This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa File: af65b137-bf3d-30eb-bd21-ec70ce265b99.roa (raw, json) Hash identifier: XMkXlIi2YtXwXqOAWrOZiOMuzM7BgeYLVVVBMEZJ2/c= Subject key identifier: 6E:53:2B:A8:69:58:F0:CC:1E:50:DA:2B:89:A7:F2:90:ED:3B:B0:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0F46EC5167277DEE13C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2d80:5000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f4:6e:c5:16:72:77:de:e1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=edb52b16-9f19-41c7-b420-d318ca26a05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:fc:03:2b:bd:41:66:d3:b3:da:9f:f2:13: 9e:d8:e5:f2:cd:c0:18:89:4d:54:72:17:43:da:38: 28:71:01:d4:2c:a0:c0:f1:58:b9:cd:39:87:bd:1b: 1d:cf:73:46:06:cc:a9:61:62:16:2c:cf:b6:8e:d6: 86:d8:56:8e:d2:7e:55:19:e4:2d:85:ac:3d:8c:db: 03:ef:af:76:d3:ba:af:38:1e:06:12:d7:9b:60:bd: 30:71:f1:a1:ac:ef:9e:e6:d1:b9:6e:a5:4b:39:4c: 5d:e1:2f:bf:4f:f0:dd:54:3c:1f:3a:32:dd:bd:91: ab:4d:90:75:e7:65:77:f9:85:1a:f9:de:9b:c4:04: f2:7c:59:28:c4:74:4a:33:cf:40:50:2a:ab:1d:2d: 5a:f9:fa:c7:69:47:7c:8d:41:dd:28:0c:f5:bc:4a: c0:19:ef:7b:b8:ec:96:34:b9:d5:89:35:fb:4c:1f: 80:96:08:d2:38:8d:68:3c:87:ce:0c:4b:2d:d5:46: 68:b2:8a:6d:f0:ad:72:5b:e0:10:52:1e:34:39:9c: 26:c4:8a:7e:41:29:46:b6:51:3d:41:54:b5:02:d6: 39:22:0d:26:bb:c4:ed:9c:0f:3d:0b:ec:b7:01:78: bc:63:be:e9:56:b3:c8:a2:7a:1e:23:95:71:3b:13: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:53:2B:A8:69:58:F0:CC:1E:50:DA:2B:89:A7:F2:90:ED:3B:B0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9e:e6:9b:6f:1f:0e:71:b2:6e:5d:5a:22:2a:fb:2c:67:4a: 11:0e:2d:65:da:72:7a:12:b9:9e:24:91:d8:14:63:f4:99:98: 2a:e1:c2:74:8f:b6:47:fa:ca:7b:dc:4e:26:de:09:83:67:68: d1:b2:57:34:19:72:d9:d9:b4:6d:58:60:d5:8e:db:ec:66:c1: c9:4a:8d:47:f9:ab:61:cf:66:01:fc:71:e7:b0:12:7e:12:8c: aa:ff:18:a7:07:fe:94:4c:19:27:cd:fd:b2:95:7c:04:ba:8d: d8:fb:84:8c:e4:fe:38:a5:f9:84:81:4a:6a:ef:76:3b:1c:85: c9:8a:46:85:4f:16:f2:fd:c5:00:63:37:3e:c2:44:02:bc:8e: 04:e2:da:d0:3c:44:18:2e:f9:ff:3b:ed:8c:8a:1f:51:00:b4: 13:f2:e3:f7:b9:d4:0f:24:3d:47:e1:a5:3c:bb:e7:b8:34:4d: 08:f8:30:7e:93:b2:a2:b4:6b:ae:00:69:18:2f:f2:f6:46:31: 3b:d3:d0:33:ca:d1:4c:2a:d4:be:f0:d8:4c:19:d1:2b:9c:b7: cf:6b:5f:15:84:10:22:b6:5e:fc:31:02:90:73:aa:ff:b5:63: c1:fb:fa:5c:34:55:71:47:06:75:02:59:61:ce:27:04:71:f0: eb:ca:c5:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwm8PRuxRZyd97hPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZWRiNTJiMTYtOWYxOS00MWM3LWI0MjAtZDMxOGNhMjZhMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeP8Ayu9QWbTs9qf8hOe2OXyzcAYiU1UchdD 2jgocQHULKDA8Vi5zTmHvRsdz3NGBsypYWIWLM+2jtaG2FaO0n5VGeQthaw9jNsD 769207qvOB4GEtebYL0wcfGhrO+e5tG5bqVLOUxd4S+/T/DdVDwfOjLdvZGrTZB1 52V3+YUa+d6bxATyfFkoxHRKM89AUCqrHS1a+frHaUd8jUHdKAz1vErAGe97uOyW NLnViTX7TB+AlgjSOI1oPIfODEst1UZosopt8K1yW+AQUh40OZwmxIp+QSlGtlE9 QVS1AtY5Ig0mu8TtnA89C+y3AXi8Y77pVrPIonoeI5VxOxOv/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG5TK6hpWPDMHlDaK4mn8pDtO7DDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2NWIxMzctYmYzZC0z MGViLWJkMjEtZWM3MGNlMjY1Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIWe5ptvHw5xsm5dWiIq+yxnShEOLWXacnoSuZ4kkdgUY/SZmCrh wnSPtkf6ynvcTibeCYNnaNGyVzQZctnZtG1YYNWO2+xmwclKjUf5q2HPZgH8ceew En4SjKr/GKcH/pRMGSfN/bKVfAS6jdj7hIzk/jil+YSBSmrvdjschcmKRoVPFvL9 xQBjNz7CRAK8jgTi2tA8RBgu+f877YyKH1EAtBPy4/e51A8kPUfhpTy757g0TQj4 MH6TsqK0a64AaRgv8vZGMTvT0DPK0Uwq1L7w2EwZ0Suct89rXxWEECK2XvwxApBz qv+1Y8H7+lw0VXFHBnUCWWHOJwRx8OvKxZc= -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:37 2025 by rpki-client