This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298a3433-3f8b-31f5-886b-2a12a801255e.roa
File: 298a3433-3f8b-31f5-886b-2a12a801255e.roa (raw, json)
Hash identifier: Y1tD0lILXyLYv2aUC1sqKAbm7P6WqiPeltDDkrKWq2o=
Subject key identifier: F6:35:7E:6D:4C:41:2A:63:6E:78:43:CD:62:22:7A:2F:9B:CD:C2:1F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C3A7BC4C1119DAEA830D50880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298a3433-3f8b-31f5-886b-2a12a801255e.roa
Signing time: Thu 18 Dec 2025 14:00:39 +0000
ROA not before: Thu 18 Dec 2025 14:00:39 +0000
ROA not after: Wed 18 Mar 2026 13:00:39 +0000
asID: 19905
IP address blocks: 2604:2d81:3200::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3a:7b:c4:c1:11:9d:ae:a8:30:d5:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 18 14:00:39 2025 GMT
Not After : Mar 18 13:00:39 2026 GMT
Subject: CN=2e504f12-2f49-4546-b123-adf38c98e9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:5e:e4:6f:8d:e1:41:4d:30:ed:72:ad:95:
09:e8:cb:9e:f7:11:7c:8b:78:c9:69:8e:ef:95:be:
1a:1e:71:90:cf:04:d8:4d:e5:df:0b:91:64:39:1a:
fd:7d:92:d3:bc:b2:3e:bb:11:b8:32:c7:1c:d6:ad:
62:fe:5f:d3:93:73:8e:17:10:3d:7c:51:38:24:b1:
1e:f1:82:d9:fb:8b:2f:2e:f0:a3:ae:43:89:6e:b6:
0f:3d:7c:21:1b:13:ee:ad:cc:c2:10:a6:a8:f1:18:
a4:3c:c6:b9:27:42:6e:8c:a2:84:37:a6:77:4b:14:
7f:49:3a:7e:a3:fe:ba:69:cc:a0:8e:b1:02:92:46:
f2:30:6c:1a:d6:6c:17:ee:c2:a1:d1:81:4a:7f:67:
e0:62:20:51:1e:5f:7e:cf:fd:6b:bb:cd:1b:ca:5e:
bf:9b:93:5e:c0:6b:d6:32:5d:7b:67:4f:08:2b:d0:
8e:34:f0:35:c5:76:62:2d:a2:82:02:ae:9e:0e:c7:
0c:c0:79:b3:7e:ab:2c:df:74:24:24:78:76:df:5b:
63:bf:24:c3:85:2b:bb:2f:73:bf:f7:42:08:b4:3b:
ac:f1:e9:c9:0a:2b:48:4c:bd:ce:08:45:dd:19:7d:
48:c9:64:26:79:78:e1:de:fc:52:99:bc:17:1b:78:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:7E:6D:4C:41:2A:63:6E:78:43:CD:62:22:7A:2F:9B:CD:C2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298a3433-3f8b-31f5-886b-2a12a801255e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:3200::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:32:e0:12:d9:cd:84:91:fe:be:30:bb:5f:6e:77:8a:d9:e5:
00:34:90:27:b2:f4:86:fd:b7:71:ff:9c:55:38:07:c0:30:86:
d6:1f:32:58:bf:89:56:d3:4c:c7:b3:0f:34:91:14:da:53:92:
3a:4e:19:59:00:d0:ba:e1:7a:19:14:f2:e5:01:7f:c9:cd:d1:
25:5a:bc:f2:62:bf:21:0e:1e:31:04:ea:ba:de:49:c7:f4:64:
5b:2c:a7:49:6b:b8:8b:7b:0b:2d:96:73:80:da:c3:d0:73:ab:
b5:0f:0b:63:0c:7b:e6:b7:6b:2e:f6:4c:27:a6:e3:1d:86:5d:
3a:30:4a:17:87:c8:ca:ba:b3:ec:30:f5:e7:99:82:d8:7c:22:
41:e9:57:1b:ba:8e:5a:6d:20:fa:77:be:11:dd:40:70:4c:ac:
da:5d:cb:d5:5e:83:5a:0a:fc:39:69:c2:06:70:0a:df:a7:8a:
0c:13:44:63:d8:b7:e1:ce:a0:03:86:34:2b:b9:84:24:d3:ea:
04:f7:70:3e:37:48:15:45:92:8f:e0:38:75:9b:88:2f:40:ee:
3f:6a:bb:cf:4f:80:70:ee:49:a3:d9:3c:c0:c3:1a:cf:68:e4:
4c:62:38:ed:fe:36:6a:4e:ba:66:b0:ad:dd:d8:52:3c:4e:12:
08:9c:5f:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw6e8TBEZ2uqDDVCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk
MmU1MDRmMTItMmY0OS00NTQ2LWIxMjMtYWRmMzhjOThlOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYRe5G+N4UFNMO1yrZUJ6Mue9xF8i3jJaY7v
lb4aHnGQzwTYTeXfC5FkORr9fZLTvLI+uxG4Mscc1q1i/l/Tk3OOFxA9fFE4JLEe
8YLZ+4svLvCjrkOJbrYPPXwhGxPurczCEKao8RikPMa5J0JujKKEN6Z3SxR/STp+
o/66acygjrECkkbyMGwa1mwX7sKh0YFKf2fgYiBRHl9+z/1ru80byl6/m5NewGvW
Ml17Z08IK9CONPA1xXZiLaKCAq6eDscMwHmzfqss33QkJHh231tjvyTDhSu7L3O/
90IItDus8enJCitITL3OCEXdGX1IyWQmeXjh3vxSmbwXG3hq0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPY1fm1MQSpjbnhDzWIiei+bzcIfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk4YTM0MzMtM2Y4Yi0z
MWY1LTg4NmItMmExMmE4MDEyNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEy4BLZzYSR/r4wu19ud4rZ5QA0kCey9Ib9t3H/nFU4B8AwhtYf
Mli/iVbTTMezDzSRFNpTkjpOGVkA0LrhehkU8uUBf8nN0SVavPJivyEOHjEE6rre
Scf0ZFssp0lruIt7Cy2Wc4Daw9Bzq7UPC2MMe+a3ay72TCem4x2GXTowSheHyMq6
s+ww9eeZgth8IkHpVxu6jlptIPp3vhHdQHBMrNpdy9Veg1oK/DlpwgZwCt+nigwT
RGPYt+HOoAOGNCu5hCTT6gT3cD43SBVFko/gOHWbiC9A7j9qu89PgHDuSaPZPMDD
Gs9o5ExiOO3+NmpOumawrd3YUjxOEgicXyQ=
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:12:51 2025 by rpki-client