This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa File: fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa (raw, json) Hash identifier: su6WqKdj8anv65yH1UtaEhPKuq64UW5EF2P+upu8q70= Subject key identifier: CC:91:E1:5B:11:72:02:8A:A7:5A:C2:98:AF:24:EE:30:EE:AC:E8:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BEDB5DAE7680F91D0525C7B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:da:e7:68:0f:91:d0:52:5c:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=cc8ff18c-4b08-4c12-ab3a-60ab9c9ea5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:1a:9d:bb:db:36:3b:29:68:f4:be:7e:4e: 32:f2:3e:6a:1c:a7:db:cc:09:85:14:2a:ea:c5:64: 59:39:76:33:51:2d:1e:99:c7:aa:8f:31:a3:8d:f5: 58:94:12:ad:2d:95:12:ba:4d:be:17:bf:8a:c2:7d: 11:ee:3a:7b:11:51:2b:59:ba:ff:be:78:ff:bd:54: 89:98:f4:27:08:2c:c8:b3:db:44:10:3f:25:c3:09: 57:1c:0d:30:b1:26:de:49:2e:c6:ba:bf:f1:9c:a3: da:7e:71:a9:58:03:bc:4a:0c:65:45:4a:6f:90:07: 86:93:88:c8:63:9a:80:c7:c6:57:95:72:da:1b:95: ce:dc:9e:de:d8:8f:7e:c0:e5:e9:96:fe:91:63:fa: f5:a8:61:3a:9d:89:44:d7:e2:a2:43:90:04:85:1d: db:4a:2c:2e:5c:af:ed:0b:8f:16:77:b2:9e:b3:5b: 2e:9a:08:6b:38:08:2c:a4:67:64:cf:df:b7:19:c5: 45:98:67:bf:c6:3c:2b:c6:fd:23:52:7b:37:8c:36: e2:fd:3f:40:b4:88:ac:af:dc:2e:81:c8:bb:aa:82: 38:04:53:bd:70:f5:7a:99:38:5c:f8:13:6b:e0:11: ff:73:29:8a:6d:c1:e6:33:0a:2b:3e:2b:2c:9c:e4: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:91:E1:5B:11:72:02:8A:A7:5A:C2:98:AF:24:EE:30:EE:AC:E8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ae::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d8:cb:07:45:2c:b8:df:aa:12:d8:cf:be:71:aa:be:8d:a3: 86:2e:8b:1d:b4:d6:f7:d0:b8:e1:43:16:93:86:bf:e1:e3:12: 13:a3:4c:b7:70:90:23:7d:04:3c:84:8d:8c:f3:25:4b:ff:23: 49:3f:b2:20:be:cd:47:80:09:03:ae:ae:00:5b:fd:86:fe:42: 16:64:be:a1:62:2f:19:1b:46:90:63:d1:7d:b2:78:07:80:89: c3:54:03:39:c1:77:7d:54:b6:7e:5c:1b:f8:6c:fb:2b:fa:45: 02:58:12:00:02:c7:30:cd:d5:39:25:b4:65:26:51:e7:8d:47: 87:70:2b:fd:d3:ff:91:74:0b:a3:41:17:98:63:5c:b1:7f:24: 5b:fb:7c:df:6d:f5:18:6f:97:98:03:5c:2b:74:fb:00:a4:6c: 51:66:3c:0a:37:1b:57:74:18:76:fb:9c:f4:f1:51:03:dc:55: 4b:72:97:7a:17:10:0e:5c:8f:9a:a2:90:9c:fd:05:d4:95:82: fb:e7:90:9e:76:07:9d:e1:aa:e9:ff:d0:ad:28:84:fb:19:cb: 80:cd:39:30:8d:ad:37:b0:2f:cd:7b:98:7d:b3:74:c6:ac:1e: a9:f1:a2:39:c3:a9:9e:cf:6c:00:f7:c7:a3:d6:f0:4c:47:a1: 02:a5:c0:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvttdrnaA+R0FJcewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2M4ZmYxOGMtNGIwOC00YzEyLWFiM2EtNjBhYjljOWVhNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f0anbvbNjspaPS+fk4y8j5qHKfbzAmFFCrq xWRZOXYzUS0emceqjzGjjfVYlBKtLZUSuk2+F7+Kwn0R7jp7EVErWbr/vnj/vVSJ mPQnCCzIs9tEED8lwwlXHA0wsSbeSS7Gur/xnKPafnGpWAO8SgxlRUpvkAeGk4jI Y5qAx8ZXlXLaG5XO3J7e2I9+wOXplv6RY/r1qGE6nYlE1+KiQ5AEhR3bSiwuXK/t C48Wd7Kes1sumghrOAgspGdkz9+3GcVFmGe/xjwrxv0jUns3jDbi/T9AtIisr9wu gci7qoI4BFO9cPV6mThc+BNr4BH/cymKbcHmMworPissnORFnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyR4VsRcgKKp1rCmK8k7jDurOiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI1NGNlODgtMWFmMi0z OWY5LThiZDAtYTc3ZjVhNDQwMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdACu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7YywdFLLjfqhLYz75xqr6No4Yuix201vfQuOFDFpOGv+HjEhOj TLdwkCN9BDyEjYzzJUv/I0k/siC+zUeACQOurgBb/Yb+QhZkvqFiLxkbRpBj0X2y eAeAicNUAznBd31Utn5cG/hs+yv6RQJYEgACxzDN1TkltGUmUeeNR4dwK/3T/5F0 C6NBF5hjXLF/JFv7fN9t9Rhvl5gDXCt0+wCkbFFmPAo3G1d0GHb7nPTxUQPcVUty l3oXEA5cj5qikJz9BdSVgvvnkJ52B53hqun/0K0ohPsZy4DNOTCNrTewL817mH2z dMasHqnxojnDqZ7PbAD3x6PW8ExHoQKlwME= -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:02 2025 by rpki-client