This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa File: 2908e372-28dc-3583-8025-0be1feb02253.roa (raw, json) Hash identifier: 7UzU9QZN1QTyNjHimtUnqJs2DEgQH1pxVz19FAMGzH4= Subject key identifier: 3E:7E:4A:C9:43:E9:28:ED:53:11:A4:A3:5F:68:A5:A1:FF:64:68:9A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC144BA2578887189DBC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:e500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:14:4b:a2:57:88:87:18:9d:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ac04fb7a-edaa-467d-b9f4-75c05aa43586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:53:f9:79:de:85:d6:a0:02:e9:77:e3:47: c4:e6:09:90:15:d0:49:9a:51:6c:41:84:bb:7f:35: 6d:91:82:21:e6:e4:b2:e6:17:cb:fd:0f:2e:d9:09: d7:84:00:19:0c:32:fc:d4:f8:14:0a:1a:04:de:44: 55:fb:c8:1c:55:db:5e:c5:a9:8a:5a:b8:1e:26:5a: bd:5b:28:73:29:27:21:42:07:2f:05:a6:c1:9d:17: 35:57:e7:1a:37:6d:86:d3:f8:0b:ea:64:b9:0b:55: f9:69:3e:30:ed:c7:67:10:8f:45:33:5b:9d:07:0c: cb:41:14:9f:c5:2f:e6:4e:3b:a7:41:da:81:d0:fd: 0b:61:de:98:61:f9:7a:bf:16:44:ca:8b:f7:d1:1b: 3a:e1:1f:af:fa:4e:11:ce:f5:7d:b7:61:ba:77:fb: e9:51:40:d4:ac:10:4a:db:0a:90:40:de:4a:54:56: f1:7d:da:d1:df:46:04:00:f4:87:43:85:dc:c8:3b: 36:22:21:b5:b2:e5:da:10:fb:1a:c1:a5:ed:16:f0: 2d:ca:06:a5:d1:c5:ce:2f:4c:30:5b:cf:76:b9:fc: f7:b7:80:2c:03:94:d1:72:46:ec:36:2c:3a:81:24: b3:67:36:a2:03:13:db:87:b7:30:94:b1:ea:08:27: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7E:4A:C9:43:E9:28:ED:53:11:A4:A3:5F:68:A5:A1:FF:64:68:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2b:ea:41:f9:db:02:d4:c4:a8:5d:55:3d:68:e2:d0:f4:62: 5c:39:96:dd:4c:15:c7:6f:f7:ac:72:3f:03:8b:cc:10:eb:34: 8b:34:f5:8a:5c:6a:97:94:6d:42:a3:89:2c:c4:26:a0:e7:d1: 2c:e4:d0:ad:df:d2:97:0d:b6:82:9e:08:04:e0:f7:65:57:cd: 96:ed:01:92:81:2a:f2:b6:b5:37:5b:cd:4b:78:d3:a4:9b:2c: 8d:54:98:d9:9f:8b:4d:3d:00:09:72:6c:80:1c:f3:63:15:89: bf:03:32:4c:0e:8f:55:6c:c0:e5:3f:57:ae:a2:3b:53:80:92: 68:aa:cc:84:89:c9:93:16:9f:db:da:07:24:3c:1d:bd:c1:54: b0:c5:8d:5a:cc:00:29:e0:b3:03:a4:ce:c9:36:97:ec:7b:32: 6d:d4:ee:69:9f:41:46:8e:bb:ec:86:e9:ff:3a:59:02:15:10: 42:34:8e:22:55:92:23:65:6f:a1:2e:d4:66:af:73:4b:d0:e1: 56:9d:bc:26:fd:32:71:f8:bd:c1:cf:71:20:7d:cf:75:98:95: a1:70:2a:b6:d7:f9:1b:28:0c:91:a7:6d:e8:20:29:49:09:78: a9:90:5e:79:a7:76:ab:f3:2b:e2:27:e4:de:34:cb:53:91:c8: 1f:43:50:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3BRLoleIhxidvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YWMwNGZiN2EtZWRhYS00NjdkLWI5ZjQtNzVjMDVhYTQzNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PVT+XnehdagAul340fE5gmQFdBJmlFsQYS7 fzVtkYIh5uSy5hfL/Q8u2QnXhAAZDDL81PgUChoE3kRV+8gcVdtexamKWrgeJlq9 WyhzKSchQgcvBabBnRc1V+caN22G0/gL6mS5C1X5aT4w7cdnEI9FM1udBwzLQRSf xS/mTjunQdqB0P0LYd6YYfl6vxZEyov30Rs64R+v+k4RzvV9t2G6d/vpUUDUrBBK 2wqQQN5KVFbxfdrR30YEAPSHQ4XcyDs2IiG1suXaEPsawaXtFvAtygal0cXOL0ww W892ufz3t4AsA5TRckbsNiw6gSSzZzaiAxPbh7cwlLHqCCfJ/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5+SslD6SjtUxGko19opaH/ZGiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjkwOGUzNzItMjhkYy0z NTgzLTgwMjUtMGJlMWZlYjAyMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0r6kH52wLUxKhdVT1o4tD0Ylw5lt1MFcdv96xyPwOLzBDrNIs0 9YpcapeUbUKjiSzEJqDn0Szk0K3f0pcNtoKeCATg92VXzZbtAZKBKvK2tTdbzUt4 06SbLI1UmNmfi009AAlybIAc82MVib8DMkwOj1VswOU/V66iO1OAkmiqzISJyZMW n9vaByQ8Hb3BVLDFjVrMACngswOkzsk2l+x7Mm3U7mmfQUaOu+yG6f86WQIVEEI0 jiJVkiNlb6Eu1Gavc0vQ4VadvCb9MnH4vcHPcSB9z3WYlaFwKrbX+RsoDJGnbegg KUkJeKmQXnmndqvzK+In5N40y1ORyB9DUKs= -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:41 2025 by rpki-client