This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa File: b859d57b-c3f2-3630-a741-daa5b35886b7.roa (raw, json) Hash identifier: 20vIYhgscOSPjzCoS0+YKWyKm6+e9xtKzaNguSfbkiI= Subject key identifier: 5B:0D:24:47:7B:76:35:77:F6:FC:99:CE:1B:72:1E:E1:48:23:2F:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8186780DF6798C7850480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:3280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:18:67:80:df:67:98:c7:85:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e10f23d3-caba-479e-a6d4-2393cd9d90bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:8f:b3:5c:1c:5e:5e:3d:a7:2d:03:c1:27: 12:1a:aa:29:ff:02:de:1a:08:94:fd:ff:e2:b2:0f: a1:e9:76:71:21:95:0b:6c:ea:9c:19:c3:bd:ca:8b: a9:0c:05:58:cf:c2:7e:ca:c5:6e:ba:ab:26:0b:b1: 6d:9a:31:0b:51:ab:2b:3d:30:c7:81:cd:88:ad:8f: 2c:3c:0c:ad:0c:91:04:53:b6:9f:c0:58:8c:46:e9: 27:f2:a5:91:83:dd:56:87:13:86:cb:8b:a9:c6:c0: db:db:f1:7b:72:55:80:ce:ba:9e:3b:d0:ab:ca:b2: df:f2:db:e6:72:64:d8:16:e4:b8:42:44:d5:4f:1c: 48:98:98:47:67:a3:99:59:55:a4:3a:db:18:5c:6b: 94:29:17:63:d1:4e:f9:e6:dd:51:56:93:1c:3c:05: f6:1a:6a:f4:68:76:48:81:d6:76:90:8f:84:77:e8: a1:ba:1a:71:e2:26:e8:b1:55:8b:25:1d:14:4f:d1: 6a:c9:94:27:38:bc:ac:8f:35:42:dc:72:d1:fe:82: ce:49:e9:1d:22:e1:97:c8:37:86:ea:c1:43:eb:13: be:e8:60:a2:26:bc:2a:04:d7:88:e4:58:0d:9c:7f: 4d:de:21:01:71:e4:38:75:5c:92:ad:e0:1e:bd:18: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:24:47:7B:76:35:77:F6:FC:99:CE:1B:72:1E:E1:48:23:2F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:67:a4:5c:6d:23:99:b6:98:d4:f3:84:80:c7:d7:51:ae:9a: 05:95:0f:f0:29:89:08:bc:4e:18:42:e2:7c:de:03:d0:b3:d9: 6f:82:19:ba:65:e5:00:0f:90:cd:2f:b6:72:d1:67:0d:b9:ec: 3c:60:fa:be:9c:f7:e9:c9:30:5b:35:9d:42:62:27:ea:d6:4d: 27:1a:c0:53:8b:2a:64:32:86:08:22:37:ec:a2:97:2d:b8:41: 4f:4f:39:39:2e:89:e7:67:7e:45:ec:e4:8a:81:1a:ce:fe:9a: d1:8a:ac:f3:f1:89:b1:c7:b1:37:20:1f:89:fd:e2:49:db:07: 61:99:2e:ec:0e:f8:1c:2e:0b:71:00:a8:2b:27:3d:de:66:09: 02:52:4a:83:96:56:43:cf:7e:eb:0a:4f:99:d7:49:a9:41:e8: f8:ed:bd:29:da:60:f1:01:fa:c5:4f:56:99:41:21:27:2e:de: 33:16:96:76:8f:f6:16:71:df:de:d1:78:51:39:c3:74:0d:c4: cf:1f:1f:79:89:df:a0:d8:3b:73:96:35:1e:01:75:38:1b:10: bd:6f:99:b2:36:7b:c2:8d:b8:19:81:0f:23:ed:32:85:08:ec: 30:26:0d:b5:50:e0:28:51:8a:fc:e7:34:5a:ad:04:a3:ea:af: 41:50:35:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqBhngN9nmMeFBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTEwZjIzZDMtY2FiYS00NzllLWE2ZDQtMjM5M2NkOWQ5MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6uPs1wcXl49py0DwScSGqop/wLeGgiU/f/i sg+h6XZxIZULbOqcGcO9youpDAVYz8J+ysVuuqsmC7FtmjELUasrPTDHgc2IrY8s PAytDJEEU7afwFiMRukn8qWRg91WhxOGy4upxsDb2/F7clWAzrqeO9CryrLf8tvm cmTYFuS4QkTVTxxImJhHZ6OZWVWkOtsYXGuUKRdj0U755t1RVpMcPAX2Gmr0aHZI gdZ2kI+Ed+ihuhpx4ibosVWLJR0UT9FqyZQnOLysjzVC3HLR/oLOSekdIuGXyDeG 6sFD6xO+6GCiJrwqBNeI5FgNnH9N3iEBceQ4dVySreAevRhPRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsNJEd7djV39vyZzhtyHuFIIy9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1OWQ1N2ItYzNmMi0z NjMwLWE3NDEtZGFhNWIzNTg4NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5npFxtI5m2mNTzhIDH11GumgWVD/ApiQi8ThhC4nzeA9Cz2W+C Gbpl5QAPkM0vtnLRZw257Dxg+r6c9+nJMFs1nUJiJ+rWTScawFOLKmQyhggiN+yi ly24QU9POTkuiednfkXs5IqBGs7+mtGKrPPxibHHsTcgH4n94knbB2GZLuwO+Bwu C3EAqCsnPd5mCQJSSoOWVkPPfusKT5nXSalB6PjtvSnaYPEB+sVPVplBIScu3jMW lnaP9hZx397ReFE5w3QNxM8fH3mJ36DYO3OWNR4BdTgbEL1vmbI2e8KNuBmBDyPt MoUI7DAmDbVQ4ChRivznNFqtBKPqr0FQNQM= -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:18 2025 by rpki-client