This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa
File: 04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa (raw, json)
Hash identifier: h5QpP9QbyKFxjXu7ysHcRVQIG73UofkHGQv55rGKlXA=
Subject key identifier: A5:8A:39:2C:56:DE:8A:88:09:4D:82:A1:08:58:BB:64:BF:A0:9E:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C26F0F38C2C19B62CF6E5CFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa
Signing time: Thu 11 Dec 2025 14:00:39 +0000
ROA not before: Thu 11 Dec 2025 14:00:39 +0000
ROA not after: Wed 11 Mar 2026 13:00:39 +0000
asID: 19905
IP address blocks: 2604:2d80:3580::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:26:f0:f3:8c:2c:19:b6:2c:f6:e5:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 11 14:00:39 2025 GMT
Not After : Mar 11 13:00:39 2026 GMT
Subject: CN=adc3cdb2-f959-4797-aa03-ec4fdb738068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:4f:b4:6c:15:7b:b1:35:42:1d:67:04:67:
ea:af:54:34:21:aa:92:4b:6f:a5:94:d8:49:3d:88:
f7:35:07:4e:97:a5:52:fa:39:4c:1d:34:0f:3e:78:
ea:d4:fc:cf:2b:50:51:e0:5c:d6:86:ca:fe:63:39:
92:e7:31:23:ae:0e:95:b9:36:7e:6a:d9:d3:9a:3c:
46:53:85:a6:38:c2:ae:c4:41:bd:3e:60:8d:37:7e:
9a:9c:86:2e:fa:2f:b3:27:91:4c:1a:4c:fc:68:e6:
97:15:38:7d:e4:34:86:36:ca:42:62:f8:0d:03:17:
6c:83:8b:14:2d:96:7c:b5:8c:b9:e2:fc:4e:18:ca:
de:bb:c0:f2:e4:7b:51:de:d8:35:cc:25:d2:d6:c3:
ef:10:16:16:7f:d1:a1:e9:dd:6a:4e:1a:26:f5:29:
33:8b:9e:87:53:00:d3:7f:82:f5:0b:74:d3:3b:c0:
8a:00:75:42:d9:10:a9:b8:c4:80:4f:48:61:15:4e:
05:b5:1f:df:70:0d:de:a8:73:82:01:66:84:b7:1c:
b4:82:58:d3:f2:6c:ef:34:58:a5:71:07:86:f2:83:
f3:8c:97:aa:02:dd:fb:d4:ca:73:b6:16:54:a0:9f:
2b:70:eb:b7:cc:89:8b:83:d9:48:68:9b:af:21:4c:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:39:2C:56:DE:8A:88:09:4D:82:A1:08:58:BB:64:BF:A0:9E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3580::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:14:9e:3b:c3:3e:5d:d2:31:07:ae:b5:98:f6:8a:83:37:65:
18:44:df:b2:76:95:e9:08:76:4a:07:bc:95:06:1a:85:1e:c9:
4a:b6:01:c9:48:2e:dd:b8:3e:eb:89:ed:6e:e5:9d:4c:1d:25:
0c:80:fc:74:68:86:f3:d4:7a:b8:23:fc:d1:a4:f7:2a:90:53:
5e:4a:56:50:80:d4:fb:13:47:a5:c0:1b:8e:c1:ff:73:b0:72:
31:9f:c5:05:fa:a0:25:e0:6a:d2:c6:f4:53:dc:8b:1f:e0:8a:
d3:12:8f:08:f3:71:49:42:f2:3a:37:a4:4c:c7:0b:47:20:75:
f2:33:72:b4:cb:8e:96:d5:2d:35:7d:16:b7:c8:cb:d1:ed:94:
db:ad:11:4e:b3:39:eb:62:b9:19:33:38:69:99:7e:f2:fa:dd:
fb:ca:c0:8f:64:d0:1b:bd:2b:3b:db:15:d4:cb:63:f3:5a:2b:
98:86:33:9a:20:8b:64:c0:fa:ee:09:4a:ff:63:c6:65:65:a5:
e7:3f:8a:b2:aa:23:6d:01:38:1a:73:f9:e5:c0:08:7c:27:3f:
71:5a:5c:ec:43:3f:57:78:79:f1:b4:cd:1d:f3:73:5e:17:2a:
f9:eb:d4:04:16:41:96:62:19:7e:13:51:8b:22:e3:85:b0:eb:
1e:c8:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:12:59 2025 by rpki-client