This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa File: 3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa (raw, json) Hash identifier: SDTLAUr9uVn1KJ+aNA+NBfyCSOP1F8w9TI2bqggdcLE= Subject key identifier: F9:2C:1B:68:C5:A1:A9:46:80:CA:09:4E:3B:43:28:F7:4C:AC:B2:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871D45FAC966FAA28FD7000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:a500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d4:5f:ac:96:6f:aa:28:fd:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=07b75e82-786c-4789-b9eb-b2b521d3c9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:db:e5:86:dd:c2:9b:76:ea:d1:3b:92:7d: 83:69:18:a8:14:03:7b:24:21:1b:d1:8f:27:d2:52: 26:38:0c:20:5f:1f:ce:a8:8f:65:34:65:92:36:49: f7:1f:f8:f8:01:8c:7c:a1:22:85:e6:18:a8:5d:67: 2f:44:a4:74:3e:bf:2e:18:14:57:b0:17:d3:6e:6d: a1:3a:21:a7:83:dc:67:7c:3b:cb:09:81:e9:6f:8b: ed:8a:cc:79:be:e3:8f:f4:d5:e6:19:01:24:f4:5a: c9:c0:1d:f6:4b:36:e3:6e:de:35:2e:8f:64:ba:14: 83:4a:8a:d2:1a:8c:bd:6e:0d:36:8d:8d:f6:de:c5: 01:dd:2e:c8:05:4b:31:5f:80:1c:56:5d:cb:cf:ac: 7b:a6:76:c9:2d:62:59:b7:67:48:24:35:ec:cc:ea: 97:5d:52:6d:c6:12:a3:b9:9c:37:55:1b:de:90:70: 1f:76:58:8b:a6:dc:dc:44:e5:b3:ac:98:9d:20:d9: aa:34:1d:44:51:00:4d:b7:7d:5d:a5:8a:69:85:15: c8:9f:da:e3:38:5a:50:52:78:f4:98:d9:8a:ba:90: de:d1:2b:0c:5e:fa:1b:a4:7f:cf:a8:0d:cf:92:8a: 89:de:23:d9:9f:36:32:84:17:42:77:ac:7e:c1:f0: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:1B:68:C5:A1:A9:46:80:CA:09:4E:3B:43:28:F7:4C:AC:B2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:29:d9:d4:9a:b8:e7:aa:d8:32:0d:9d:92:59:66:8b:5c:c3: f2:29:3e:36:a9:80:61:0f:44:84:b0:f4:76:50:e9:2b:6a:d1: 75:db:3a:e4:d4:42:a1:d0:aa:e6:62:80:de:86:90:46:20:fc: 53:15:86:3a:51:06:22:ec:79:f3:2f:19:13:59:d7:4a:2c:47: 9e:c2:61:b5:f7:c9:7d:1b:20:68:aa:e7:a0:03:ff:48:1d:91: c4:06:f9:4f:56:ee:6e:79:67:cf:f6:b9:66:99:46:c5:92:66: 42:da:86:3e:7e:54:78:5c:ba:7f:75:64:57:90:1c:5d:dd:91: 3e:74:7e:7d:1b:c7:3c:bf:a3:0e:d2:0f:41:aa:3a:d9:db:32: 18:52:68:b3:bb:f1:bc:f2:0f:4d:9e:54:8a:93:ac:ae:a8:d8: 79:06:8a:bf:4b:b8:d6:dd:b8:5b:db:02:ab:2b:b3:b0:49:f1: c4:4b:3c:7e:b9:8f:ac:d9:c0:ee:35:35:e1:00:35:42:93:83: 60:6d:b0:af:a8:eb:3c:1e:15:7f:23:e9:cb:7d:a4:96:fa:7b: 21:b7:74:f7:93:2f:32:49:dc:ef:07:25:48:61:11:89:94:9a: 53:82:ee:bb:8e:ae:bb:b0:b6:bc:a8:5e:47:65:2f:97:68:f6: e9:35:55:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExIcdRfrJZvqij9cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MDdiNzVlODItNzg2Yy00Nzg5LWI5ZWItYjJiNTIxZDNjOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5knb5Ybdwpt26tE7kn2DaRioFAN7JCEb0Y8n 0lImOAwgXx/OqI9lNGWSNkn3H/j4AYx8oSKF5hioXWcvRKR0Pr8uGBRXsBfTbm2h OiGng9xnfDvLCYHpb4vtisx5vuOP9NXmGQEk9FrJwB32Szbjbt41Lo9kuhSDSorS Goy9bg02jY323sUB3S7IBUsxX4AcVl3Lz6x7pnbJLWJZt2dIJDXszOqXXVJtxhKj uZw3VRvekHAfdliLptzcROWzrJidINmqNB1EUQBNt31dpYpphRXIn9rjOFpQUnj0 mNmKupDe0SsMXvobpH/PqA3PkoqJ3iPZnzYyhBdCd6x+wfA3CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPksG2jFoalGgMoJTjtDKPdMrLIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZkOGE3MGMtMGU4Mi0z NTE2LWIwOGQtYTlmYzVlNTUzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAop2dSauOeq2DINnZJZZotcw/IpPjapgGEPRISw9HZQ6Stq0XXb OuTUQqHQquZigN6GkEYg/FMVhjpRBiLsefMvGRNZ10osR57CYbX3yX0bIGiq56AD /0gdkcQG+U9W7m55Z8/2uWaZRsWSZkLahj5+VHhcun91ZFeQHF3dkT50fn0bxzy/ ow7SD0GqOtnbMhhSaLO78bzyD02eVIqTrK6o2HkGir9LuNbduFvbAqsrs7BJ8cRL PH65j6zZwO41NeEANUKTg2BtsK+o6zweFX8j6ct9pJb6eyG3dPeTLzJJ3O8HJUhh EYmUmlOC7ruOrruwtryoXkdlL5do9uk1VdM= -----END CERTIFICATE-----Generated at Sun Jan 11 16:58:47 2026 by rpki-client