This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa File: 04d89a5f-3251-354c-86c6-5061befcb41c.roa (raw, json) Hash identifier: T4x/Hyzvtwubfxx8jEkWjS4bUrKHCyhhnpOMT5mE24M= Subject key identifier: BA:A6:4B:D8:CE:42:9C:04:5F:6C:B5:28:B6:BF:57:2D:65:29:B0:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A82C3F8096DC5D1712C040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:9180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2c:3f:80:96:dc:5d:17:12:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=bcd1a5cc-385f-405a-af8c-d48b407f6115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:0a:46:d7:bb:cd:d0:52:13:df:74:54:fb: bc:8b:6c:63:59:f6:ca:14:0f:00:cd:56:2c:5a:8b: 67:a0:64:ab:f2:5d:d0:f5:0c:ad:f1:3f:16:b1:8a: 28:d3:ca:f3:4e:0c:5c:51:9b:25:97:67:5f:db:61: c6:0b:d3:0c:f2:fb:92:da:07:dd:40:76:58:b9:16: 06:13:91:28:06:84:b9:af:30:86:e4:91:ca:11:30: 1d:dd:7c:d2:ee:da:4e:5f:00:9d:43:ba:70:32:df: 6f:d8:67:57:26:f1:26:3b:c4:97:c9:28:88:83:fa: 8b:1e:97:49:52:5c:e4:b5:07:89:1b:78:7f:bc:52: b0:1f:9f:9f:4e:ea:f4:f4:3e:c8:5a:b1:48:e4:04: 49:82:3f:3c:12:14:db:b1:6b:84:7b:43:f5:15:68: 7e:7d:3f:60:30:91:85:a8:a8:f7:e8:df:e7:8c:e4: 11:a4:b1:e9:60:51:f9:85:1a:7d:43:d6:ba:59:86: ba:4a:81:e3:85:10:31:19:c2:0e:30:f7:7d:cc:aa: 74:a7:59:24:e3:7d:56:9f:c0:b0:59:e7:70:30:bb: 11:d5:7d:25:fa:be:f0:e4:96:1a:78:91:f7:d5:ab: 78:9f:38:3a:0f:74:e9:c5:74:15:4b:42:98:2b:60: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:4B:D8:CE:42:9C:04:5F:6C:B5:28:B6:BF:57:2D:65:29:B0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:75:5c:81:9a:a0:57:80:8d:b2:91:24:62:c3:e7:7d:fd:78: 5f:e9:50:39:19:5d:d9:66:03:22:02:7b:32:0b:32:03:eb:98: 15:c5:70:f4:0c:f2:8d:91:34:41:39:63:50:7e:b7:5d:28:77: 52:ac:20:5a:cd:c5:bd:b7:dd:de:eb:bf:c9:e3:aa:6f:15:15: b7:87:aa:cd:74:5b:8e:27:85:e8:f0:78:79:a4:8c:2b:dd:a7: 37:ab:b2:37:ed:ad:66:e0:21:28:a8:b1:45:d0:be:b9:84:70: 12:4a:5e:7e:8d:b5:3b:83:c6:87:6f:57:75:49:d6:b9:b7:24: 44:3b:bb:97:5b:6b:bf:99:c7:d7:1f:d6:78:7d:3c:48:be:dd: d7:56:6d:50:ed:6a:52:cf:86:ff:76:f6:45:b1:6c:87:16:95: c7:3a:c4:aa:18:83:00:e2:de:8b:50:b0:33:09:67:b4:68:64: 4f:66:a7:ab:53:c8:8f:da:60:f9:b3:29:ac:78:de:f2:e5:7f: 68:5a:44:c5:dd:32:ef:33:9f:03:4a:07:7f:5e:ee:6b:a3:d9: f1:09:30:37:70:43:21:42:c3:67:e2:c9:29:2a:e2:72:56:c5: 23:81:cb:27:bc:72:cf:7d:99:3e:cd:60:17:66:f9:6c:9f:1d: 6f:2a:e9:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqCw/gJbcXRcSwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmNkMWE1Y2MtMzg1Zi00MDVhLWFmOGMtZDQ4YjQwN2Y2MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiicKRte7zdBSE990VPu8i2xjWfbKFA8AzVYs WotnoGSr8l3Q9Qyt8T8WsYoo08rzTgxcUZsll2df22HGC9MM8vuS2gfdQHZYuRYG E5EoBoS5rzCG5JHKETAd3XzS7tpOXwCdQ7pwMt9v2GdXJvEmO8SXySiIg/qLHpdJ UlzktQeJG3h/vFKwH5+fTur09D7IWrFI5ARJgj88EhTbsWuEe0P1FWh+fT9gMJGF qKj36N/njOQRpLHpYFH5hRp9Q9a6WYa6SoHjhRAxGcIOMPd9zKp0p1kk431Wn8Cw WedwMLsR1X0l+r7w5JYaeJH31at4nzg6D3TpxXQVS0KYK2BMTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLqmS9jOQpwEX2y1KLa/Vy1lKbC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDRkODlhNWYtMzI1MS0z NTRjLTg2YzYtNTA2MWJlZmNiNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFB1XIGaoFeAjbKRJGLD5339eF/pUDkZXdlmAyICezILMgPrmBXF cPQM8o2RNEE5Y1B+t10od1KsIFrNxb233d7rv8njqm8VFbeHqs10W44nhejweHmk jCvdpzersjftrWbgISiosUXQvrmEcBJKXn6NtTuDxodvV3VJ1rm3JEQ7u5dba7+Z x9cf1nh9PEi+3ddWbVDtalLPhv929kWxbIcWlcc6xKoYgwDi3otQsDMJZ7RoZE9m p6tTyI/aYPmzKax43vLlf2haRMXdMu8znwNKB39e7muj2fEJMDdwQyFCw2fiySkq 4nJWxSOByye8cs99mT7NYBdm+WyfHW8q6UE= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:37 2025 by rpki-client