This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a44486-3eac-3372-a683-d53ded4f3b35.roa File: 35a44486-3eac-3372-a683-d53ded4f3b35.roa (raw, json) Hash identifier: hbni5V5toh4dyEV8sU2it0yaI9REFi1nImIC6yNtpOc= Subject key identifier: DA:AD:9D:6E:D7:93:39:37:42:56:F3:40:61:4D:E6:91:AB:95:0F:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BCF00700A20A8E63F5F609E30 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a44486-3eac-3372-a683-d53ded4f3b35.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d81:c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:70:0a:20:a8:e6:3f:5f:60:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=e510b66b-1301-4ad3-a0d7-208ad0f4164c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:b8:3f:08:20:d1:1d:3b:d0:00:21:e0:e6: de:24:65:cc:18:05:dd:ef:ec:78:0e:df:12:89:46: 33:aa:be:53:1d:b7:34:17:36:4e:24:07:9d:f8:c1: 39:d5:98:f7:c6:60:45:35:93:a6:1a:d4:eb:bf:ce: 9d:0b:97:b1:29:90:3e:e2:4d:b7:82:53:25:28:de: 3d:e9:41:f2:9f:53:fc:84:6e:35:14:38:10:73:fc: 1f:ee:47:26:e0:1d:70:12:21:72:1a:ac:bc:a4:a6: 75:79:dc:86:f3:88:c1:1b:b6:11:76:2b:cd:27:72: 0b:d5:8e:2e:dd:d1:71:46:6f:11:66:a6:a2:ee:db: b5:81:2c:6f:76:0e:0e:87:12:18:4b:a2:d4:03:5c: 68:e0:63:be:ec:97:17:24:79:d5:3f:cf:d8:60:2c: b1:24:30:e3:27:6c:61:62:7b:4f:70:72:41:c1:34: 01:36:34:5c:70:fd:25:20:44:46:b2:2e:30:96:f3: 2a:05:0b:ff:05:47:73:2a:b0:56:26:4d:54:08:8e: 92:a5:0c:ee:c1:f2:79:fd:ea:db:27:51:ed:b1:93: e8:98:af:17:1b:f7:9d:de:81:9e:a3:cd:55:63:97: 00:27:e1:4c:be:41:14:5a:2d:4a:9e:5e:db:c7:6b: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:9D:6E:D7:93:39:37:42:56:F3:40:61:4D:E6:91:AB:95:0F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a44486-3eac-3372-a683-d53ded4f3b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d8:30:59:69:94:2f:13:6a:90:6a:6e:3c:a5:22:ad:cb:4b: 1e:50:4a:a9:a1:e1:0d:97:36:55:f3:30:bb:62:96:ec:b1:ac: a4:4e:a1:c5:a3:b2:1a:02:d7:4c:2c:c5:ca:be:20:85:f8:b1: 7a:dd:c0:c1:46:79:c1:71:8e:17:34:d8:62:59:46:59:31:e3: 8c:6f:94:75:83:97:9e:ff:6b:20:00:b8:d2:59:4e:ec:99:92: 1a:f7:fe:a2:c3:65:98:ea:2a:1b:bb:ec:df:02:81:8d:a0:99: cf:71:89:3c:70:a1:6f:a8:2a:4d:d8:18:c2:f9:d4:8f:1d:8c: 47:47:26:d2:c9:00:e4:6d:f2:ba:12:cb:c2:70:f5:13:a4:ee: c6:8b:df:1b:5d:b3:ba:84:00:53:a6:2d:0f:b9:83:e3:bd:a5: 89:e0:83:94:53:d8:31:13:c2:76:c8:8d:b6:ec:3b:bd:ca:13: 33:00:91:6d:51:f5:ee:b1:db:c4:ab:5a:20:75:e2:df:59:ac: 27:42:79:d0:a2:92:7b:64:ad:6c:60:43:27:7d:58:d5:48:ff: 6b:01:ee:c9:f0:4b:bb:40:24:f9:13:4b:a4:06:d0:92:f7:19: 3b:34:9c:b6:4b:8e:1b:db:47:58:12:0b:4b:6b:ea:6c:21:88: c6:9c:a6:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvPAHAKIKjmP19gnjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZTUxMGI2NmItMTMwMS00YWQzLWEwZDctMjA4YWQwZjQxNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWO4Pwgg0R070AAh4ObeJGXMGAXd7+x4Dt8S iUYzqr5THbc0FzZOJAed+ME51Zj3xmBFNZOmGtTrv86dC5exKZA+4k23glMlKN49 6UHyn1P8hG41FDgQc/wf7kcm4B1wEiFyGqy8pKZ1edyG84jBG7YRdivNJ3IL1Y4u 3dFxRm8RZqai7tu1gSxvdg4OhxIYS6LUA1xo4GO+7JcXJHnVP8/YYCyxJDDjJ2xh YntPcHJBwTQBNjRccP0lIERGsi4wlvMqBQv/BUdzKrBWJk1UCI6SpQzuwfJ5/erb J1HtsZPomK8XG/ed3oGeo81VY5cAJ+FMvkEUWi1Knl7bx2syZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqtnW7Xkzk3QlbzQGFN5pGrlQ86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzVhNDQ0ODYtM2VhYy0z MzcyLWE2ODMtZDUzZGVkNGYzYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAErYMFlplC8TapBqbjylIq3LSx5QSqmh4Q2XNlXzMLtiluyxrKRO ocWjshoC10wsxcq+IIX4sXrdwMFGecFxjhc02GJZRlkx44xvlHWDl57/ayAAuNJZ TuyZkhr3/qLDZZjqKhu77N8CgY2gmc9xiTxwoW+oKk3YGML51I8djEdHJtLJAORt 8roSy8Jw9ROk7saL3xtds7qEAFOmLQ+5g+O9pYngg5RT2DETwnbIjbbsO73KEzMA kW1R9e6x28SrWiB14t9ZrCdCedCikntkrWxgQyd9WNVI/2sB7snwS7tAJPkTS6QG 0JL3GTs0nLZLjhvbR1gSC0tr6mwhiMacpuM= -----END CERTIFICATE-----Generated at Tue Nov 25 09:06:39 2025 by rpki-client