This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa File: 408af4a7-bf43-3f31-9358-f08d485e054e.roa (raw, json) Hash identifier: VibYcGHnUrWMX+3IbMAlRnpGOZl0KYUmbAQ4ClPregQ= Subject key identifier: C3:D6:40:4B:F9:F3:9B:73:74:B2:8E:F9:7C:4C:A0:24:93:89:A8:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0F432A2A69998D7EDA200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2d80:4d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f4:32:a2:a6:99:98:d7:ed:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=05194537-f9ba-4a9f-a22f-02385ac58c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:d3:ae:fb:b6:0c:5b:11:f8:98:a6:57:cc: e6:11:03:4e:da:aa:94:f0:17:03:9c:60:9e:b1:ee: 69:4d:f8:9d:25:35:7b:76:67:ea:04:16:a0:a2:1b: 76:c9:b2:f8:2e:4a:fc:3b:1b:ce:86:a8:b4:e1:12: bd:e4:69:ee:c0:68:99:ca:7d:77:24:7f:ac:e7:36: 5f:fd:bd:3a:5a:f8:9f:f3:af:e9:25:ba:80:98:a7: 8c:cb:63:0b:60:15:dd:14:e3:0b:8d:ce:57:0a:c6: 29:de:99:16:aa:35:93:1c:65:27:17:89:9a:5e:f6: 14:cc:db:aa:df:e5:87:0a:72:44:14:38:44:76:dd: 5d:a0:0b:98:1e:ab:3b:e1:e0:c4:95:b2:66:6e:08: 71:b3:e9:dc:30:be:6f:9b:50:f3:82:ba:ce:a3:8e: c8:92:92:88:24:9a:5b:c7:79:b5:9d:ff:eb:20:ea: a5:db:34:cf:62:de:48:c4:9c:f4:76:89:52:be:02: de:38:60:c3:c2:9c:19:55:92:46:0e:10:85:da:64: da:0d:cf:28:f7:88:32:28:7a:d9:f0:2d:81:c1:bc: 84:25:f7:cd:14:28:48:6e:63:ee:ef:5b:1e:27:80: 86:0a:f2:49:34:cc:ae:0c:ac:7b:20:b6:58:8a:8b: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:40:4B:F9:F3:9B:73:74:B2:8E:F9:7C:4C:A0:24:93:89:A8:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:05:c0:70:09:28:d8:93:a3:4e:b8:be:46:c4:e9:db:a5:b0: 14:b4:d9:f3:67:7e:20:53:57:01:26:04:18:35:87:72:50:9b: 17:14:2f:cd:34:48:f1:61:ec:b4:4a:b8:9f:75:bc:51:df:b9: 45:a9:c2:90:ae:25:0a:74:a1:54:b8:35:ec:11:56:31:6e:8e: de:6b:4d:8d:f0:fd:ba:f4:29:1e:e4:51:a7:5d:7c:e4:aa:87: 92:b2:e7:8a:51:27:71:d3:c7:5a:aa:fd:f6:18:a0:1b:ee:03: 96:3a:7c:f0:d2:40:b3:84:9d:23:a0:c9:e5:fb:32:6f:57:62: 8f:e8:c7:31:28:49:f4:f4:fa:52:fb:03:4c:b6:73:bd:ab:1f: 4f:22:d4:5a:48:b3:79:44:a9:2c:e8:28:77:4c:5f:8d:16:18: 4c:93:97:f0:b2:8f:d6:e0:28:80:d4:8c:10:67:e6:8d:f7:7b: c3:ce:b1:16:82:c5:0a:c9:f0:84:15:6e:e1:c1:86:d7:36:02: ee:09:5b:7b:2c:24:0e:83:f1:81:0a:f9:87:37:39:c4:b7:73: ab:26:03:86:4d:b1:90:cf:8f:31:a9:c2:52:48:a2:a8:4f:c5: 54:99:cc:a6:4b:98:b6:dc:27:9d:f9:12:c6:66:1a:d0:c0:80: ad:f8:49:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwm8PQyoqaZmNftogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk MDUxOTQ1MzctZjliYS00YTlmLWEyMmYtMDIzODVhYzU4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTTrvu2DFsR+JimV8zmEQNO2qqU8BcDnGCe se5pTfidJTV7dmfqBBagoht2ybL4Lkr8OxvOhqi04RK95GnuwGiZyn13JH+s5zZf /b06Wvif86/pJbqAmKeMy2MLYBXdFOMLjc5XCsYp3pkWqjWTHGUnF4maXvYUzNuq 3+WHCnJEFDhEdt1doAuYHqs74eDElbJmbghxs+ncML5vm1DzgrrOo47IkpKIJJpb x3m1nf/rIOql2zTPYt5IxJz0dolSvgLeOGDDwpwZVZJGDhCF2mTaDc8o94gyKHrZ 8C2BwbyEJffNFChIbmPu71seJ4CGCvJJNMyuDKx7ILZYiouDKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPWQEv585tzdLKO+XxMoCSTiaitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDA4YWY0YTctYmY0My0z ZjMxLTkzNTgtZjA4ZDQ4NWUwNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgE2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGwFwHAJKNiTo064vkbE6dulsBS02fNnfiBTVwEmBBg1h3JQmxcU L800SPFh7LRKuJ91vFHfuUWpwpCuJQp0oVS4NewRVjFujt5rTY3w/br0KR7kUadd fOSqh5Ky54pRJ3HTx1qq/fYYoBvuA5Y6fPDSQLOEnSOgyeX7Mm9XYo/oxzEoSfT0 +lL7A0y2c72rH08i1FpIs3lEqSzoKHdMX40WGEyTl/Cyj9bgKIDUjBBn5o33e8PO sRaCxQrJ8IQVbuHBhtc2Au4JW3ssJA6D8YEK+Yc3OcS3c6smA4ZNsZDPjzGpwlJI oqhPxVSZzKZLmLbcJ535EsZmGtDAgK34STc= -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:12 2025 by rpki-client