This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/864d6812-87a7-371d-b4a8-5549e78cd452.roa File: 864d6812-87a7-371d-b4a8-5549e78cd452.roa (raw, json) Hash identifier: FePs3jwByensTO0KOw+o8iklFppM436FdPWL+mIxEng= Subject key identifier: 7A:8D:D9:6E:0F:4E:25:E1:D5:4C:90:7D:F3:30:5D:10:43:A4:90:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC07CCAC659E0360F2BD60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/864d6812-87a7-371d-b4a8-5549e78cd452.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:6680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:07:cc:ac:65:9e:03:60:f2:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=f2623a32-8412-4274-84af-7c7d53c57c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:7c:97:8b:e6:15:86:f5:d7:da:81:f1:05: 2c:a5:15:65:ec:fb:22:10:2b:5d:b2:7a:29:1c:13: 49:22:be:8c:8b:07:b8:78:4c:1f:a6:0e:60:72:40: 34:64:c5:73:3a:29:85:10:a5:51:3c:10:16:e6:5e: ef:05:6f:8e:c7:f2:a9:0c:70:5e:a5:ca:2d:86:65: d3:bd:64:05:e3:16:b1:a2:10:aa:df:95:96:40:4b: 51:21:bd:2a:da:bb:8d:0a:2d:2a:a3:a5:8f:98:a4: 39:37:ac:81:dc:ca:82:d0:e9:c3:5b:63:e8:6a:c0: 26:41:ec:b5:e0:5f:cc:09:d0:6d:c8:10:ff:02:eb: 36:11:51:90:bc:96:08:21:64:d5:76:10:ba:ee:a4: 31:e1:dc:87:74:d7:30:23:b4:6f:c0:83:61:d8:38: 90:65:ac:c9:07:b0:7d:c2:76:24:ca:f4:e4:57:c6: 69:68:12:21:58:35:0d:7e:e7:32:b1:c3:9f:06:ba: 04:9b:09:cd:cc:b2:6b:98:f6:ea:0a:b5:db:cd:1c: 51:54:21:e2:a2:41:e4:0b:bb:5f:88:9a:4b:22:5f: 1c:c5:0e:26:4a:5c:d2:6d:38:b4:80:33:31:2e:61: c8:bc:32:02:1a:58:f4:ce:e7:e4:df:20:7e:4c:02: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8D:D9:6E:0F:4E:25:E1:D5:4C:90:7D:F3:30:5D:10:43:A4:90:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/864d6812-87a7-371d-b4a8-5549e78cd452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:70:92:28:5b:21:aa:4e:46:24:9d:6f:da:0c:a6:a9:5d:f0: ee:db:c8:65:30:16:0c:6d:28:18:d7:2e:a6:87:37:02:b6:0e: 1d:84:c6:ea:5d:d2:09:04:9f:c8:bb:67:a5:70:ab:77:0c:05: 22:17:56:ac:48:52:14:ef:9a:4f:1e:61:48:38:b1:86:35:dc: af:98:51:1d:f3:02:af:ac:bf:c4:04:3e:b1:f6:51:2f:b4:bd: ed:5e:08:5c:42:cf:f9:fd:40:db:3f:34:78:7b:11:6a:d0:2d: c8:31:d1:91:98:07:cd:be:c6:a9:30:e8:4e:b4:2c:da:06:1b: ac:13:fd:22:01:82:42:82:e5:b5:e5:54:7c:de:f4:f4:96:72: fb:08:66:8e:53:1a:9a:29:56:d3:4f:a1:de:99:81:00:f8:f9: 83:14:73:3e:97:0c:f2:06:5a:51:4f:d8:2a:6b:02:41:d9:24: 81:33:71:d2:62:62:23:eb:5d:b3:d3:50:04:2f:71:58:42:c1: 0e:ec:12:5f:32:3e:19:3f:88:cb:02:5d:f5:ee:3e:9a:61:80: 1c:bb:85:00:ff:ef:53:41:58:f0:b0:19:78:b3:0a:9c:47:88: 10:eb:1a:80:39:c7:27:b0:8c:70:c3:f0:48:b4:eb:e1:df:e0: e1:ef:ae:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3AfMrGWeA2DyvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjI2MjNhMzItODQxMi00Mjc0LTg0YWYtN2M3ZDUzYzU3YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZl8l4vmFYb119qB8QUspRVl7PsiECtdsnop HBNJIr6Miwe4eEwfpg5gckA0ZMVzOimFEKVRPBAW5l7vBW+Ox/KpDHBepcothmXT vWQF4xaxohCq35WWQEtRIb0q2ruNCi0qo6WPmKQ5N6yB3MqC0OnDW2PoasAmQey1 4F/MCdBtyBD/Aus2EVGQvJYIIWTVdhC67qQx4dyHdNcwI7RvwINh2DiQZazJB7B9 wnYkyvTkV8ZpaBIhWDUNfucyscOfBroEmwnNzLJrmPbqCrXbzRxRVCHiokHkC7tf iJpLIl8cxQ4mSlzSbTi0gDMxLmHIvDICGlj0zufk3yB+TAK+AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHqN2W4PTiXh1UyQffMwXRBDpJB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODY0ZDY4MTItODdhNy0z NzFkLWI0YTgtNTU0OWU3OGNkNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZwkihbIapORiSdb9oMpqld8O7byGUwFgxtKBjXLqaHNwK2Dh2E xupd0gkEn8i7Z6Vwq3cMBSIXVqxIUhTvmk8eYUg4sYY13K+YUR3zAq+sv8QEPrH2 US+0ve1eCFxCz/n9QNs/NHh7EWrQLcgx0ZGYB82+xqkw6E60LNoGG6wT/SIBgkKC 5bXlVHze9PSWcvsIZo5TGpopVtNPod6ZgQD4+YMUcz6XDPIGWlFP2CprAkHZJIEz cdJiYiPrXbPTUAQvcVhCwQ7sEl8yPhk/iMsCXfXuPpphgBy7hQD/71NBWPCwGXiz CpxHiBDrGoA5xyewjHDD8Ei06+Hf4OHvrl8= -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:45 2025 by rpki-client