This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa File: 60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa (raw, json) Hash identifier: LfyNS336eJ+DA80UFR1VNBTy6mdUeogBbjR2dxYZ6lo= Subject key identifier: D6:41:61:CD:9E:E3:F7:BE:4F:8E:C7:26:36:0B:16:08:7D:35:1C:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC1885AFCCB2BD1DA90D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396578 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:18:85:af:cc:b2:bd:1d:a9:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=05656d0e-56c9-47ee-bd6e-61ab1f636aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:5c:8e:a1:be:db:84:9b:1c:f0:67:95:28: 12:d7:6d:98:33:f1:b8:70:87:42:60:fc:fc:25:6d: e8:5a:55:b7:3f:1c:67:59:3d:92:db:18:d7:d0:4e: 3c:90:9b:d6:44:bd:45:a0:eb:06:f9:b9:92:c6:d5: 06:6e:78:76:16:53:81:15:93:e1:07:bd:d3:ac:a5: 1f:7b:90:30:63:60:be:c6:e5:2e:31:22:59:aa:40: 0a:6a:9a:9c:19:70:df:8f:fa:b6:98:a0:a5:5c:fd: d7:49:4a:d7:37:ab:6d:fe:3a:ea:73:e4:a0:c2:d4: 3d:63:47:11:bd:d0:2e:0f:10:d0:f1:c4:ea:c3:7f: bd:04:83:dd:40:9e:d6:cd:3e:cd:71:51:4e:f1:9d: f2:41:b2:03:9d:79:5e:98:44:4c:37:59:89:2f:e5: cf:da:9f:ca:a6:fd:6a:32:52:9b:ce:97:03:39:9c: f8:ec:14:6e:fe:21:35:0d:5b:a3:c4:af:1c:2b:a7: 50:78:9b:4c:ca:58:38:73:c0:d0:03:6b:a4:92:ed: 2a:35:68:39:55:11:1c:2e:8a:57:f9:7e:b2:61:d8: 6d:5b:20:ba:fd:26:fa:4e:95:d2:dc:1c:a4:62:39: 0e:45:5c:63:35:6f:9e:01:9e:5e:29:69:5e:f9:62: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:41:61:CD:9E:E3:F7:BE:4F:8E:C7:26:36:0B:16:08:7D:35:1C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:50:02:5e:ee:1d:ae:91:a7:82:22:cb:f1:18:69:3b:d9:c7: 5f:03:03:6d:95:ec:f9:fb:5a:76:cc:e1:58:92:27:76:63:38: 50:3d:03:0e:71:16:53:37:23:53:fa:98:e3:b5:0c:be:f3:d1: 46:5d:59:46:14:0e:ef:2b:45:d8:6e:cd:40:5c:e9:ac:d8:bf: 86:c0:d4:8d:f7:c9:52:1b:f1:cd:7d:34:f7:42:05:24:75:3d: 18:fd:26:53:1c:cd:9f:03:6b:db:1d:b4:4a:46:7c:62:d1:cd: 53:7a:53:d8:4c:0d:f9:c7:03:6c:50:6b:9d:5e:8e:08:b7:8d: be:e8:b6:1a:54:e9:78:6a:13:9a:7a:78:91:57:4b:45:ce:82: 18:44:e9:2f:82:ed:29:46:75:94:b1:7b:76:e7:0d:74:f5:19: b2:e9:c0:78:d6:69:7c:d8:2e:0e:49:8e:a8:f3:a7:c0:13:21: 77:12:a2:19:b5:aa:3a:7b:95:06:8c:6c:5c:72:94:bc:11:a5: dd:c4:5d:d5:7b:4a:ed:dd:75:d4:f5:1b:44:bc:e5:a5:23:15: c5:2a:9f:ce:0b:20:fc:0a:6d:5d:ab:b7:1e:14:ba:f5:e6:e8: f2:80:29:49:9f:9e:e4:6e:8f:65:01:ea:f7:4c:f1:33:30:09: 25:53:77:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3BiFr8yyvR2pDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDU2NTZkMGUtNTZjOS00N2VlLWJkNmUtNjFhYjFmNjM2YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRZcjqG+24SbHPBnlSgS122YM/G4cIdCYPz8 JW3oWlW3PxxnWT2S2xjX0E48kJvWRL1FoOsG+bmSxtUGbnh2FlOBFZPhB73TrKUf e5AwY2C+xuUuMSJZqkAKapqcGXDfj/q2mKClXP3XSUrXN6tt/jrqc+SgwtQ9Y0cR vdAuDxDQ8cTqw3+9BIPdQJ7WzT7NcVFO8Z3yQbIDnXlemERMN1mJL+XP2p/Kpv1q MlKbzpcDOZz47BRu/iE1DVujxK8cK6dQeJtMylg4c8DQA2ukku0qNWg5VREcLopX +X6yYdhtWyC6/Sb6TpXS3BykYjkORVxjNW+eAZ5eKWle+WI17wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZBYc2e4/e+T47HJjYLFgh9NRw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBiYWVlMGUtZmI0ZC0z MDdiLWFiYjktNmZkYmZjZWE3NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVQAl7uHa6Rp4Iiy/EYaTvZx18DA22V7Pn7WnbM4ViSJ3ZjOFA9 Aw5xFlM3I1P6mOO1DL7z0UZdWUYUDu8rRdhuzUBc6azYv4bA1I33yVIb8c19NPdC BSR1PRj9JlMczZ8Da9sdtEpGfGLRzVN6U9hMDfnHA2xQa51ejgi3jb7othpU6Xhq E5p6eJFXS0XOghhE6S+C7SlGdZSxe3bnDXT1GbLpwHjWaXzYLg5Jjqjzp8ATIXcS ohm1qjp7lQaMbFxylLwRpd3EXdV7Su3dddT1G0S85aUjFcUqn84LIPwKbV2rtx4U uvXm6PKAKUmfnuRuj2UB6vdM8TMwCSVTd+g= -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:58 2025 by rpki-client