:c4:c6: fb:ef:df:02:66:f1:99:a7:ec:f9:24:bc:91:34:a3: 46:93:b8:69:c8:9f:af:13:73:a3:73:7c:1d:0e:15: ef:c2:29:14:d0:03:3a:e4:3f:19:dc:b8:79:f9:e7: 97:1d:fc:61:a3:ac:3a:fb:4a:5c:d8:18:15:f3:8a: 35:27:63:06:97:6a:9f:3b:13:b2:6c:ae:b9:b2:f2: 65:0f:d4:9a:5a:ae:bf:50:c4:f0:16:7f:f2:2b:ad: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:10:BB:92:B8:22:62:07:D0:A7:11:65:7B:A1:48:16:78:FD:9D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e5:23:5d:45:32:af:57:30:0f:1a:37:6b:46:71:ff:56:4b: 05:27:0f:33:bd:ce:9e:1c:8b:31:c1:44:2c:7d:79:33:84:08: 1b:12:3e:cb:16:17:ab:9b:91:82:19:5d:59:9f:5e:0a:c9:6c: dd:22:2e:c8:b6:4a:36:8b:0c:80:8a:58:8c:a4:52:c7:ba:01: af:80:2c:e2:be:e4:65:0b:18:85:fe:ab:15:54:4d:86:05:db: 17:4e:ab:5b:c6:fd:02:34:08:b2:3a:24:8f:56:0c:d0:12:68: 0e:88:ca:58:51:ef:6d:f0:91:d4:f8:f9:1a:c9:96:50:a7:95: 8d:07:c9:ad:81:74:29:6d:1a:a7:5a:c6:16:e0:1e:05:c0:29: 1e:7d:7d:ee:32:e3:2f:ac:08:71:de:29:ad:40:b7:23:7e:5e: df:c1:be:3e:84:76:e8:02:3c:27:ea:66:89:64:0b:66:88:49: 02:ef:3a:fc:9c:72:bb:83:a1:fc:3e:3f:48:50:67:73:6c:24: a8:df:26:a0:0b:e5:ab:08:21:27:cb:92:63:ae:87:cb:2c:93: 50:98:b2:95:34:ad:7f:dc:dc:76:f0:75:05:52:77:e9:3f:98: 52:40:34:01:6f:d3:27:b6:64:7d:51:81:c3:01:86:56:fd:aa: 9a:fe:e7:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcIGGkq/sRE92LSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTQ3MDU1MDktYTk2ZC00ZTEwLTgwYzctMWZkYTI0ODQxYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR0YlpmoLFfpR4Ql21rMeK88PVbX5VS4eAI4 78GlztttCvnvz8gLeFPsM9KDwMdYs5jEoxtw5IRyRsrRiuaeclplSTPFVBtbC6PK nJyJL6rrdXwEg3ftLwXxnB/C7XAGrSukNd0KgQzGiKr/7WN7x36Nhpfh8617zSzT qquU9edRHbhpOjWPTIp6UhJOviSrvn1mzSDHnpTOF3xrA46Rw9byxMb7798CZvGZ p+z5JLyRNKNGk7hpyJ+vE3Ojc3wdDhXvwikU0AM65D8Z3Lh5+eeXHfxho6w6+0pc 2BgV84o1J2MGl2qfOxOybK65svJlD9SaWq6/UMTwFn/yK62JBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL8Qu5K4ImIH0KcRZXuhSBZ4/Z2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQyMjA5ZjMtMzdjZS0z MmQ2LTk3ZWMtM2Q5OWZmYzZkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHblI11FMq9XMA8aN2tGcf9WSwUnDzO9zp4cizHBRCx9eTOECBsS PssWF6ubkYIZXVmfXgrJbN0iLsi2SjaLDICKWIykUse6Aa+ALOK+5GULGIX+qxVU TYYF2xdOq1vG/QI0CLI6JI9WDNASaA6IylhR723wkdT4+RrJllCnlY0Hya2BdClt GqdaxhbgHgXAKR59fe4y4y+sCHHeKa1AtyN+Xt/Bvj6EdugCPCfqZolkC2aISQLv OvyccruDofw+P0hQZ3NsJKjfJqAL5asIISfLkmOuh8ssk1CYspU0rX/c3HbwdQVS d+k/mFJANAFv0ye2ZH1RgcMBhlb9qpr+56Q= -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:42 2025 by rpki-client