This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f63af40-2f73-3ef8-bed8-966fe259a428.roa File: 2f63af40-2f73-3ef8-bed8-966fe259a428.roa (raw, json) Hash identifier: H+L8YlavhbzowoOJI+FNIpHPo1HgaNedKcC5cLYnT8Y= Subject key identifier: BC:51:2D:A7:87:92:84:3E:B3:3A:28:F3:66:AE:FD:6E:1A:E5:63:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B0F9F7929AAB31BA520DE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f63af40-2f73-3ef8-bed8-966fe259a428.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:5380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b0:f9:f7:92:9a:ab:31:ba:52:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=e97a382e-fa50-4d3e-a277-95f846d055ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:3e:88:24:a6:29:e7:3d:4c:10:e6:1e:0b: b3:82:e5:d8:62:be:19:00:7b:f2:c3:b1:c4:d7:2d: 01:9a:1d:d8:15:f0:40:00:e5:b1:cc:35:7f:d5:9f: 7e:1f:12:88:f5:75:b9:a1:72:07:2a:4f:dc:3e:2c: b6:74:e2:4b:43:0c:bf:97:be:95:63:0b:28:00:95: 17:0d:55:14:9c:9c:6d:ea:21:60:b7:87:b9:64:fd: 1b:11:f6:6a:41:0b:56:d0:9e:7b:13:0c:4c:f3:4c: 3e:09:6e:d4:c8:8d:5e:42:44:33:d8:ae:b5:f8:86: 38:31:ac:0c:a0:9f:e9:03:f3:36:2c:fa:28:80:9c: 6e:85:bf:29:3f:44:04:78:6b:c9:29:b4:f9:b8:e2: a8:e4:ee:08:c4:2b:8f:e8:f6:89:ce:25:b2:cb:76: 15:08:b0:8a:69:7b:c2:6e:89:4c:9c:48:68:4e:d9: 2f:ed:5a:9e:e6:06:84:da:e3:e9:50:f8:a6:5c:f9: 94:c8:f4:fe:04:03:57:4f:80:cc:63:8b:a2:4b:ba: b2:30:cc:c7:d9:14:48:8e:e7:a0:a7:21:60:05:8a: 09:42:da:61:ae:fc:85:d9:e0:02:8d:61:e3:af:96: 03:b2:b5:63:34:ff:0d:85:f5:a8:25:ff:41:1a:91: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:51:2D:A7:87:92:84:3E:B3:3A:28:F3:66:AE:FD:6E:1A:E5:63:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f63af40-2f73-3ef8-bed8-966fe259a428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5c:5a:34:b6:c5:c0:1b:00:a1:5c:cc:8f:7b:6d:d9:72:96: af:a6:d6:77:2c:54:68:c9:45:60:44:bf:68:33:04:89:31:d5: ca:22:8d:30:61:3d:27:42:d7:d4:7a:a0:01:28:25:79:06:22: c1:3c:44:c0:11:5b:17:9e:fe:e1:f5:77:38:a2:4e:c7:9b:d1: eb:83:7f:b7:db:03:a9:df:19:43:c8:5f:62:3a:55:ae:c9:f0: 1a:8d:ad:fb:0c:50:dd:f6:58:b2:30:a0:9c:eb:a3:a4:85:4c: c4:e2:9b:fe:92:82:1c:8b:6a:fe:06:e3:67:63:39:03:96:56: dc:1d:35:97:32:77:18:17:23:6e:ca:97:16:6f:c7:d5:4d:a5: 58:36:0d:91:76:9c:9c:61:3c:65:a7:6c:40:5f:5d:b9:b8:23: f9:1e:bc:86:39:33:ce:6d:a5:c1:17:dc:97:04:c0:60:19:38: 4e:14:45:ae:03:96:9e:a6:fb:de:db:57:27:53:be:ee:65:37: e5:d0:ed:5a:25:df:02:a5:15:4d:6f:e6:88:46:e9:63:23:44: bb:3c:69:e3:d4:f8:35:c6:3b:59:d5:cd:30:d2:41:db:8e:2d: 7f:a4:f0:8c:65:6f:b9:f7:04:f5:51:de:69:e7:be:b4:8a:bd: 70:58:0d:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw3sPn3kpqrMbpSDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk ZTk3YTM4MmUtZmE1MC00ZDNlLWEyNzctOTVmODQ2ZDA1NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDA+iCSmKec9TBDmHguzguXYYr4ZAHvyw7HE 1y0Bmh3YFfBAAOWxzDV/1Z9+HxKI9XW5oXIHKk/cPiy2dOJLQwy/l76VYwsoAJUX DVUUnJxt6iFgt4e5ZP0bEfZqQQtW0J57EwxM80w+CW7UyI1eQkQz2K61+IY4MawM oJ/pA/M2LPoogJxuhb8pP0QEeGvJKbT5uOKo5O4IxCuP6PaJziWyy3YVCLCKaXvC bolMnEhoTtkv7Vqe5gaE2uPpUPimXPmUyPT+BANXT4DMY4uiS7qyMMzH2RRIjueg pyFgBYoJQtphrvyF2eACjWHjr5YDsrVjNP8NhfWoJf9BGpFMXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxRLaeHkoQ+szoo82au/W4a5WMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmY2M2FmNDAtMmY3My0z ZWY4LWJlZDgtOTY2ZmUyNTlhNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExcWjS2xcAbAKFczI97bdlylq+m1ncsVGjJRWBEv2gzBIkx1coi jTBhPSdC19R6oAEoJXkGIsE8RMARWxee/uH1dziiTseb0euDf7fbA6nfGUPIX2I6 Va7J8BqNrfsMUN32WLIwoJzro6SFTMTim/6SghyLav4G42djOQOWVtwdNZcydxgX I27KlxZvx9VNpVg2DZF2nJxhPGWnbEBfXbm4I/kevIY5M85tpcEX3JcEwGAZOE4U Ra4Dlp6m+97bVydTvu5lN+XQ7Vol3wKlFU1v5ohG6WMjRLs8aePU+DXGO1nVzTDS QduOLX+k8Ixlb7n3BPVR3mnnvrSKvXBYDfI= -----END CERTIFICATE-----Generated at Sat Dec 20 13:46:02 2025 by rpki-client