This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa File: ef7ff300-591b-3e30-9d51-5402d83de4b6.roa (raw, json) Hash identifier: yxvDI2XpdpOtBQFzeqAmWQb9Sc24TUtgzJLPMwo5A7A= Subject key identifier: 63:47:DD:AC:A6:90:8E:B9:9A:99:AD:AB:BB:87:2A:00:95:93:15:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C1B56327127E34FE5E800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396565 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:1b:56:32:71:27:e3:4f:e5:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=988fd008-d0fe-47f5-8880-8127b3baab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:4e:ea:9a:a1:e5:93:83:e1:b0:ea:f0:d2: ee:7f:c5:6e:65:4c:0b:7e:72:70:73:bb:4d:63:48: 79:e3:95:86:72:b8:92:ad:55:61:50:45:f3:00:12: 11:16:27:61:c8:64:02:c7:f5:bc:2e:45:cd:ab:2a: 85:6f:a2:63:87:57:17:6a:f4:65:eb:c4:4f:c5:55: 49:55:fe:03:2f:4e:1b:90:d4:e0:3e:fa:de:54:f5: b9:3b:7b:84:80:65:02:83:19:dc:c0:58:0a:39:99: 79:de:fa:9f:6f:98:6d:ad:20:47:91:8f:a1:8b:83: eb:84:67:7f:b9:09:ef:17:20:b2:40:8d:0d:da:47: a1:e1:16:46:3a:82:e1:22:da:a0:b6:d0:a5:bd:03: 1d:4a:13:61:f3:b3:c0:7a:5a:04:20:2b:3c:80:5c: 9b:27:fc:02:12:12:6b:7c:e3:5a:c6:27:90:db:54: f0:98:1a:e8:d1:cb:f8:dd:c8:9a:af:03:fb:b8:e4: ce:23:4f:6b:d0:46:45:71:2d:53:8c:a0:b0:3c:8e: 03:14:39:29:57:0b:43:cf:55:85:24:95:bb:77:38: 62:2a:71:20:30:48:76:39:2e:12:4e:aa:24:85:c3: 60:56:f1:9e:44:2e:9f:84:e3:23:7c:22:23:17:9d: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:DD:AC:A6:90:8E:B9:9A:99:AD:AB:BB:87:2A:00:95:93:15:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7a:8e:8d:68:c1:84:26:dd:98:1d:e5:da:f6:c0:5e:c5:a3: 1a:c0:3b:0e:3d:12:ad:19:eb:7e:08:d7:b0:96:de:7f:da:a8: 5e:b8:6f:b0:8d:34:ec:e8:b1:a1:95:0c:86:5f:7e:5e:26:8a: 97:bb:f6:03:ec:03:50:94:17:e3:72:08:3b:f3:c3:eb:42:1f: 03:ae:a1:5a:ef:63:31:24:4b:9e:40:e3:b0:cd:62:b3:50:f1: e4:e2:82:c6:5e:a5:e2:fa:11:4e:19:a2:c5:ab:22:0e:87:d4: ff:62:77:22:bf:ab:b5:ba:60:30:d3:ac:f4:1e:fc:16:c7:1d: 40:94:a0:43:5b:04:e3:9d:d5:e9:7f:7a:75:5d:eb:4b:01:5a: 5b:61:6a:ed:34:3d:9f:00:36:06:19:6a:26:5a:f2:e7:f8:ae: 91:c6:fb:27:05:d4:fd:9f:5c:e0:40:24:9c:4f:0a:f8:d8:8e: 64:89:f6:92:56:90:ce:9d:08:8f:64:f6:f3:a1:37:8f:d0:97: b8:76:4d:e6:68:2a:ef:a2:86:8f:75:33:75:9e:33:24:c7:7c: 1b:6e:31:ae:1b:69:92:ed:d0:05:31:79:ca:a1:62:be:86:20: 71:52:7d:66:ab:38:34:de:0c:8d:61:b0:74:96:5a:7a:e4:0d: 7d:88:b7:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXBtWMnEn40/l6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk OTg4ZmQwMDgtZDBmZS00N2Y1LTg4ODAtODEyN2IzYmFhYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJO6pqh5ZOD4bDq8NLuf8VuZUwLfnJwc7tN Y0h545WGcriSrVVhUEXzABIRFidhyGQCx/W8LkXNqyqFb6Jjh1cXavRl68RPxVVJ Vf4DL04bkNTgPvreVPW5O3uEgGUCgxncwFgKOZl53vqfb5htrSBHkY+hi4PrhGd/ uQnvFyCyQI0N2keh4RZGOoLhItqgttClvQMdShNh87PAeloEICs8gFybJ/wCEhJr fONaxieQ21TwmBro0cv43ciarwP7uOTOI09r0EZFcS1TjKCwPI4DFDkpVwtDz1WF JJW7dzhiKnEgMEh2OS4STqokhcNgVvGeRC6fhOMjfCIjF52P8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGNH3aymkI65mpmtq7uHKgCVkxUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY3ZmYzMDAtNTkxYi0z ZTMwLTlkNTEtNTQwMmQ4M2RlNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKeo6NaMGEJt2YHeXa9sBexaMawDsOPRKtGet+ CNewlt5/2qheuG+wjTTs6LGhlQyGX35eJoqXu/YD7ANQlBfjcgg788PrQh8DrqFa 72MxJEueQOOwzWKzUPHk4oLGXqXi+hFOGaLFqyIOh9T/Ynciv6u1umAw06z0HvwW xx1AlKBDWwTjndXpf3p1XetLAVpbYWrtND2fADYGGWomWvLn+K6RxvsnBdT9n1zg QCScTwr42I5kifaSVpDOnQiPZPbzoTeP0Je4dk3maCrvooaPdTN1njMkx3wbbjGu G2mS7dAFMXnKoWK+hiBxUn1mqzg03gyNYbB0llp65A19iLf+ -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:44 2026 by rpki-client