This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa File: 20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa (raw, json) Hash identifier: s5UdR9nSlS4J13x/t5O7rzb0VIUGmQ/65FIr+Odq1fY= Subject key identifier: 5A:70:94:02:8E:F1:D5:18:FE:74:1D:8A:65:A7:1D:21:60:DA:66:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4B3BCD2BAFEE99AC4597CF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d81:1980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:cd:2b:af:ee:99:ac:45:97:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=7f6c07fa-ecee-434e-9f44-68f0ea9f92a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:83:c1:71:5c:6c:87:28:14:c9:cf:23:59: 4f:2a:6f:8a:12:c4:85:ae:2b:a9:88:84:8d:aa:8d: 68:bd:4b:bc:76:2c:07:c6:31:f1:15:80:2c:b7:e1: 89:2e:1d:8d:c9:4d:10:6e:18:9a:ce:51:fc:d5:46: 6c:8b:69:b2:50:ba:c3:66:a2:01:cd:5c:25:83:2e: d4:9b:02:30:1c:bf:59:0f:e4:d8:ed:17:5e:75:35: d0:02:59:25:8f:38:70:c7:4c:d1:92:f5:60:25:ef: 00:42:b3:1a:b3:b6:dc:c8:08:17:8a:fa:b5:d2:6d: 30:3e:c7:a5:25:06:1b:aa:ec:51:fc:c6:3d:80:9d: 8e:6b:9b:6e:be:84:6c:91:3e:ec:00:ad:88:e3:6c: 86:7a:09:3d:97:52:37:ab:b2:6e:a8:91:6d:97:6c: f0:56:b1:4b:b6:8e:7a:85:4b:b5:26:a6:66:ad:73: 2d:d6:0b:aa:0f:46:5a:6e:71:79:34:59:8f:d9:fe: d5:08:92:37:de:65:aa:67:28:1d:c7:9e:09:04:54: cd:3a:9c:24:e2:33:ef:cf:ec:09:1f:1b:e0:75:34: 57:c1:4a:02:28:c1:08:4c:0d:8d:75:fa:39:1c:6c: ec:92:10:3a:e5:79:aa:47:1c:39:53:f7:cf:8f:21: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:94:02:8E:F1:D5:18:FE:74:1D:8A:65:A7:1D:21:60:DA:66:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e6:a7:ba:b4:e4:83:3e:9f:14:70:22:06:da:05:f0:1b:45: fa:cf:96:55:7a:0d:ac:5b:a0:07:b9:8b:4b:bf:88:48:8a:b0: 8b:88:41:b8:c1:59:c5:9c:51:d9:12:c7:86:a7:4f:ca:e5:89: 97:92:7e:60:c7:6c:8d:d8:52:7b:47:da:48:e2:05:d3:4f:66: d6:d3:48:1c:d4:bd:a4:99:23:b2:09:b6:80:39:56:a8:f9:df: 8b:91:c8:3f:1a:5e:12:b6:a0:96:84:dc:63:a0:be:ca:6b:0a: 5b:12:31:48:57:02:18:43:72:c7:5d:d9:95:2d:64:61:03:c0: c5:7c:5e:49:13:cf:8e:9a:bb:6b:11:34:a1:20:14:84:9f:76: 76:a6:e6:75:58:de:0c:39:4c:83:0a:73:f5:1d:b5:5a:5e:7c: 68:f2:cd:cf:b5:85:0a:bc:23:4e:0b:55:12:bb:15:86:6d:a1: 25:64:f2:72:16:67:5a:66:0f:ae:d4:71:70:21:3f:33:df:87: 98:b0:bf:52:90:e5:31:68:71:ee:5a:52:f0:42:87:db:cd:b5: 7c:b3:da:2b:9a:1f:16:70:4c:c0:6c:a0:77:5a:d4:71:8d:53: 60:a2:27:5e:5d:27:17:fc:22:9d:c3:a0:fc:a9:70:28:cc:ac: 63:65:34:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExLO80rr+6ZrEWXz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk N2Y2YzA3ZmEtZWNlZS00MzRlLTlmNDQtNjhmMGVhOWY5MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxuDwXFcbIcoFMnPI1lPKm+KEsSFriupiISN qo1ovUu8diwHxjHxFYAst+GJLh2NyU0QbhiazlH81UZsi2myULrDZqIBzVwlgy7U mwIwHL9ZD+TY7RdedTXQAlkljzhwx0zRkvVgJe8AQrMas7bcyAgXivq10m0wPsel JQYbquxR/MY9gJ2Oa5tuvoRskT7sAK2I42yGegk9l1I3q7JuqJFtl2zwVrFLto56 hUu1JqZmrXMt1guqD0ZabnF5NFmP2f7VCJI33mWqZygdx54JBFTNOpwk4jPvz+wJ HxvgdTRXwUoCKMEITA2Ndfo5HGzskhA65XmqRxw5U/fPjyE59wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpwlAKO8dUY/nQdimWnHSFg2mbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBhNDA1MjUtMjdjYS0z NGI3LTlhMzctZTA1YjBjZDdmNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbmp7q05IM+nxRwIgbaBfAbRfrPllV6DaxboAe5i0u/iEiKsIuI QbjBWcWcUdkSx4anT8rliZeSfmDHbI3YUntH2kjiBdNPZtbTSBzUvaSZI7IJtoA5 Vqj534uRyD8aXhK2oJaE3GOgvsprClsSMUhXAhhDcsdd2ZUtZGEDwMV8XkkTz46a u2sRNKEgFISfdnam5nVY3gw5TIMKc/UdtVpefGjyzc+1hQq8I04LVRK7FYZtoSVk 8nIWZ1pmD67UcXAhPzPfh5iwv1KQ5TFoce5aUvBCh9vNtXyz2iuaHxZwTMBsoHda 1HGNU2CiJ15dJxf8Ip3DoPypcCjMrGNlNB0= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:12 2026 by rpki-client