This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef20262d-6dcf-3d03-bbea-95731ec7e13d.roa File: ef20262d-6dcf-3d03-bbea-95731ec7e13d.roa (raw, json) Hash identifier: pqJpz+bnAKLD0x83MBC8l+DSrqYxhOqxalSwb302m1E= Subject key identifier: 2B:01:02:AD:40:A9:2C:BC:AC:52:33:6A:9E:FF:D3:52:EF:6C:A0:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C02A61BF7D03246B5F05B2400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef20262d-6dcf-3d03-bbea-95731ec7e13d.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 396567 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:1b:f7:d0:32:46:b5:f0:5b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=ea65ddce-fe15-4c78-8f48-c371ffa68607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:89:fb:d8:c2:92:0d:f4:ac:54:ca:18:40: d6:b1:b4:19:da:bb:13:a7:b8:f5:fe:f7:fc:fa:c0: 4f:db:dd:f4:3d:31:ad:83:93:61:7c:98:43:2a:5c: 5c:44:1b:25:93:b2:dd:61:26:23:09:66:13:8b:03: bb:f8:80:13:fc:f8:e4:74:8b:69:27:12:5a:a2:cc: 17:1a:85:11:a9:87:c5:6c:ea:fb:fa:0d:26:f1:27: 06:26:02:0a:01:1c:84:97:82:fd:be:c8:ef:c3:1d: 91:16:01:06:2e:bf:7b:cf:62:9b:d2:0a:e5:3a:6f: a9:a3:94:57:fe:9a:7b:97:30:d3:0a:a3:e2:b6:1e: 87:70:3c:a0:6c:4b:8a:67:da:37:40:e9:ca:1c:73: 7a:43:21:c3:a2:6c:77:81:41:b0:f2:5f:52:84:e5: 19:9e:76:73:15:a9:33:ec:64:c0:7a:9c:0c:25:32: c4:b0:d7:81:5a:6c:34:ef:71:ae:6d:f9:7e:7d:ca: 20:05:6d:e1:d4:8a:e0:a7:09:bc:94:7e:21:01:20: 7c:9e:f2:0b:4a:fc:57:37:65:3c:d7:ba:a1:32:3e: e6:25:51:77:cc:d3:3a:fc:ad:1a:96:ed:8b:4f:22: 23:f3:f9:cc:93:15:6a:ac:29:a5:51:44:8b:2c:d9: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:01:02:AD:40:A9:2C:BC:AC:52:33:6A:9E:FF:D3:52:EF:6C:A0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef20262d-6dcf-3d03-bbea-95731ec7e13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ff:6c:bd:af:20:03:15:a5:fa:a3:65:df:39:19:59:6b:89: ae:8d:f8:58:a6:af:53:9d:db:b5:f6:96:5a:0f:ba:a1:67:f8: 53:f7:37:57:f0:8c:c1:fe:73:28:da:66:b5:04:22:84:8e:c8: 22:ea:e0:e1:10:02:61:e9:f6:50:b6:22:9c:97:9d:fb:19:a4: ec:0e:18:f2:92:5e:20:24:66:1b:cf:d6:11:d3:df:8f:14:a6: 35:a4:19:19:8a:05:c7:2d:d1:48:f2:e7:17:0e:8c:ce:f0:05: 95:e3:2d:36:3a:1b:c5:d4:63:66:19:03:3c:47:64:6f:88:33: d3:3b:29:af:cd:f9:fc:93:9f:9a:c0:b0:38:c4:3c:64:bc:ac: 23:8a:95:85:d3:2a:a6:66:7e:18:9c:54:4a:71:b5:16:bd:41: 84:bf:a3:9e:2e:c2:1d:26:bb:7b:71:93:0d:10:b0:71:e0:03: 50:0c:df:bd:45:ef:96:50:60:01:df:12:a5:5a:b7:26:dd:d1: 13:b3:e9:c3:9c:e8:59:49:ce:3f:cc:0b:51:7b:78:fb:87:4a: 87:78:e2:69:6c:a9:56:e6:c0:58:54:83:dc:d1:7d:aa:49:70: c2:4e:2f:d6:de:43:ee:65:78:e9:85:ed:a4:aa:f4:6b:2a:bd: cf:26:00:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwCphv30DJGtfBbJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk ZWE2NWRkY2UtZmUxNS00Yzc4LThmNDgtYzM3MWZmYTY4NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc+J+9jCkg30rFTKGEDWsbQZ2rsTp7j1/vf8 +sBP2930PTGtg5NhfJhDKlxcRBslk7LdYSYjCWYTiwO7+IAT/PjkdItpJxJaoswX GoURqYfFbOr7+g0m8ScGJgIKARyEl4L9vsjvwx2RFgEGLr97z2Kb0grlOm+po5RX /pp7lzDTCqPith6HcDygbEuKZ9o3QOnKHHN6QyHDomx3gUGw8l9ShOUZnnZzFakz 7GTAepwMJTLEsNeBWmw073Gubfl+fcogBW3h1Irgpwm8lH4hASB8nvILSvxXN2U8 17qhMj7mJVF3zNM6/K0alu2LTyIj8/nMkxVqrCmlUUSLLNknPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCsBAq1AqSy8rFIzap7/01LvbKDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWYyMDI2MmQtNmRjZi0z ZDAzLWJiZWEtOTU3MzFlYzdlMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBK/2y9ryADFaX6o2XfORlZa4mujfhYpq9Tndu1 9pZaD7qhZ/hT9zdX8IzB/nMo2ma1BCKEjsgi6uDhEAJh6fZQtiKcl537GaTsDhjy kl4gJGYbz9YR09+PFKY1pBkZigXHLdFI8ucXDozO8AWV4y02OhvF1GNmGQM8R2Rv iDPTOymvzfn8k5+awLA4xDxkvKwjipWF0yqmZn4YnFRKcbUWvUGEv6OeLsIdJrt7 cZMNELBx4ANQDN+9Re+WUGAB3xKlWrcm3dETs+nDnOhZSc4/zAtRe3j7h0qHeOJp bKlW5sBYVIPc0X2qSXDCTi/W3kPuZXjphe2kqvRrKr3PJgAd -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:44 2025 by rpki-client