This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa
File: 38c9ab8d-13df-3019-8027-678471d5c6e9.roa (raw, json)
Hash identifier: xbnfpA5NOZ8+S5Hx/vK3GhR1yu/zymoM30NGh9bz/MQ=
Subject key identifier: F6:C4:E8:BF:CE:BE:A5:19:BD:B0:4B:05:46:20:77:D0:B4:E6:8D:91
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BE28B11E2F4B25B5DFE05B200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa
Signing time: Mon 17 Nov 2025 02:00:31 +0000
ROA not before: Mon 17 Nov 2025 02:00:31 +0000
ROA not after: Sun 15 Feb 2026 02:00:31 +0000
asID: 19905
IP address blocks: 2604:2d81:2b00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e2:8b:11:e2:f4:b2:5b:5d:fe:05:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 17 02:00:31 2025 GMT
Not After : Feb 15 02:00:31 2026 GMT
Subject: CN=22299fa7-1a15-4dd9-abb5-9ca00878c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:8d:e6:f5:03:9b:85:2a:2c:ba:9a:ca:d2:
eb:2e:19:45:68:33:8b:ed:fd:ec:4e:13:72:1f:0e:
4b:f6:b8:0a:2d:60:31:da:34:31:51:c1:d3:3a:45:
17:8a:d5:34:80:b7:33:80:23:e0:01:a3:ae:66:23:
09:31:aa:c2:0d:f8:a7:e4:4e:1b:71:5a:bc:43:80:
37:27:20:54:f3:a3:8a:94:4e:30:57:9b:f0:e1:8f:
3c:4e:b0:e5:2e:07:46:2a:11:5e:53:d7:27:ad:d9:
e6:e4:a3:30:fe:6e:c7:3c:48:a5:93:58:d6:d6:84:
2e:6d:18:13:2e:25:7e:ce:10:1a:91:fb:91:77:4d:
88:31:9d:ea:31:ef:56:d9:e6:1a:85:11:c1:59:9f:
72:56:dc:db:88:ea:10:25:65:12:0e:0e:d0:08:b8:
3c:f4:9c:f6:2e:b8:eb:46:fc:77:ad:01:da:b6:9f:
74:f7:bd:0c:da:e8:07:9b:e4:40:52:02:2e:38:3c:
c1:e6:42:5e:68:13:b9:92:77:cb:f9:17:cb:06:f4:
85:92:f3:ad:80:d0:86:cf:56:1f:0e:c7:92:59:4b:
20:5e:1c:44:72:14:93:dd:11:0e:37:58:04:39:f7:
69:0c:78:ce:64:9b:8f:c0:b6:51:f6:9c:15:69:fb:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:E8:BF:CE:BE:A5:19:BD:B0:4B:05:46:20:77:D0:B4:E6:8D:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:2b00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:85:b8:85:1b:11:97:d6:2f:56:17:0d:51:1d:39:75:ca:93:
3c:cf:8c:ff:68:f6:c0:dd:01:97:1b:2d:38:e8:ce:12:1e:70:
71:fb:6b:53:24:eb:ae:e7:3a:42:de:c5:ad:34:2b:6f:59:be:
df:f5:3a:39:fb:c6:06:61:fd:c6:4c:9f:d5:cf:1a:e1:99:43:
8b:0a:7b:be:ce:21:73:05:73:32:ad:2f:6a:e1:77:7a:96:57:
66:ac:0b:db:c2:d9:7b:04:ca:86:fc:19:07:25:0b:c7:29:6e:
0e:25:11:24:29:2a:2d:c6:1d:00:6d:cd:40:ef:6f:9d:f9:e2:
37:16:9f:79:28:f9:9d:db:9c:31:87:82:b1:04:54:53:37:b1:
32:50:6c:87:bb:54:a5:0d:36:4a:77:cb:f5:d2:84:d6:cc:e4:
c3:22:d5:b5:05:c6:11:9b:28:8f:b3:d6:ca:59:5d:9b:8a:05:
0b:72:b1:ac:b3:a1:4b:1d:14:ea:7c:00:fb:a1:f7:ab:f3:e4:
ff:17:00:c0:51:76:80:5c:5a:0b:d1:4c:fc:84:73:14:25:2d:
60:ef:45:ea:7f:de:2b:fb:6f:28:b6:9a:b1:78:8e:c6:cf:8f:
22:bf:0c:59:be:ef:cf:9a:12:59:ac:a6:05:09:ef:08:48:f4:
f2:2c:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:33:28 2025 by rpki-client