This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa File: 3525b946-e088-30a0-80a8-0242eeac1d5e.roa (raw, json) Hash identifier: 3WE6mhwKeCiQ0/y8Afm6tz5ls7aHkqOZ0jrx0kgehrA= Subject key identifier: E6:7C:FB:03:65:0E:BA:9A:DA:65:D7:61:6E:19:BB:54:42:C2:89:A6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF08084810B2AEE8EB402C0D8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2d81:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:84:81:0b:2a:ee:8e:b4:02:c0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=bfc1ae90-fc35-45df-b5bd-406eac5d0976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:7e:01:0c:8c:7f:3b:62:7d:ef:8d:5d:3c: f1:ba:21:9e:79:7b:d2:f4:81:67:a2:1b:af:17:2c: 68:e0:07:ad:21:32:46:69:44:82:8f:e3:6c:d5:51: cf:cc:90:34:4c:9d:3f:09:f9:a1:9c:8a:6e:2a:bc: 25:6d:74:0d:42:cd:9f:4b:2c:ae:0a:24:95:8d:78: f6:0b:21:a3:12:07:cc:1c:6c:39:40:aa:09:d5:b3: 92:e1:7e:61:bd:85:0a:23:4f:67:a2:91:05:3d:5e: f1:fa:0e:35:ff:dd:d5:f7:51:93:fb:23:cc:e9:4a: f2:cb:ff:46:ee:23:34:42:fa:b6:65:3f:e6:50:3c: a4:29:30:e5:e1:f8:c6:03:29:3f:53:f5:49:b6:1e: da:bb:f5:60:c4:e1:be:6f:29:92:71:e2:18:45:43: 00:08:7b:fe:36:23:bc:47:9a:17:85:e3:da:05:ca: b4:9c:45:67:1f:3f:5b:f9:56:37:8c:f2:db:6e:fe: 65:0e:91:25:e6:93:af:8e:4a:3e:33:b0:99:f1:b2: 94:eb:6a:a2:5c:97:1c:c5:45:11:d7:36:2f:ad:1c: f8:f6:b2:cf:26:f6:8b:fe:4d:c9:cb:2d:a9:cc:4e: 5c:e8:19:14:3e:ec:60:61:3c:b1:3a:02:54:99:54: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:FB:03:65:0E:BA:9A:DA:65:D7:61:6E:19:BB:54:42:C2:89:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:69:ac:5c:61:e2:6a:82:ee:74:44:b8:41:cc:16:da:b0:7c: 78:42:3d:f6:c8:e4:30:35:87:10:ba:04:8c:f6:ff:15:be:c6: 9b:e6:0f:61:74:12:b5:a4:9b:66:1e:bb:bb:88:79:70:45:41: 2e:e9:c0:9b:5e:04:5a:27:d0:2e:f6:8e:28:c0:3e:1d:8e:d8: fd:7e:1c:a4:04:93:25:66:d3:c3:e0:c7:8d:e4:18:b1:df:08: 11:93:78:0a:3a:c5:06:24:17:46:f5:aa:39:e0:b8:6b:b0:9e: f4:16:13:55:92:a5:4b:d0:8e:b8:b2:22:29:f0:86:53:24:a4: 6c:32:69:8b:b4:f5:26:8f:fc:01:cb:e1:66:0f:06:10:60:10: f7:5a:b6:02:8d:b3:4b:ed:a9:2c:35:f3:9f:56:4e:f4:7e:b4: a4:4c:67:ca:86:23:6c:f4:bb:60:a4:05:0f:65:ed:ff:9e:4a: 37:05:ec:e7:00:2f:21:76:a3:69:e1:79:44:ff:b2:8c:f9:43: ca:cd:0c:81:a5:dc:75:83:f9:b3:67:55:4d:09:ea:96:f9:64: ad:78:9d:ee:b6:9d:5b:ef:07:03:1f:1c:a0:a1:8e:20:23:aa: 9e:16:b0:7e:c0:02:69:e4:c4:01:e0:52:0b:18:82:43:78:30: 28:63:88:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvwgISBCyrujrQCwNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk YmZjMWFlOTAtZmMzNS00NWRmLWI1YmQtNDA2ZWFjNWQwOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1+AQyMfztife+NXTzxuiGeeXvS9IFnohuv Fyxo4AetITJGaUSCj+Ns1VHPzJA0TJ0/CfmhnIpuKrwlbXQNQs2fSyyuCiSVjXj2 CyGjEgfMHGw5QKoJ1bOS4X5hvYUKI09nopEFPV7x+g41/93V91GT+yPM6Uryy/9G 7iM0Qvq2ZT/mUDykKTDl4fjGAyk/U/VJth7au/VgxOG+bymSceIYRUMACHv+NiO8 R5oXhePaBcq0nEVnHz9b+VY3jPLbbv5lDpEl5pOvjko+M7CZ8bKU62qiXJccxUUR 1zYvrRz49rLPJvaL/k3Jyy2pzE5c6BkUPuxgYTyxOgJUmVRLowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZ8+wNlDrqa2mXXYW4Zu1RCwommMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzUyNWI5NDYtZTA4OC0z MGEwLTgwYTgtMDI0MmVlYWMxZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZprFxh4mqC7nREuEHMFtqwfHhCPfbI5DA1hxC6BIz2/xW+xpvm D2F0ErWkm2Yeu7uIeXBFQS7pwJteBFon0C72jijAPh2O2P1+HKQEkyVm08Pgx43k GLHfCBGTeAo6xQYkF0b1qjnguGuwnvQWE1WSpUvQjriyIinwhlMkpGwyaYu09SaP /AHL4WYPBhBgEPdatgKNs0vtqSw1859WTvR+tKRMZ8qGI2z0u2CkBQ9l7f+eSjcF 7OcALyF2o2nheUT/soz5Q8rNDIGl3HWD+bNnVU0J6pb5ZK14ne62nVvvBwMfHKCh jiAjqp4WsH7AAmnkxAHgUgsYgkN4MChjiHo= -----END CERTIFICATE-----Generated at Tue Nov 25 12:27:38 2025 by rpki-client