This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa File: 502243c1-fb15-33d1-aa95-26f462f34e57.roa (raw, json) Hash identifier: DpUV6wgi//bQN8y7cejrlzgJebwaFwtgiMxUsQrtRkU= Subject key identifier: 61:04:9E:54:9D:15:1B:51:14:18:18:A6:5A:FD:10:64:5B:27:AF:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DBDED0E3581A3E674BE180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396575 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:de:d0:e3:58:1a:3e:67:4b:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=53925fef-db68-409f-9eb1-5834219d8f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:ce:c8:de:9b:bc:7b:94:cf:bb:3e:f7:44: 95:ff:ce:bb:b4:ad:5b:9e:a5:47:7e:35:06:25:82: c0:0c:09:b4:b1:69:fa:b8:66:91:7e:8b:f6:e3:2c: 67:c0:18:b0:a8:66:4e:e6:3f:94:4f:03:50:4d:8e: 49:a5:84:f1:47:72:83:bc:c2:c5:9b:b5:67:a4:fa: ab:92:7a:61:18:b9:76:33:2a:d2:b5:56:8e:01:b7: 74:80:96:b0:12:f7:b7:bb:1b:45:00:7b:6c:f8:cf: 5b:5c:44:f0:f2:14:c4:50:6f:98:6e:be:a6:fa:44: 76:e2:df:92:9f:1d:49:fa:c0:ae:13:bb:4b:7b:8b: 5e:48:a6:1c:98:38:ac:90:b5:f5:66:97:67:55:a3: 61:df:e2:14:2b:88:28:db:7d:ef:b6:bf:d4:62:0c: ac:d1:1d:bb:65:21:ee:4f:f5:a1:8a:f3:85:aa:6e: 42:cc:71:49:68:4a:88:2c:ae:9b:ae:21:84:62:33: 18:31:4d:8d:76:1d:f1:9e:76:c5:5d:4d:10:a0:fd: f8:82:a9:8f:6d:46:32:da:78:96:c6:6d:ac:6c:36: 5a:f8:74:36:90:99:ef:9b:7d:99:5b:f7:d8:8e:64: 05:bd:49:03:89:db:7e:a4:48:18:4b:7c:9d:e2:95: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:9E:54:9D:15:1B:51:14:18:18:A6:5A:FD:10:64:5B:27:AF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:80:f2:24:99:f3:4e:dc:15:44:fa:78:5c:c6:3e:65:dc:b7: 44:8b:4a:64:d2:04:29:ce:b8:aa:e4:49:1b:f1:3d:9b:f7:17: cf:10:10:06:70:74:02:07:c4:2d:08:5f:fe:5e:88:83:31:de: fe:b4:8e:00:a5:db:37:1e:34:47:4b:58:7d:09:73:80:d3:5f: b5:61:7b:12:e4:db:59:8e:10:82:6b:b3:6f:49:84:61:5e:f2: ba:b3:51:30:70:1d:ef:a8:0f:ef:c0:f2:c6:bd:9b:56:eb:bb: c5:c5:d1:db:1a:b7:7a:b6:4b:f3:66:b6:2e:1c:a1:d6:35:2d: 92:17:c3:9c:14:22:c2:12:67:7d:8f:d4:a1:3e:4b:bb:f1:fc: 5a:5c:9e:ea:26:ab:d0:b5:ac:02:25:44:47:ea:52:78:cb:91: b4:54:98:40:0e:d2:52:9c:05:f3:9e:19:c6:50:3f:fc:4f:0f: e7:d9:c4:2c:aa:e9:dd:13:5a:1d:63:e8:ea:e6:5d:74:e4:69: 6a:30:96:4b:e0:63:d9:f3:92:43:51:6c:11:4f:ca:02:7c:2c: bc:59:14:f1:04:c4:69:82:71:65:1d:16:1b:51:c4:c7:20:85: fe:a2:de:11:93:16:8f:07:0a:91:13:21:4f:cc:74:71:71:fd: 04:16:73:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC297Q41gaPmdL4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTM5MjVmZWYtZGI2OC00MDlmLTllYjEtNTgzNDIxOWQ4ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys7OyN6bvHuUz7s+90SV/867tK1bnqVHfjUG JYLADAm0sWn6uGaRfov24yxnwBiwqGZO5j+UTwNQTY5JpYTxR3KDvMLFm7VnpPqr knphGLl2MyrStVaOAbd0gJawEve3uxtFAHts+M9bXETw8hTEUG+Ybr6m+kR24t+S nx1J+sCuE7tLe4teSKYcmDiskLX1ZpdnVaNh3+IUK4go233vtr/UYgys0R27ZSHu T/WhivOFqm5CzHFJaEqILK6briGEYjMYMU2Ndh3xnnbFXU0QoP34gqmPbUYy2niW xm2sbDZa+HQ2kJnvm32ZW/fYjmQFvUkDidt+pEgYS3yd4pWPEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEEnlSdFRtRFBgYplr9EGRbJ6/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAyMjQzYzEtZmIxNS0z M2QxLWFhOTUtMjZmNDYyZjM0ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyA8iSZ807cFUT6eFzGPmXct0SLSmTSBCnOuKrkSRvxPZv3F88Q EAZwdAIHxC0IX/5eiIMx3v60jgCl2zceNEdLWH0Jc4DTX7VhexLk21mOEIJrs29J hGFe8rqzUTBwHe+oD+/A8sa9m1bru8XF0dsat3q2S/Nmti4codY1LZIXw5wUIsIS Z32P1KE+S7vx/Fpcnuomq9C1rAIlREfqUnjLkbRUmEAO0lKcBfOeGcZQP/xPD+fZ xCyq6d0TWh1j6OrmXXTkaWowlkvgY9nzkkNRbBFPygJ8LLxZFPEExGmCcWUdFhtR xMcghf6i3hGTFo8HCpETIU/MdHFx/QQWc3Q= -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:58 2025 by rpki-client