This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa File: d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa (raw, json) Hash identifier: IWD6f2yrc9M2DTilanJRHsfoPsjZZxYs183FguT+nlk= Subject key identifier: 67:37:94:A6:8C:49:86:D8:6C:BD:5F:1E:8B:1D:14:EB:9E:24:24:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C42DC1F1CA946697FD0D739D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 396571 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1f:1c:a9:46:69:7f:d0:d7:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=92cdd8e5-a1e2-429f-a753-77d872494d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:6a:f9:d1:69:d4:d1:3f:74:76:8e:0f:2a: 19:e6:26:8f:0a:76:ab:bb:4d:2e:5a:1c:e2:ee:c3: 41:2c:0c:d4:c6:1b:a4:c5:fa:5f:a1:22:6f:d2:2b: eb:e6:72:08:3e:e6:0d:c1:19:bf:c9:a0:43:35:a4: 7e:66:69:21:28:ab:50:da:3d:14:be:19:f4:29:55: dd:a0:81:4d:69:c0:af:b9:24:df:b3:7a:2e:d6:93: 81:51:6e:ba:da:6f:f8:05:41:86:91:a6:24:05:49: dd:d1:56:92:f1:68:3f:f9:4b:98:f1:3e:60:3f:6b: 59:90:bd:45:82:35:2a:c6:f8:92:b8:ab:92:16:75: ea:66:13:8e:64:94:a1:27:a2:43:29:cf:93:a0:58: 28:df:dd:4d:f1:c4:8a:f2:91:7a:6e:ac:78:2f:d0: ed:34:12:b2:e4:6a:85:3d:8f:d9:69:c4:1c:77:52: 38:fc:b8:aa:ee:00:07:5e:f4:4b:fd:0c:12:dc:7b: db:9e:3f:2e:1f:8e:5b:fd:f2:ec:05:86:c9:80:99: 7c:e2:4e:15:2c:94:78:60:f9:4e:6b:05:2c:40:6e: 1d:65:3c:11:ea:ba:bd:83:c4:03:d7:34:ba:fd:71: 93:f8:ef:81:7d:21:4e:f7:77:11:de:08:8a:43:e1: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:94:A6:8C:49:86:D8:6C:BD:5F:1E:8B:1D:14:EB:9E:24:24:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2f:0d:08:9a:29:b2:6c:29:a8:17:c8:9d:89:3a:ff:64:38: c0:fb:01:35:ed:17:ab:69:31:4f:34:3e:19:9d:c8:8f:5f:f8: 0a:5b:3e:98:f7:10:f0:5a:20:c3:07:80:16:ea:b9:ce:ee:d7: 37:92:cc:90:b7:b3:92:0b:e0:62:66:55:fa:ff:d8:14:dc:69: 93:ef:4b:a7:d3:ea:42:2a:7d:c0:a2:04:f3:db:50:d0:61:8d: 21:6c:45:b6:99:fb:cf:ab:64:d5:a7:a6:4a:66:53:52:3c:bc: 6d:ee:aa:ca:e3:61:a4:34:aa:f1:69:91:96:b2:91:5d:46:b7: c9:93:76:3d:41:d3:0f:07:b0:73:a7:93:d4:d8:10:4b:78:93: 4b:83:e2:e2:9a:64:3e:e5:8b:ca:aa:e4:5c:a4:5d:3a:15:54: 46:cc:e5:f6:a2:2f:90:67:f2:d8:b7:1c:c9:9f:bb:c4:9a:34: 61:ac:52:8f:5f:9d:c6:53:6f:11:07:eb:f5:37:02:f1:b0:45: e4:ef:59:c3:e5:cf:53:44:f9:84:6e:9b:83:57:47:ed:aa:d1: 8d:21:07:6c:7f:27:e8:64:18:42:ff:22:47:6e:05:bf:d8:d6: a0:d2:f8:87:cf:5d:b6:f4:80:b9:f0:b0:a4:58:9a:6a:c7:44: a5:33:69:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3B8cqUZpf9DXOdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OTJjZGQ4ZTUtYTFlMi00MjlmLWE3NTMtNzdkODcyNDk0ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFNq+dFp1NE/dHaODyoZ5iaPCnaru00uWhzi 7sNBLAzUxhukxfpfoSJv0ivr5nIIPuYNwRm/yaBDNaR+ZmkhKKtQ2j0Uvhn0KVXd oIFNacCvuSTfs3ou1pOBUW662m/4BUGGkaYkBUnd0VaS8Wg/+UuY8T5gP2tZkL1F gjUqxviSuKuSFnXqZhOOZJShJ6JDKc+ToFgo391N8cSK8pF6bqx4L9DtNBKy5GqF PY/ZacQcd1I4/Liq7gAHXvRL/QwS3Hvbnj8uH45b/fLsBYbJgJl84k4VLJR4YPlO awUsQG4dZTwR6rq9g8QD1zS6/XGT+O+BfSFO93cR3giKQ+GNCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGc3lKaMSYbYbL1fHosdFOueJCQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdlYjUyZjQtN2Q3Mi0z Y2U1LTk0MWQtMDViNjY5NjY3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgvDQiaKbJsKagXyJ2JOv9kOMD7ATXtF6tpMU80PhmdyI9f+Apb Ppj3EPBaIMMHgBbquc7u1zeSzJC3s5IL4GJmVfr/2BTcaZPvS6fT6kIqfcCiBPPb UNBhjSFsRbaZ+8+rZNWnpkpmU1I8vG3uqsrjYaQ0qvFpkZaykV1Gt8mTdj1B0w8H sHOnk9TYEEt4k0uD4uKaZD7li8qq5FykXToVVEbM5faiL5Bn8ti3HMmfu8SaNGGs Uo9fncZTbxEH6/U3AvGwReTvWcPlz1NE+YRum4NXR+2q0Y0hB2x/J+hkGEL/Ikdu Bb/Y1qDS+IfPXbb0gLnwsKRYmmrHRKUzaV4= -----END CERTIFICATE-----Generated at Wed Dec 24 03:03:00 2025 by rpki-client