This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164ea48e-2ad9-39c0-888d-0e814cef4ff1.roa File: 164ea48e-2ad9-39c0-888d-0e814cef4ff1.roa (raw, json) Hash identifier: 9JH2jCBK4PeDpH22oVPTQvhbbaFnPPtqxueDmwweJfQ= Subject key identifier: E4:19:0E:55:21:0B:A8:9F:24:D5:3C:5A:5B:39:A3:24:A1:94:E0:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B11E12F5DA60525AD36F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164ea48e-2ad9-39c0-888d-0e814cef4ff1.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:5080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:1e:12:f5:da:60:52:5a:d3:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=04c96f23-b5af-4889-bca5-4809a76b74e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:4a:ab:c7:34:9d:bc:c8:96:42:60:de:f6: 2e:01:f3:5f:a9:af:a1:e9:8a:8c:47:c7:97:ea:1f: 98:1c:c9:dd:a0:4f:83:74:c8:84:69:7e:43:d2:d8: ec:ab:28:b6:76:ba:a6:93:cc:24:16:38:e6:8a:e4: bc:e7:7f:74:d1:97:54:09:ca:5d:2b:2a:66:fb:69: 3a:a2:9a:eb:9c:06:86:e6:35:5a:45:a8:98:1d:ce: 30:16:83:b6:f0:c8:54:9d:72:10:94:db:41:91:75: 74:68:72:86:f8:f5:e5:85:63:cb:cc:7f:9a:4c:f1: d2:e6:54:57:15:22:79:dd:ab:83:14:b7:c2:e4:0e: a2:d3:81:f4:cd:f2:58:9a:16:48:5d:a8:69:9b:d0: 39:4d:f6:c0:f2:d2:2b:bd:d0:c1:b0:c7:00:f6:5c: d4:7e:4c:68:30:0e:7c:84:65:53:16:23:cf:9d:ef: 4d:5c:2a:17:06:04:4f:80:3a:21:7b:03:84:eb:69: 1a:f4:43:70:69:87:47:48:7c:47:9b:79:bf:53:23: 81:64:89:06:00:e4:1b:06:b6:46:de:79:23:db:92: 8d:4a:d2:9e:0e:4d:49:4c:da:9b:cf:2c:67:23:ac: 49:89:7a:a3:c0:0b:34:2f:72:a4:26:92:ea:0a:8b: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:19:0E:55:21:0B:A8:9F:24:D5:3C:5A:5B:39:A3:24:A1:94:E0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164ea48e-2ad9-39c0-888d-0e814cef4ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8f:2c:c3:7a:d2:63:96:b8:9c:db:c0:7f:11:af:da:76:1c: 8d:ce:db:7b:8d:bc:49:77:99:31:0d:af:6e:9c:10:c1:68:a7: 79:e9:c7:81:7a:70:7d:d2:e8:06:f4:6b:10:c2:3e:b3:7c:a0: 74:ee:f3:8d:d6:81:1e:80:75:4a:5c:72:14:ba:98:1a:39:da: ed:a9:12:ac:cd:24:be:ec:20:f3:da:2b:72:16:82:a3:f5:5a: 17:ed:92:e7:4c:30:cb:fb:27:4e:12:1d:e5:32:02:04:47:a3: 11:4a:ef:3c:d6:10:27:4d:4a:a6:e5:39:bd:4d:cf:f6:91:4a: 29:ab:f0:a5:7d:8e:5b:24:1e:a7:38:09:a1:cb:3a:e9:cf:24: 70:58:09:64:ad:63:87:e6:77:cd:af:da:7b:e1:0e:3a:bd:cb: 6f:d2:8f:29:a9:6a:f3:46:d4:37:c5:56:92:22:89:38:7d:9e: f2:30:0e:38:79:c7:90:67:db:9e:8e:cf:98:b8:ac:2c:b9:4b: b1:1e:72:d9:b1:9e:fc:34:96:00:59:e5:41:83:6a:88:23:55: bd:66:59:9f:03:4a:95:db:dd:52:af:da:b6:7e:a9:24:3c:36: ce:59:3f:b7:62:04:27:8b:8b:42:64:d4:42:6c:70:8a:5b:3a: 33:ef:2f:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw3sR4S9dpgUlrTb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MDRjOTZmMjMtYjVhZi00ODg5LWJjYTUtNDgwOWE3NmI3NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZKq8c0nbzIlkJg3vYuAfNfqa+h6YqMR8eX 6h+YHMndoE+DdMiEaX5D0tjsqyi2drqmk8wkFjjmiuS853900ZdUCcpdKypm+2k6 oprrnAaG5jVaRaiYHc4wFoO28MhUnXIQlNtBkXV0aHKG+PXlhWPLzH+aTPHS5lRX FSJ53auDFLfC5A6i04H0zfJYmhZIXahpm9A5TfbA8tIrvdDBsMcA9lzUfkxoMA58 hGVTFiPPne9NXCoXBgRPgDohewOE62ka9ENwaYdHSHxHm3m/UyOBZIkGAOQbBrZG 3nkj25KNStKeDk1JTNqbzyxnI6xJiXqjwAs0L3KkJpLqCosicQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQZDlUhC6ifJNU8Wls5oyShlOA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTY0ZWE0OGUtMmFkOS0z OWMwLTg4OGQtMGU4MTRjZWY0ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+PLMN60mOWuJzbwH8Rr9p2HI3O23uNvEl3mTENr26cEMFop3np x4F6cH3S6Ab0axDCPrN8oHTu843WgR6AdUpcchS6mBo52u2pEqzNJL7sIPPaK3IW gqP1WhftkudMMMv7J04SHeUyAgRHoxFK7zzWECdNSqblOb1Nz/aRSimr8KV9jlsk Hqc4CaHLOunPJHBYCWStY4fmd82v2nvhDjq9y2/SjympavNG1DfFVpIiiTh9nvIw Djh5x5Bn256Oz5i4rCy5S7Eectmxnvw0lgBZ5UGDaogjVb1mWZ8DSpXb3VKv2rZ+ qSQ8Ns5ZP7diBCeLi0Jk1EJscIpbOjPvLxI= -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:00 2025 by rpki-client