This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa File: 17220f79-ee23-3621-9d33-5f8f811b909a.roa (raw, json) Hash identifier: 4T4yNnuWs9Pnc2S3SQ7vR6PcJyw4eAASpUXY9i6tYrg= Subject key identifier: 08:7A:96:96:4A:45:25:AC:1B:6E:EC:9D:BF:BE:45:CC:EA:F1:A3:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBB69B72769C3067FDDDC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:7200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:b6:9b:72:76:9c:30:67:fd:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=fb892e00-32a7-4a1e-bbe6-e70704c0c222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:a6:b9:16:5f:17:fa:a8:62:5d:85:5d:93: 12:ec:b7:e4:01:a3:8b:9a:f2:5b:d2:7a:39:14:b9: 91:05:74:4b:b6:c6:81:33:a0:43:4b:83:d5:dd:09: 02:be:e9:9b:4a:52:93:f5:ee:e9:87:4a:94:cc:c0: 36:a1:6c:46:ed:c2:92:32:24:9c:06:b6:89:ba:7f: e9:3e:9c:70:cb:0f:9e:06:58:f6:92:89:44:ac:40: de:b2:90:16:2c:3e:31:d2:00:7b:26:3d:0a:3f:14: 3b:70:7c:34:0e:ca:e9:b0:62:8d:46:00:32:e6:42: 7a:c5:56:83:1c:6f:20:f1:83:fb:95:30:75:be:6f: bc:3b:3a:90:d3:d5:90:ad:9d:bf:ab:34:6e:76:0c: e0:5d:4e:2d:f0:a2:23:22:a1:24:e5:db:7f:a3:1b: be:22:41:37:8a:87:bb:ae:09:79:08:3a:af:6b:47: 33:6c:9d:05:2a:29:ee:b1:8e:f3:86:23:b8:7d:c3: e0:4d:c0:90:6d:a2:51:8b:6f:fa:e2:dc:2c:db:a4: b3:ab:f8:2c:eb:8f:d0:74:2a:9f:aa:ed:46:f6:41: c8:41:79:19:d3:fc:07:68:32:48:bb:ea:6a:ae:b8: 25:34:a2:85:9b:c8:a4:a2:f0:42:9c:2d:94:50:ea: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7A:96:96:4A:45:25:AC:1B:6E:EC:9D:BF:BE:45:CC:EA:F1:A3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:af:d7:12:16:8d:84:64:b8:f1:8c:d3:b0:51:17:2f:6d:f3: 62:ea:5b:26:12:6f:a3:d1:ac:eb:ba:5b:48:09:2d:28:72:30: 04:54:e6:3f:1e:d5:80:ac:30:f5:29:f0:be:3b:86:a4:63:f8: 04:11:31:67:be:f0:39:84:83:29:d0:b1:3d:06:34:58:4d:60: 00:91:7e:21:ff:98:84:98:31:b3:00:6d:9a:bd:fb:8a:1b:78: d1:a5:be:8e:17:c4:5f:1b:e6:78:5b:4e:56:a1:b9:9b:89:a6: b1:2a:b1:20:f5:33:d3:68:74:27:e6:e9:85:59:d1:8f:b8:ce: 97:f8:5c:04:6a:37:85:0e:45:a3:91:c6:55:7d:aa:fb:b8:a6: 35:0e:ec:8f:b5:97:ba:3e:f5:7f:a2:c4:78:bf:23:ab:d0:af: 98:c8:20:49:dd:74:91:6b:db:67:ad:68:e0:e5:41:20:8b:c0: 15:9e:e0:6e:4e:47:7a:55:43:c8:1e:7a:86:ed:28:af:c5:5e: d1:b4:0d:b0:9a:a5:02:dc:e6:22:41:ef:aa:cc:f3:1f:56:d8: 8b:f1:21:bc:8d:8f:b1:da:fe:95:45:2b:10:3c:16:bd:6f:59: 64:2b:c1:22:e4:d9:9f:73:55:e0:67:ba:61:a1:35:ed:51:11: ea:42:c5:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC27abcnacMGf93cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmI4OTJlMDAtMzJhNy00YTFlLWJiZTYtZTcwNzA0YzBjMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRWmuRZfF/qoYl2FXZMS7LfkAaOLmvJb0no5 FLmRBXRLtsaBM6BDS4PV3QkCvumbSlKT9e7ph0qUzMA2oWxG7cKSMiScBraJun/p Ppxwyw+eBlj2kolErEDespAWLD4x0gB7Jj0KPxQ7cHw0DsrpsGKNRgAy5kJ6xVaD HG8g8YP7lTB1vm+8OzqQ09WQrZ2/qzRudgzgXU4t8KIjIqEk5dt/oxu+IkE3ioe7 rgl5CDqva0czbJ0FKinusY7zhiO4fcPgTcCQbaJRi2/64tws26Szq/gs64/QdCqf qu1G9kHIQXkZ0/wHaDJIu+pqrrglNKKFm8ikovBCnC2UUOrU4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAh6lpZKRSWsG27snb++Rczq8aOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTcyMjBmNzktZWUyMy0z NjIxLTlkMzMtNWY4ZjgxMWI5MDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFWv1xIWjYRkuPGM07BRFy9t82LqWyYSb6PRrOu6W0gJLShyMARU 5j8e1YCsMPUp8L47hqRj+AQRMWe+8DmEgynQsT0GNFhNYACRfiH/mISYMbMAbZq9 +4obeNGlvo4XxF8b5nhbTlahuZuJprEqsSD1M9NodCfm6YVZ0Y+4zpf4XARqN4UO RaORxlV9qvu4pjUO7I+1l7o+9X+ixHi/I6vQr5jIIEnddJFr22etaODlQSCLwBWe 4G5OR3pVQ8geeobtKK/FXtG0DbCapQLc5iJB76rM8x9W2IvxIbyNj7Ha/pVFKxA8 Fr1vWWQrwSLk2Z9zVeBnumGhNe1REepCxVI= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:00 2026 by rpki-client