This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa File: 3089f031-91f3-3b37-81e2-09fe84597232.roa (raw, json) Hash identifier: NoM3wyjhadv6Mc6TvcGaM0LFsfLeZjIkFSErzMd4EPg= Subject key identifier: 1A:14:48:4D:95:3E:0C:5E:CC:F2:AE:FF:91:3D:FC:1F:DB:9C:C4:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871CCD39B179E025CD68540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:1600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:cc:d3:9b:17:9e:02:5c:d6:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=611cd77d-f879-482b-bf63-3c9c558981c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:18:b6:40:97:97:93:ca:76:12:41:09:5d: 41:68:a9:88:cb:e0:27:b5:c3:8a:7f:15:4a:eb:e6: ff:b7:0b:50:25:6b:d5:a6:fe:20:20:5e:84:6e:a8: b0:79:db:79:04:15:89:fa:d9:4e:d7:80:f9:ef:5f: 25:97:48:7e:76:65:5b:cc:23:88:30:17:0b:0d:ab: c7:fb:a8:ea:d0:d0:d4:22:23:4c:bd:fc:12:02:6a: 1d:84:09:0b:e5:9d:f1:1e:b1:a9:bd:f6:c7:5f:44: d1:fe:bc:94:e8:a1:04:f5:74:2d:24:64:75:82:a8: d3:64:f9:90:4d:48:5f:07:f9:bc:21:fe:5d:e5:10: 14:fa:dd:29:dc:97:9f:98:1e:d5:12:c3:3f:51:e0: 76:b5:02:53:f2:f9:50:de:cf:30:5b:60:32:1c:9c: 9f:e6:7a:6f:32:84:f4:b5:2d:b6:93:6d:1b:b8:8f: a2:e7:bb:a0:a3:32:1b:e9:55:c6:ff:ee:e2:49:6b: 08:87:49:2a:60:2d:f8:7b:5e:37:0e:d0:01:3c:84: 04:c1:34:fa:f6:1e:be:88:eb:71:87:0b:b3:28:71: 71:9f:42:bd:b8:99:f8:8a:f3:07:93:61:78:99:75: e3:17:2a:04:a9:cb:20:e1:4f:1d:aa:03:4b:29:50: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:14:48:4D:95:3E:0C:5E:CC:F2:AE:FF:91:3D:FC:1F:DB:9C:C4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b8:58:22:f4:f5:9a:34:89:4c:63:11:61:ad:13:95:a1:d6: 0c:fd:07:65:8a:d4:57:4e:18:6b:2c:9e:da:c2:a9:52:5a:a4: b5:e6:6d:cb:b3:4b:48:fd:a8:e6:6a:eb:c4:0f:de:b0:ef:d3: eb:ff:40:b4:5e:0e:47:42:b7:bb:a7:0f:f1:8d:fa:2b:55:39: 02:d4:b3:db:25:74:fb:78:e7:ed:1a:98:2a:09:01:c3:a1:45: 22:b8:eb:36:6d:26:46:b8:27:a1:70:8d:bb:88:44:7a:a0:4f: e5:e0:c5:3b:50:97:08:20:80:60:c3:28:9a:be:d5:3d:ab:4a: 33:b2:be:ca:53:45:6d:8e:0e:fa:da:24:6b:45:0f:d9:5c:e7: fc:a9:8f:fd:0a:db:6d:56:07:37:b9:33:46:8a:58:c5:0e:80: 9b:4e:9f:88:06:d3:2e:8b:96:ba:24:59:41:3e:32:8c:4d:50: 6c:95:c4:3f:4f:dd:85:4d:27:b4:9f:1a:b0:88:19:68:b3:4c: da:68:32:fe:50:e8:2a:d1:a5:8e:60:55:07:1d:78:e5:eb:fc: 18:e2:10:67:12:7c:fe:f7:9e:a6:ad:77:eb:54:fc:2e:cc:fb: 4c:6e:8d:1b:91:3f:60:7c:aa:4f:70:56:4c:16:b8:9f:bc:40: 49:f8:a3:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExIcczTmxeeAlzWhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NjExY2Q3N2QtZjg3OS00ODJiLWJmNjMtM2M5YzU1ODk4MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvcYtkCXl5PKdhJBCV1BaKmIy+AntcOKfxVK 6+b/twtQJWvVpv4gIF6Ebqiwedt5BBWJ+tlO14D5718ll0h+dmVbzCOIMBcLDavH +6jq0NDUIiNMvfwSAmodhAkL5Z3xHrGpvfbHX0TR/ryU6KEE9XQtJGR1gqjTZPmQ TUhfB/m8If5d5RAU+t0p3JefmB7VEsM/UeB2tQJT8vlQ3s8wW2AyHJyf5npvMoT0 tS22k20buI+i57ugozIb6VXG/+7iSWsIh0kqYC34e143DtABPIQEwTT69h6+iOtx hwuzKHFxn0K9uJn4ivMHk2F4mXXjFyoEqcsg4U8dqgNLKVCHmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoUSE2VPgxezPKu/5E9/B/bnMSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzA4OWYwMzEtOTFmMy0z YjM3LTgxZTItMDlmZTg0NTk3MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAq4WCL09Zo0iUxjEWGtE5Wh1gz9B2WK1FdOGGssntrCqVJapLXm bcuzS0j9qOZq68QP3rDv0+v/QLReDkdCt7unD/GN+itVOQLUs9sldPt45+0amCoJ AcOhRSK46zZtJka4J6FwjbuIRHqgT+XgxTtQlwgggGDDKJq+1T2rSjOyvspTRW2O DvraJGtFD9lc5/ypj/0K221WBze5M0aKWMUOgJtOn4gG0y6LlrokWUE+MoxNUGyV xD9P3YVNJ7SfGrCIGWizTNpoMv5Q6CrRpY5gVQcdeOXr/BjiEGcSfP73nqatd+tU /C7M+0xujRuRP2B8qk9wVkwWuJ+8QEn4o30= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:58 2026 by rpki-client