This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf41629-de47-3fc9-90ed-da8e958e0f55.roa File: bdf41629-de47-3fc9-90ed-da8e958e0f55.roa (raw, json) Hash identifier: jafjS61kxTveSf0qZUYAJlmlCHQIHPzMoIJhH0sqCqs= Subject key identifier: 05:AE:0E:F8:86:E2:ED:94:D3:40:43:58:B7:A8:78:AC:B9:DD:0D:C9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A681164EEC641D28799866 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf41629-de47-3fc9-90ed-da8e958e0f55.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:9f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:81:16:4e:ec:64:1d:28:79:98:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=37991500-1144-4830-9fd2-49c38050d69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:f9:49:13:e9:f0:b0:0a:78:6f:81:71:b9: a9:12:02:c5:b8:37:23:80:5a:51:2e:07:ae:ce:db: 1e:dd:4d:a8:2f:44:7d:01:1f:d4:ed:3a:c1:aa:6e: 28:be:99:1f:16:43:8d:fb:a6:05:55:c5:d9:fe:68: ac:2b:5c:b9:ff:21:b1:7e:ea:c5:9a:07:c4:10:a9: 27:2d:f4:4a:98:1c:94:34:c8:f3:72:42:a3:7e:dd: 08:c9:b4:65:d6:f9:f2:10:24:e8:17:5f:31:f9:87: 9e:c1:5c:ca:36:ea:a0:ae:b1:11:f6:dd:35:be:97: f6:00:d5:be:c6:45:2c:93:f4:f1:1e:d1:36:f7:2d: 42:f4:f0:c6:12:5f:34:57:83:f8:1e:ce:72:55:00: e6:68:04:81:50:f9:0a:ea:47:ca:fd:e1:a2:e7:34: f3:8a:48:c5:f9:0d:d2:d0:82:43:d2:df:77:9b:80: f5:d6:41:2f:c1:69:31:3a:1d:5a:50:91:05:3e:08: 3b:71:3c:5e:22:47:33:87:ff:4b:e8:1f:db:6a:ba: c9:19:20:d2:06:ef:78:b8:1b:fa:64:c4:f3:eb:43: 96:90:aa:eb:0a:f1:73:0c:89:4b:13:3d:7c:ca:94: bd:3c:57:a9:cc:ce:bd:66:b9:2b:fd:15:27:2f:7b: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AE:0E:F8:86:E2:ED:94:D3:40:43:58:B7:A8:78:AC:B9:DD:0D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf41629-de47-3fc9-90ed-da8e958e0f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3c:b1:4d:3b:d1:cf:65:38:25:3e:62:e9:7c:43:69:f3:4a: 2f:8a:ca:cf:da:00:5c:66:38:42:ac:4a:2b:17:3c:37:42:02: ed:22:54:c3:03:f6:d1:c7:45:7f:a1:c3:4b:0f:72:19:27:5a: 51:c8:21:0e:b5:c1:ea:0a:d0:c0:7f:6a:8d:c0:d7:bb:55:a1: 94:75:53:ef:c9:84:6e:de:4c:72:f5:21:d8:95:f9:79:5a:aa: a3:dd:46:05:c1:fe:67:f3:da:26:5d:71:26:f8:e8:46:6a:53: 22:c0:23:19:ac:72:74:04:d9:d6:c5:ca:2c:c9:74:97:c5:69: a6:ed:80:ea:b8:38:b5:a2:bd:7b:4e:be:4a:80:76:23:a2:26: e8:29:61:6b:ab:53:87:ab:e3:0e:ca:bf:25:58:7f:40:f6:d2: 90:5a:2b:10:1d:02:b7:ba:82:00:2b:99:f1:83:b5:79:54:45: 45:6a:6f:10:27:1d:23:60:27:e2:16:7f:b2:7f:22:9f:15:3b: 4f:9f:ce:f3:92:96:65:12:3e:09:d2:cc:f0:df:10:86:c0:1b: 72:90:39:ff:6e:7f:fe:98:ef:21:eb:a3:fa:bb:ee:80:c0:4d: 85:7b:89:a1:5c:77:b0:2f:6f:59:ca:ba:2a:3a:a5:54:11:17: 57:82:b1:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpoEWTuxkHSh5mGYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mzc5OTE1MDAtMTE0NC00ODMwLTlmZDItNDljMzgwNTBkNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bT5SRPp8LAKeG+BcbmpEgLFuDcjgFpRLgeu ztse3U2oL0R9AR/U7TrBqm4ovpkfFkON+6YFVcXZ/misK1y5/yGxfurFmgfEEKkn LfRKmByUNMjzckKjft0IybRl1vnyECToF18x+YeewVzKNuqgrrER9t01vpf2ANW+ xkUsk/TxHtE29y1C9PDGEl80V4P4Hs5yVQDmaASBUPkK6kfK/eGi5zTzikjF+Q3S 0IJD0t93m4D11kEvwWkxOh1aUJEFPgg7cTxeIkczh/9L6B/barrJGSDSBu94uBv6 ZMTz60OWkKrrCvFzDIlLEz18ypS9PFepzM69Zrkr/RUnL3uLkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWuDviG4u2U00BDWLeoeKy53Q3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRmNDE2MjktZGU0Ny0z ZmM5LTkwZWQtZGE4ZTk1OGUwZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJ+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD48sU070c9lOCU+Yul8Q2nzSi+Kys/aAFxmOEKsSisXPDdCAu0i VMMD9tHHRX+hw0sPchknWlHIIQ61weoK0MB/ao3A17tVoZR1U+/JhG7eTHL1IdiV +XlaqqPdRgXB/mfz2iZdcSb46EZqUyLAIxmscnQE2dbFyizJdJfFaabtgOq4OLWi vXtOvkqAdiOiJugpYWurU4er4w7KvyVYf0D20pBaKxAdAre6ggArmfGDtXlURUVq bxAnHSNgJ+IWf7J/Ip8VO0+fzvOSlmUSPgnSzPDfEIbAG3KQOf9uf/6Y7yHro/q7 7oDATYV7iaFcd7Avb1nKuio6pVQRF1eCsVs= -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:29 2025 by rpki-client