This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa
File: 3600c549-d9b7-3cd0-9d86-882b65257a73.roa (raw, json)
Hash identifier: cDYl+BXq9YzFurTGp+Ffso6QLTE6UNypD80VYVFjzs8=
Subject key identifier: 91:AF:8A:19:4A:3B:95:3C:5D:74:4B:9D:13:A9:C3:7D:9D:E2:95:7F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C470BC28AD5DAF7AE0C065E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 30036
IP address blocks: 2604:2d80:f000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:c2:8a:d5:da:f7:ae:0c:06:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=05efbaea-4b6e-49a2-9f9b-59c622733e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:15:50:94:53:7c:55:dc:c5:f5:cd:45:ff:
eb:70:4b:2c:6d:50:19:40:79:f0:63:b5:96:d2:05:
58:e7:7d:e6:14:88:2a:1c:3c:b7:83:39:d8:94:52:
33:ea:0c:4c:6d:cd:01:c6:a0:25:dc:35:60:b4:25:
74:a5:29:25:88:89:f1:25:18:2f:c0:f1:06:bb:05:
aa:6c:11:75:b1:0f:c6:ef:e4:32:40:85:a4:a3:c7:
07:0a:63:6c:e8:af:de:c0:44:4f:3f:8e:8e:f2:54:
88:cf:d3:ed:73:b9:dc:17:a9:3d:03:af:45:c0:c0:
4e:d0:b5:c9:56:56:46:1e:75:de:f0:4a:68:bd:15:
45:16:e8:77:60:21:65:9f:1b:ac:9c:4a:e8:73:90:
61:aa:f6:56:c6:7f:d2:33:97:02:ad:c8:61:65:98:
13:b5:b8:48:b5:75:97:3f:16:af:ee:a8:1c:90:95:
cc:e5:2a:60:ca:ed:81:58:28:32:94:6a:07:c8:1a:
61:13:92:61:37:63:ae:47:9d:6a:81:d7:2e:29:45:
b7:50:2b:82:ae:eb:f4:77:e3:25:32:e2:5b:fe:22:
6e:ac:18:c8:13:45:ce:7f:9a:ae:49:05:fe:96:f4:
00:34:66:df:ab:c8:2f:ad:ad:9f:08:5e:aa:6f:be:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:8A:19:4A:3B:95:3C:5D:74:4B:9D:13:A9:C3:7D:9D:E2:95:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:f000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:49:d7:c7:b6:2a:08:d0:fb:64:b1:01:0b:5c:8b:53:ca:ad:
4c:b4:f3:8a:97:88:8e:86:4e:8e:63:ef:d4:74:bf:e5:5f:62:
e2:1a:57:fd:00:28:51:11:02:5c:8c:38:73:f5:c8:d0:66:04:
f4:0d:a9:bf:8c:b6:0a:c8:90:8f:2f:09:5c:2a:a5:e3:9d:38:
81:19:60:37:bf:c5:b2:0e:c0:c3:0b:45:3b:44:8f:28:d1:9c:
4b:b4:2f:10:4a:09:0e:f4:3d:8c:c9:60:61:ad:db:67:e0:5b:
09:a1:7e:b8:c0:ed:d4:c6:d5:bd:86:df:e0:f4:0e:a6:be:0c:
13:32:f9:a9:45:b7:e0:3b:76:24:74:78:46:a0:de:d9:46:c5:
02:2b:1f:7d:12:97:12:e9:58:56:a9:79:c4:0d:d7:34:6e:38:
7f:59:17:b5:f2:ca:73:9a:4f:51:69:b2:58:67:09:7c:ac:ee:
2d:ed:2f:ab:de:7c:e3:18:5d:cd:93:9f:8d:31:2d:b2:39:b6:
4c:8a:10:bb:b4:77:ec:fa:c3:55:9a:2d:6e:af:06:3e:36:96:
5a:b9:69:ac:b8:ca:72:4b:1b:e6:42:4c:fd:24:fd:96:8e:78:
ab:47:85:8f:1c:c8:16:4b:be:e1:40:5f:62:63:4b:b9:e7:f6:
f5:88:a2:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC8KK1dr3rgwGXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk
MDVlZmJhZWEtNGI2ZS00OWEyLTlmOWItNTljNjIyNzMzZTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXsVUJRTfFXcxfXNRf/rcEssbVAZQHnwY7WW
0gVY533mFIgqHDy3gznYlFIz6gxMbc0BxqAl3DVgtCV0pSkliInxJRgvwPEGuwWq
bBF1sQ/G7+QyQIWko8cHCmNs6K/ewERPP46O8lSIz9Ptc7ncF6k9A69FwMBO0LXJ
VlZGHnXe8EpovRVFFuh3YCFlnxusnEroc5BhqvZWxn/SM5cCrchhZZgTtbhItXWX
Pxav7qgckJXM5Spgyu2BWCgylGoHyBphE5JhN2OuR51qgdcuKUW3UCuCruv0d+Ml
MuJb/iJurBjIE0XOf5quSQX+lvQANGbfq8gvra2fCF6qb76ngwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJGvihlKO5U8XXRLnROpw32d4pV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzYwMGM1NDktZDliNy0z
Y2QwLTlkODYtODgyYjY1MjU3YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD5J18e2KgjQ+2SxAQtci1PKrUy084qXiI6GTo5j79R0v+VfYuIa
V/0AKFERAlyMOHP1yNBmBPQNqb+MtgrIkI8vCVwqpeOdOIEZYDe/xbIOwMMLRTtE
jyjRnEu0LxBKCQ70PYzJYGGt22fgWwmhfrjA7dTG1b2G3+D0Dqa+DBMy+alFt+A7
diR0eEag3tlGxQIrH30SlxLpWFapecQN1zRuOH9ZF7XyynOaT1FpslhnCXys7i3t
L6vefOMYXc2Tn40xLbI5tkyKELu0d+z6w1WaLW6vBj42llq5aay4ynJLG+ZCTP0k
/ZaOeKtHhY8cyBZLvuFAX2JjS7nn9vWIogk=
-----END CERTIFICATE-----
Generated at Sun Jan 11 09:46:09 2026 by rpki-client