This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa File: e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa (raw, json) Hash identifier: OFqikf/eXA5NO3FnOU+QAk/Ts9II0ruNJ8LU240o4uM= Subject key identifier: 82:BD:87:BB:AF:88:6F:43:97:F2:33:E4:AD:16:F0:A5:D2:0F:B5:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBE85A7794845A6B55B438 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396544 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e8:5a:77:94:84:5a:6b:55:b4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ae2c0529-d712-4a3e-8a2b-b9c83fe19124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:f8:92:7d:bd:c2:c8:7e:20:b8:7b:25:be: 69:fc:6a:a8:bc:78:aa:2b:d6:3d:69:89:a1:22:02: 9c:bc:6e:ea:fe:be:99:6c:ca:43:7c:16:cf:fa:e9: e6:ee:01:f7:08:45:65:9f:7d:7f:f8:59:ee:63:2a: f4:70:54:cd:18:df:8f:1b:fa:32:41:78:b9:2a:73: fe:62:dd:a8:ae:40:4d:92:01:db:2b:f9:68:58:79: 9e:d6:5e:98:e3:9d:25:2e:12:9e:52:51:f8:d0:c5: c8:2a:32:88:d1:b0:ee:63:4f:09:ac:ad:9a:81:8b: 62:a9:35:97:16:e5:45:b6:8c:60:59:32:d3:54:34: 2b:2b:c8:4d:b4:0d:7a:59:b0:3f:44:24:58:0e:bd: 9f:d6:e3:8b:57:15:50:50:e8:ad:38:e6:5d:9e:1a: 22:2d:97:ab:f2:ab:c8:e1:aa:75:65:1d:19:0b:37: 54:cb:51:7a:97:7d:bf:2b:43:4e:20:ef:4b:d9:44: e4:3b:f5:e2:41:51:49:d6:cf:b1:a1:b0:e6:ee:6e: 3d:4c:88:cb:10:ef:bf:82:62:14:05:8b:ec:88:60: 4d:eb:0d:2b:7f:53:fa:87:d8:e0:f5:35:84:d4:5a: 22:87:5e:16:bf:76:ec:fc:f7:8d:b5:5f:dd:92:76: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:87:BB:AF:88:6F:43:97:F2:33:E4:AD:16:F0:A5:D2:0F:B5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:05:b6:53:67:8a:63:ca:ad:46:cb:4e:df:6d:5c:8e:b0:75: a7:17:99:ee:f8:c7:ce:79:ae:a4:3e:d4:9d:af:7b:0b:7c:75: 26:46:cf:08:e5:a0:01:01:05:d8:1a:b0:35:55:5d:01:62:da: 16:72:20:6c:6d:b4:e4:8a:f3:48:56:34:0a:30:92:c5:f8:e9: bb:a8:f6:0f:02:d6:6f:61:b7:d2:64:53:e2:98:9f:da:6f:e6: 90:70:b2:86:14:43:f6:5d:28:7a:7f:fa:97:48:76:6f:9b:a0: 97:5c:5b:94:b7:c6:72:b0:ae:ad:58:33:4d:df:21:c8:cd:9a: 52:46:73:1a:45:7b:51:bd:3f:70:60:a9:c5:f9:2d:1c:eb:6a: 58:42:7c:42:db:45:16:dc:be:db:cd:0e:a4:c9:43:5e:c3:2c: c4:81:bf:8d:8d:98:7b:58:b7:7e:91:ae:91:76:0e:60:3a:ae: 5c:4a:aa:f4:41:ae:6d:ed:72:a2:1c:69:8f:43:92:d5:1a:47: 09:34:39:e1:bd:2a:8c:28:59:c4:6e:91:70:82:d2:69:f1:42: d5:12:95:27:71:dc:d4:9f:d7:81:38:1b:35:61:0f:b0:80:8d: a8:a3:bd:7c:d6:c5:63:6e:89:64:1a:13:f3:aa:6d:9f:1e:d6: a0:56:b8:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2+had5SEWmtVtDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YWUyYzA1MjktZDcxMi00YTNlLThhMmItYjljODNmZTE5MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Af4kn29wsh+ILh7Jb5p/GqovHiqK9Y9aYmh IgKcvG7q/r6ZbMpDfBbP+unm7gH3CEVln31/+FnuYyr0cFTNGN+PG/oyQXi5KnP+ Yt2orkBNkgHbK/loWHme1l6Y450lLhKeUlH40MXIKjKI0bDuY08JrK2agYtiqTWX FuVFtoxgWTLTVDQrK8hNtA16WbA/RCRYDr2f1uOLVxVQUOitOOZdnhoiLZer8qvI 4ap1ZR0ZCzdUy1F6l32/K0NOIO9L2UTkO/XiQVFJ1s+xobDm7m49TIjLEO+/gmIU BYvsiGBN6w0rf1P6h9jg9TWE1Foih14Wv3bs/PeNtV/dknbdCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIK9h7uviG9Dl/Iz5K0W8KXSD7VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQ3MjBhMWEtY2U4YS0z M2ZjLTk3NDEtNmFiYmRjNDA3N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQFtlNnimPKrUbLTt9tXI6wdacXme74x855rqQ+1J2vewt8dSZG zwjloAEBBdgasDVVXQFi2hZyIGxttOSK80hWNAowksX46buo9g8C1m9ht9JkU+KY n9pv5pBwsoYUQ/ZdKHp/+pdIdm+boJdcW5S3xnKwrq1YM03fIcjNmlJGcxpFe1G9 P3BgqcX5LRzralhCfELbRRbcvtvNDqTJQ17DLMSBv42NmHtYt36RrpF2DmA6rlxK qvRBrm3tcqIcaY9DktUaRwk0OeG9KowoWcRukXCC0mnxQtUSlSdx3NSf14E4GzVh D7CAjaijvXzWxWNuiWQaE/OqbZ8e1qBWuBA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:46 2026 by rpki-client