This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa
File: 0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa (raw, json)
Hash identifier: SM2gpf0t3XQreAcNnjPiTmQ7oUpuuZMZm4qfOVNNj8Q=
Subject key identifier: ED:6D:75:58:36:34:48:17:1F:12:97:73:D8:DB:1C:D4:82:32:A9:67
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A666CA81E3EC8E2CDD0620
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2d80:6000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:66:ca:81:e3:ec:8e:2c:dd:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=0a17f710-9566-4d1a-8d70-594ac0004bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:17:83:43:cf:f7:ba:b2:6f:ae:a0:c0:82:
75:7d:e6:d0:34:d6:86:e4:3c:09:0c:2d:0c:74:2c:
f3:12:43:53:2f:cf:b5:e2:3b:70:c9:a1:ca:6e:b0:
f2:e2:d0:34:3c:c1:8c:7d:43:8a:fd:ec:74:49:a2:
90:c7:10:ec:a9:3a:c9:17:8d:33:3e:ad:4b:72:f7:
3b:e0:70:0a:22:61:71:21:fb:24:f2:cd:ff:0c:a1:
e6:8b:94:07:13:9f:46:d2:fc:ab:33:e0:1b:75:4e:
8c:18:9e:48:42:cd:dc:aa:e1:c2:56:df:17:6f:8f:
b8:2e:d0:e4:ce:df:f9:4c:98:72:a8:25:33:fe:21:
bf:9a:82:1b:81:50:3c:1f:4b:20:2a:47:bd:bd:f2:
02:d0:23:eb:8d:6f:b8:9c:b5:84:75:cd:ce:ee:6b:
15:46:bd:b8:27:ee:cd:65:a3:62:9f:ce:d6:d0:eb:
1d:a8:27:13:43:98:2c:41:b4:07:1e:6d:22:30:fa:
36:e0:5c:6c:f5:02:e0:a6:4f:3a:b2:bb:5f:f6:3d:
54:b6:2f:0b:0a:f8:b0:ce:21:25:d9:01:39:e2:e5:
cf:1b:6d:5b:d2:21:44:f9:4a:12:dd:ce:2a:ec:39:
36:aa:03:88:2d:36:a9:90:22:8d:ac:b1:cb:3d:7c:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6D:75:58:36:34:48:17:1F:12:97:73:D8:DB:1C:D4:82:32:A9:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:6000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:9d:89:10:20:19:33:65:d1:2e:b3:f6:1d:65:42:4f:3e:25:
61:1f:dd:d8:b2:e2:3b:db:06:b5:08:4f:7e:39:bb:65:7c:b6:
57:e0:0c:31:4f:b1:a3:1e:fd:6c:18:b2:bb:00:cd:5a:0d:55:
e4:86:e6:b9:d0:b5:61:0e:5e:e2:4b:43:61:68:b6:ca:03:b7:
92:10:6e:8d:fb:dc:1b:71:9e:2c:4c:de:83:0a:72:8d:08:aa:
2f:02:7a:ff:dc:3e:a6:e6:8c:87:a7:31:9e:ba:1a:30:f6:14:
d8:ca:3a:d6:26:b7:85:48:d3:e8:55:d8:ab:a7:d2:af:f0:74:
94:2c:77:5c:35:5a:19:e5:fd:2d:24:e5:26:e5:e2:84:99:bf:
08:73:96:79:67:d4:d6:75:d9:60:b3:91:d5:db:1a:5b:c0:5f:
81:5e:9a:89:72:44:e9:33:32:95:c6:db:e4:d2:29:30:cc:7f:
cd:5b:3a:d5:01:25:09:fc:24:c5:0e:12:33:6a:71:b3:27:07:
bc:06:ac:01:dd:a4:54:14:88:b6:41:8d:20:d4:c6:49:76:b6:
cb:14:b9:66:34:e3:91:12:50:15:0e:dc:91:94:1f:7c:dd:94:
a4:58:12:f5:70:48:7e:0f:1f:90:a4:f9:29:fd:4a:a8:c4:bb:
c6:14:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:45:57 2026 by rpki-client