This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa File: 3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa (raw, json) Hash identifier: BarWAxgaXSR3E4uqHfSighR/QJ4Cd1YRGOyAgIhNIRU= Subject key identifier: 62:13:6C:7C:D9:23:49:29:18:42:B3:B9:8F:D8:CD:B9:55:EA:EB:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871DED6B364756D6699D090 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:2980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:de:d6:b3:64:75:6d:66:99:d0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=613cda97-1b51-4c9f-9ddf-15e432a66677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:93:b3:82:ba:b3:f5:f9:9f:22:4c:68:7d: 39:41:31:66:ca:cb:b9:8b:ad:a5:4c:31:17:19:68: 5d:3c:10:14:de:4c:cf:67:2f:68:63:4e:e6:5d:90: c1:a8:62:b1:85:ed:75:3a:94:6e:24:49:8a:60:cc: 49:7c:91:ce:fa:7b:30:f3:0b:37:e2:19:cb:4d:41: 47:83:61:b0:28:ce:7e:56:eb:1c:14:c2:a5:07:23: d5:1d:6b:f8:d2:e6:01:02:ad:33:11:e8:4e:f9:b7: 99:2a:f6:bc:d8:97:8d:2d:2c:7a:2e:2b:b8:93:e1: 74:ec:7c:1f:60:14:05:d0:2c:f2:ef:6d:c2:a5:5f: 2c:ff:7b:09:24:b5:5e:e2:e3:80:23:70:aa:6f:52: 55:ed:c8:a6:89:b7:54:ad:ee:72:18:5c:b0:4f:29: 11:e2:79:29:d8:c7:28:74:84:8e:bf:d8:cf:52:42: 1a:0e:2f:f9:6c:68:85:07:d3:49:ef:6d:29:e2:37: f7:45:41:70:1e:da:f5:7a:c3:eb:35:8f:37:b6:25: c0:3c:78:f7:28:49:12:dc:fd:9f:8e:fb:1f:43:c3: b8:f5:81:3f:c1:8e:70:08:1b:00:e6:d8:ef:1e:f9: 83:15:9e:56:b1:16:29:cd:0f:9e:b6:31:39:46:44: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:13:6C:7C:D9:23:49:29:18:42:B3:B9:8F:D8:CD:B9:55:EA:EB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ce:67:ac:62:a1:b0:97:69:48:76:81:6a:8f:8f:43:e8:b4: 82:e7:1f:a1:59:f1:97:04:c2:bb:3d:47:f1:d6:7a:d6:b0:b9: 76:13:0a:76:2c:e1:b3:a4:ad:80:72:53:64:99:a5:13:57:02: 36:af:75:d9:0c:e9:59:e0:48:e1:3d:c0:2a:12:ce:ef:4e:d8: c0:00:db:54:cf:f8:e1:72:c4:a6:21:85:cc:5e:ad:ed:09:f8: 03:69:c9:98:4a:3a:78:0b:26:a1:27:2f:cc:36:ed:24:d4:e1: 91:67:f0:b4:36:17:c1:cb:23:32:6c:8f:33:c2:82:4e:2e:13: cc:d5:0f:4b:1f:c4:95:c2:4e:f3:0c:b2:f0:99:ae:7a:20:35: 63:da:86:88:54:1b:80:80:02:4b:96:d5:d4:8a:75:70:b3:af: 02:d9:87:ae:00:65:11:d7:63:d3:10:22:a3:3a:b4:13:b8:7c: f2:f4:02:28:38:cc:56:1f:42:52:60:75:92:92:12:b8:2f:0f: 8e:24:8d:f1:0f:c6:8e:15:53:b5:49:fa:b8:29:67:bd:52:2c: b9:4a:c0:bd:07:45:01:ba:41:ae:e0:44:82:ab:44:fe:ff:de: e0:c0:96:80:a1:7f:8b:49:3b:6b:85:2d:e0:86:28:38:49:cc: f8:5a:fc:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExIcd7Ws2R1bWaZ0JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NjEzY2RhOTctMWI1MS00YzlmLTlkZGYtMTVlNDMyYTY2Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5CTs4K6s/X5nyJMaH05QTFmysu5i62lTDEX GWhdPBAU3kzPZy9oY07mXZDBqGKxhe11OpRuJEmKYMxJfJHO+nsw8ws34hnLTUFH g2GwKM5+VuscFMKlByPVHWv40uYBAq0zEehO+beZKva82JeNLSx6Liu4k+F07Hwf YBQF0Czy723CpV8s/3sJJLVe4uOAI3Cqb1JV7cimibdUre5yGFywTykR4nkp2Mco dISOv9jPUkIaDi/5bGiFB9NJ720p4jf3RUFwHtr1esPrNY83tiXAPHj3KEkS3P2f jvsfQ8O49YE/wY5wCBsA5tjvHvmDFZ5WsRYpzQ+etjE5RkS2WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGITbHzZI0kpGEKzuY/YzblV6uvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NmMGIxYzEtMzA4Mi0z ODI3LWEyNDQtMmExYjdjZmZmYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnOZ6xiobCXaUh2gWqPj0PotILnH6FZ8ZcEwrs9R/HWetawuXYT CnYs4bOkrYByU2SZpRNXAjavddkM6VngSOE9wCoSzu9O2MAA21TP+OFyxKYhhcxe re0J+ANpyZhKOngLJqEnL8w27STU4ZFn8LQ2F8HLIzJsjzPCgk4uE8zVD0sfxJXC TvMMsvCZrnogNWPahohUG4CAAkuW1dSKdXCzrwLZh64AZRHXY9MQIqM6tBO4fPL0 Aig4zFYfQlJgdZKSErgvD44kjfEPxo4VU7VJ+rgpZ71SLLlKwL0HRQG6Qa7gRIKr RP7/3uDAloChf4tJO2uFLeCGKDhJzPha/CQ= -----END CERTIFICATE-----Generated at Wed Dec 24 11:28:43 2025 by rpki-client