This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa
File: 9d520890-b526-3c50-b3ff-deef74d89924.roa (raw, json)
Hash identifier: KexdfKtxDIBgZb2SIOgLG6Q2/XbUC89gf4iQtUlMzOg=
Subject key identifier: 41:16:FE:1C:FA:58:D2:B7:48:ED:6A:33:7E:4E:03:2B:59:44:B9:E3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C26F0F4B65E943CB6A690E980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa
Signing time: Thu 11 Dec 2025 14:00:39 +0000
ROA not before: Thu 11 Dec 2025 14:00:39 +0000
ROA not after: Wed 11 Mar 2026 13:00:39 +0000
asID: 19905
IP address blocks: 2604:2d80:6e80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:26:f0:f4:b6:5e:94:3c:b6:a6:90:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 11 14:00:39 2025 GMT
Not After : Mar 11 13:00:39 2026 GMT
Subject: CN=892b08da-c478-4de5-981e-2cbaee163b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:ad:b4:d9:63:69:ec:99:70:43:63:49:0e:
99:c7:be:d4:ae:bd:df:af:44:1a:ff:09:5a:23:32:
be:27:06:ad:db:09:5d:4a:a0:95:13:7f:a6:5b:93:
b2:41:48:93:64:53:ed:33:e8:c6:7f:13:2e:5c:4a:
7d:da:a5:32:ce:42:71:69:3a:53:20:a5:1e:70:7b:
35:b5:df:65:32:93:ce:6c:0a:6f:63:70:d8:3d:9e:
cf:4a:d2:58:35:2b:65:bf:98:ef:7b:7d:c5:55:58:
49:26:5e:e2:2d:31:05:0b:b7:03:13:23:eb:93:1b:
67:19:50:4a:dd:c7:25:7c:42:bc:4e:95:d4:36:6a:
63:b9:5a:1d:65:8e:6f:a3:8d:be:8a:f1:3c:07:05:
f4:11:2f:c8:46:08:28:f7:5a:4f:da:37:f3:38:f8:
bd:56:85:5f:92:eb:56:fe:e2:a4:3c:41:c5:74:e3:
bc:df:02:01:e9:f3:bb:50:57:49:a9:0c:ba:6f:35:
06:38:1f:ee:4a:db:ba:17:96:a3:3d:2e:be:93:f9:
6b:ea:79:29:0e:06:2b:05:a0:ee:aa:70:e0:c9:a1:
e4:c8:0b:f3:0f:d0:56:36:75:e6:67:99:28:f1:c3:
3b:b4:f5:64:7e:96:c2:5f:eb:ad:1b:e0:24:93:65:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:16:FE:1C:FA:58:D2:B7:48:ED:6A:33:7E:4E:03:2B:59:44:B9:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:6e80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3d:4c:87:f7:cb:e7:4c:48:ec:ab:8a:75:72:44:44:fc:4b:
db:d6:32:bf:a1:8e:1c:36:ff:c2:7b:25:52:78:7b:c1:15:96:
cf:ac:6d:f5:1c:f8:61:ba:4a:74:76:0d:8d:99:6c:40:c4:29:
4d:0a:d7:43:ff:be:4d:eb:ce:91:b5:92:6d:29:7c:0c:90:7a:
1d:d4:65:a5:51:84:1d:ab:f8:44:9c:19:0d:bf:0e:7b:72:d3:
4e:1f:3a:19:f8:4b:57:c4:72:16:63:7c:00:8d:c5:04:ac:42:
2c:c0:e4:bf:4a:83:d5:58:e3:a8:b1:6a:80:93:08:16:42:e6:
72:f9:b5:61:aa:eb:c6:fd:25:ef:90:ae:9a:4a:e3:fa:60:f8:
26:28:2d:67:98:14:a6:7f:a5:81:55:0e:65:6c:98:82:28:fd:
87:52:7a:e6:31:d8:bc:5f:e7:dd:6d:c1:e6:08:14:ce:25:74:
fc:22:ba:96:ac:28:56:bb:de:f7:c5:7b:53:29:1f:ec:80:d5:
9a:c3:d6:e7:b6:f5:4c:79:84:fb:25:a2:2e:21:5a:0e:60:5a:
79:af:2c:28:99:7b:37:ca:4c:c5:e4:38:2e:f7:9b:39:32:ea:
33:f9:44:44:8d:f7:c1:84:0b:3d:60:ae:68:76:d0:7b:09:06:
fe:26:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:01:37 2025 by rpki-client