This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa
File: 2f381fa0-4871-3813-a6fd-d671bd526843.roa (raw, json)
Hash identifier: l5uKzFlvcJJjSJWXrp5npfc5J2HFtkW4qK0VzOjJdB8=
Subject key identifier: A8:03:75:A2:FA:B7:8E:D0:D7:81:61:52:4B:37:C9:68:6C:6A:FC:71
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BEDB5CEED45FDF6DD8534DE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 30036
IP address blocks: 2604:2d80:ec00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:ce:ed:45:fd:f6:dd:85:34:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=7a15a1b8-4fd0-4d21-8ab4-766aa041a3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:f6:25:2e:fc:80:c3:33:b5:29:1a:69:6c:
db:75:cf:78:23:9a:29:2e:dd:d9:2b:b6:81:e9:3f:
b7:62:4f:88:f2:53:80:33:fd:a9:76:46:33:ac:ba:
5f:12:69:87:90:6a:93:21:48:a0:c4:69:35:ce:99:
15:95:3f:e0:4f:d7:22:fb:f6:a3:e7:46:74:89:84:
8e:94:09:6b:58:99:96:c3:4a:dd:2d:67:ad:c6:9f:
d9:34:d5:c5:11:c0:48:dc:6f:d7:1a:db:46:5e:0b:
81:4c:41:64:87:40:bd:8e:71:d7:a3:6a:82:1a:8c:
65:08:b7:6d:93:25:41:98:b8:14:d3:bf:e6:77:4d:
1f:69:39:da:a2:85:8e:a1:a3:cc:33:93:b9:b8:e3:
3e:ce:e4:fe:53:5b:20:2b:59:01:89:27:79:01:97:
5d:33:c1:0c:df:29:99:07:6b:0a:63:52:5a:36:5e:
f6:7c:62:33:89:c8:b9:a1:cf:0b:29:82:c9:63:00:
26:b8:bf:3f:4e:76:5f:f1:c0:bb:fb:29:ee:92:c9:
5d:04:18:87:21:aa:59:56:b7:98:b3:44:f4:de:bf:
31:3d:b2:28:a3:d9:a7:60:d0:98:8f:be:24:ba:53:
a9:76:84:ff:74:96:4c:ae:21:7f:80:39:07:81:14:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:75:A2:FA:B7:8E:D0:D7:81:61:52:4B:37:C9:68:6C:6A:FC:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:ec00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ea:f2:98:d7:02:94:5e:47:d3:fc:96:b0:03:92:43:31:a9:
24:d6:5b:46:d9:76:44:df:91:e1:a4:93:cc:4f:d3:a0:e4:4e:
95:93:5d:c9:01:d4:46:05:d8:ff:72:e8:aa:90:58:bd:3a:33:
6d:cd:57:a7:fe:2b:68:34:b6:0f:0f:1a:1d:ab:83:6c:9a:a5:
6e:e3:c0:42:b1:db:e4:22:9c:e8:64:eb:00:9f:75:10:ac:69:
6a:67:3d:46:7c:1c:09:4c:0c:47:df:b5:14:26:de:cf:90:1f:
65:df:bd:ae:b7:8a:00:b5:7d:7e:ab:48:12:0b:cb:07:3f:ec:
e8:4b:77:4b:a1:fc:8f:0b:83:38:8d:ff:ed:a0:76:2d:8f:48:
31:91:ac:d9:3e:ff:6f:60:b2:b9:2d:52:30:9a:cd:b2:db:ba:
93:e8:6c:c7:0a:05:7c:c4:77:5c:41:c4:6f:43:d2:3d:9f:39:
0c:7b:b7:b7:ea:4a:bc:36:fd:5a:28:5c:22:71:12:fa:3f:d7:
44:a3:bf:31:6e:9e:62:09:9b:4f:e4:cd:f4:8c:a0:d5:05:23:
0c:37:76:d2:23:7a:ed:d0:0a:9b:80:d2:89:de:1b:0c:d4:e8:
6f:05:9a:4e:d3:7b:f2:59:ae:65:4f:f3:f9:79:4b:c0:18:a1:
42:b6:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:36:21 2025 by rpki-client