This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa File: cd123836-0bbd-3210-a824-88d6c91c31da.roa (raw, json) Hash identifier: 0PSXv2eYwB8ssNKeLZiKngfrB8XU4JTUt64FgfCLaZQ= Subject key identifier: BA:AC:F8:2C:FE:4C:E2:11:BA:20:CD:78:23:6C:60:63:3A:90:E1:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C364B9DA34F72DB568BB1E680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:9d:a3:4f:72:db:56:8b:b1:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=2bcf6fc2-42eb-494b-817b-b797d999d97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:92:3f:2e:73:f3:77:6c:9e:44:2f:cf:50: 8e:08:4c:6e:c1:58:35:3f:ca:82:b4:2c:fe:c9:f6: 01:c7:3c:20:01:b9:5e:9c:54:db:93:c1:fd:cc:07: d5:53:5b:aa:0a:98:7c:68:88:7e:f3:c4:73:e5:1e: dc:5c:ee:6f:a0:3e:47:3f:4e:78:ba:96:66:4a:d6: 0c:c3:cd:d1:43:94:93:1c:91:2c:ca:d8:2c:c0:8b: e1:8d:bc:59:9a:73:8f:ea:f4:44:0f:46:e5:77:b8: 07:7e:79:1c:bc:67:a3:1a:ed:58:25:81:f7:40:67: 58:4c:b8:8c:db:e8:92:0b:b9:dc:f3:0b:a5:13:e9: 39:9d:1c:97:2b:60:9d:0b:40:1f:97:54:49:32:e2: 07:73:49:f1:05:17:ae:22:bf:03:99:5e:57:24:10: 60:27:5c:65:6f:9c:1f:63:da:9b:60:11:e5:43:b8: 2e:98:41:0c:26:ae:7c:3f:de:22:ba:05:e6:d3:60: cf:92:1d:44:f9:e2:2f:cd:64:18:3c:35:e7:be:51: 96:b0:39:d2:ff:e6:39:64:5e:9a:f7:a9:c5:9e:dc: 66:b7:7c:ef:79:7c:b2:57:24:c5:ce:3f:fa:d2:d9: bc:d4:85:0a:b9:8d:6e:f3:cd:80:47:0a:df:0c:60: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:F8:2C:FE:4C:E2:11:BA:20:CD:78:23:6C:60:63:3A:90:E1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:44:0d:f9:1e:e0:69:30:0d:b3:63:27:72:55:e0:34:29:81: 62:99:dd:b9:32:5c:72:4e:f4:e2:74:0b:4a:e1:4f:a3:7f:1f: 57:ac:5a:8e:ca:02:96:2a:8d:ca:b3:83:96:e7:d5:1c:b1:a5: a2:6d:52:af:08:f8:3c:a3:97:cf:94:cd:d6:ac:e0:97:1f:42: 20:b3:bc:11:13:9c:7a:43:12:31:dd:65:5b:ff:49:4a:97:32: c5:ab:1d:43:86:56:96:38:a3:fd:62:52:7c:11:35:25:b8:22: 69:61:e7:e3:b3:b0:f9:e3:a7:f4:7c:e6:75:99:c3:c2:d7:6d: 10:6b:59:29:78:22:4b:7f:1f:4f:64:b9:64:c0:96:ca:0c:15: 62:b6:aa:31:c9:1f:0c:a5:fd:19:26:49:07:79:04:51:55:28: 6b:3b:61:fb:81:bb:2e:2a:31:8a:97:98:65:13:1d:28:41:48: 84:93:77:1d:99:94:f0:d7:72:8b:0a:23:e0:f8:76:d8:cf:dd: 6b:14:7e:eb:a2:73:1e:1a:7a:98:c3:d0:40:b4:4c:7d:1a:16: ae:aa:02:0c:bb:26:7a:3c:0c:e0:80:7c:30:99:bf:ec:32:cf: e5:82:3c:0c:f3:a9:1e:7d:2a:5f:f6:51:f2:54:c6:ff:9b:db: c4:49:16:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw2S52jT3LbVoux5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk MmJjZjZmYzItNDJlYi00OTRiLTgxN2ItYjc5N2Q5OTlkOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9aSPy5z83dsnkQvz1COCExuwVg1P8qCtCz+ yfYBxzwgAblenFTbk8H9zAfVU1uqCph8aIh+88Rz5R7cXO5voD5HP054upZmStYM w83RQ5STHJEsytgswIvhjbxZmnOP6vRED0bld7gHfnkcvGejGu1YJYH3QGdYTLiM 2+iSC7nc8wulE+k5nRyXK2CdC0Afl1RJMuIHc0nxBReuIr8DmV5XJBBgJ1xlb5wf Y9qbYBHlQ7gumEEMJq58P94iugXm02DPkh1E+eIvzWQYPDXnvlGWsDnS/+Y5ZF6a 96nFntxmt3zveXyyVyTFzj/60tm81IUKuY1u882ARwrfDGAQmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLqs+Cz+TOIRuiDNeCNsYGM6kOHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2QxMjM4MzYtMGJiZC0z MjEwLWE4MjQtODhkNmM5MWMzMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM0QN+R7gaTANs2MnclXgNCmBYpnduTJcck704nQLSuFPo38fV6xa jsoCliqNyrODlufVHLGlom1Srwj4PKOXz5TN1qzglx9CILO8EROcekMSMd1lW/9J SpcyxasdQ4ZWljij/WJSfBE1JbgiaWHn47Ow+eOn9HzmdZnDwtdtEGtZKXgiS38f T2S5ZMCWygwVYraqMckfDKX9GSZJB3kEUVUoazth+4G7LioxipeYZRMdKEFIhJN3 HZmU8Ndyiwoj4Ph22M/daxR+66JzHhp6mMPQQLRMfRoWrqoCDLsmejwM4IB8MJm/ 7DLP5YI8DPOpHn0qX/ZR8lTG/5vbxEkW1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:00:26 2025 by rpki-client