This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa File: 48dbe947-a47b-3bd7-b077-398aa8b0af85.roa (raw, json) Hash identifier: zA9R5Qo9umpa/qZQOTSvM9axMcbO9xHaYFMNSDx5ECA= Subject key identifier: B3:E4:C9:C1:F6:9A:11:B8:0F:85:20:62:E5:41:E1:E8:06:C2:07:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBFE38CA0FADEC6548C200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 20431 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:fe:38:ca:0f:ad:ec:65:48:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=7bbc37a8-c294-462d-a629-11d5fc381ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:9b:5b:89:9f:35:1a:78:df:45:41:38:24: d2:df:49:05:47:86:c4:ea:98:dd:30:93:04:56:6a: 07:2a:d1:31:eb:d3:83:a7:41:f1:4c:05:df:e0:e8: b8:67:d7:1d:7e:e1:76:8d:e8:26:ad:15:a6:13:eb: 41:3c:a2:b8:eb:2a:a0:54:e6:95:46:e0:3a:ee:83: d5:f8:a8:5c:98:b1:af:b0:97:6e:f0:ec:43:55:b0: d9:b5:ff:5c:74:ec:6f:fe:86:fb:56:77:76:2f:e1: 22:8c:15:2f:43:25:72:ce:16:dc:74:b0:80:a9:f7: 56:b8:86:ae:75:9e:54:36:5e:d8:19:8d:bb:cc:65: 62:c9:37:66:34:e5:c3:49:55:99:ae:7f:66:a5:b8: bd:3e:b5:a5:71:71:00:c0:8d:c1:c2:80:7d:43:93: 40:22:fc:36:61:b0:e2:d2:f7:09:0e:d9:db:21:2e: ef:fe:64:aa:00:2a:19:11:ed:c8:ed:02:34:36:97: b9:7f:42:a2:eb:eb:d7:5e:af:ab:16:ed:ba:a0:79: 42:6c:0c:ce:bf:f8:d0:5a:31:74:ba:ae:07:10:02: 9c:b2:f0:4d:9e:bb:49:62:11:60:35:85:6a:87:62: 57:e7:ee:a1:9b:28:17:41:51:5b:fb:10:bd:13:2f: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E4:C9:C1:F6:9A:11:B8:0F:85:20:62:E5:41:E1:E8:06:C2:07:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:70:e4:28:bc:87:65:ca:f3:c3:7a:e7:85:fd:f6:c1:da:72: a7:83:08:bd:89:23:bf:fe:bd:e1:39:3a:a9:c2:5f:f5:f9:84: 73:9e:ad:25:86:c9:bd:30:17:3f:28:96:03:3f:d5:72:d4:f8: 8d:ec:de:5d:97:82:88:a9:86:d0:9f:f2:21:b1:da:79:57:85: ef:32:5a:ec:5e:ae:6d:54:03:8d:4b:02:61:35:7a:15:57:28: da:ca:75:08:b2:b4:b9:f9:9e:d7:92:fd:bb:5f:86:44:8e:cf: 9d:9c:ac:df:a4:d5:5b:5d:d9:e0:a9:5a:d4:44:03:04:50:2e: 40:d1:13:07:d1:12:9d:4a:14:9c:43:b3:28:5c:62:26:54:3d: b8:2f:c4:78:fc:4f:8c:9f:4f:af:c4:4a:c0:a2:6b:0b:e8:01: e7:f6:98:72:f8:c8:af:4f:23:a6:c2:41:5a:07:d2:e8:3a:87: 41:f4:a2:3f:52:a4:8c:24:73:07:5f:1a:9e:db:bc:61:98:d4: 13:53:90:13:a6:d9:f7:d3:59:8d:1c:32:4e:c5:36:dd:b0:2e: 32:5e:a7:7e:38:eb:29:51:d1:6e:af:0c:bb:52:34:b7:80:24: 39:2b:09:a8:4f:bf:1c:ca:6b:86:83:2a:04:80:5a:b1:31:9a: 48:09:8c:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2/44yg+t7GVIwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk N2JiYzM3YTgtYzI5NC00NjJkLWE2MjktMTFkNWZjMzgxZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5ebW4mfNRp430VBOCTS30kFR4bE6pjdMJME VmoHKtEx69ODp0HxTAXf4Oi4Z9cdfuF2jegmrRWmE+tBPKK46yqgVOaVRuA67oPV +KhcmLGvsJdu8OxDVbDZtf9cdOxv/ob7Vnd2L+EijBUvQyVyzhbcdLCAqfdWuIau dZ5UNl7YGY27zGViyTdmNOXDSVWZrn9mpbi9PrWlcXEAwI3BwoB9Q5NAIvw2YbDi 0vcJDtnbIS7v/mSqACoZEe3I7QI0Npe5f0Ki6+vXXq+rFu26oHlCbAzOv/jQWjF0 uq4HEAKcsvBNnrtJYhFgNYVqh2JX5+6hmygXQVFb+xC9Ey/qpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPkycH2mhG4D4UgYuVB4egGwgeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDhkYmU5NDctYTQ3Yi0z YmQ3LWIwNzctMzk4YWE4YjBhZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVw5Ci8h2XK88N654X99sHacqeDCL2JI7/+veE5OqnCX/X5hHOe rSWGyb0wFz8olgM/1XLU+I3s3l2XgoiphtCf8iGx2nlXhe8yWuxerm1UA41LAmE1 ehVXKNrKdQiytLn5nteS/btfhkSOz52crN+k1Vtd2eCpWtREAwRQLkDREwfREp1K FJxDsyhcYiZUPbgvxHj8T4yfT6/ESsCiawvoAef2mHL4yK9PI6bCQVoH0ug6h0H0 oj9SpIwkcwdfGp7bvGGY1BNTkBOm2ffTWY0cMk7FNt2wLjJep3446ylR0W6vDLtS NLeAJDkrCahPvxzKa4aDKgSAWrExmkgJjAY= -----END CERTIFICATE-----Generated at Sun Dec 21 19:07:16 2025 by rpki-client