This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa
File: 4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa (raw, json)
Hash identifier: HwoUirRk+X7xN/mfW3jkio9HAChM9K+negAAB6Wk56A=
Subject key identifier: D5:02:87:0F:80:A5:0B:01:D4:A0:1A:49:33:36:DC:31:14:15:EB:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BE7C67E9CFE4C9D618D479A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa
Signing time: Tue 18 Nov 2025 22:59:22 +0000
ROA not before: Tue 18 Nov 2025 22:59:22 +0000
ROA not after: Mon 16 Feb 2026 22:59:22 +0000
asID: 30036
IP address blocks: 2604:2d81:3880::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e7:c6:7e:9c:fe:4c:9d:61:8d:47:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 18 22:59:22 2025 GMT
Not After : Feb 16 22:59:22 2026 GMT
Subject: CN=4012821a-39bb-45d6-bb8a-9252e6ad4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:44:5f:3a:92:04:87:a2:3e:a4:54:42:75:
3f:d4:75:66:85:9e:ce:f5:cf:13:b2:47:b2:2c:ed:
58:bd:2c:b2:70:ff:fe:8d:7b:24:fd:7e:57:2b:16:
b4:f9:75:63:1a:95:48:36:76:84:2b:79:c3:24:2f:
ab:09:86:bf:cf:b5:b5:5e:58:a9:6f:75:c7:a4:50:
ae:cf:c7:6d:c4:f5:98:e7:76:f3:1a:16:f3:9e:3b:
c7:69:bd:35:11:e6:1a:a9:44:64:ea:75:1d:30:7d:
d2:93:b9:72:eb:6d:7a:1f:05:92:e7:f4:ce:7b:f1:
51:01:f6:07:15:2c:8e:90:b7:d8:f3:50:1f:9c:5d:
84:88:c3:e7:87:61:45:45:e1:cc:61:8d:a7:d6:ff:
7f:dc:8e:7c:2d:51:4e:85:4e:9d:b2:2b:0e:44:a5:
26:1f:28:de:ba:48:73:b6:0b:68:85:f9:05:ec:c8:
aa:5d:92:26:d2:03:c8:ff:5b:16:6b:77:1a:95:c3:
b8:a0:8e:0c:a6:16:a2:76:bf:e0:e7:7a:fe:8c:ce:
8d:96:1e:80:41:c8:94:06:a1:ea:d3:5c:5a:28:70:
66:b8:60:11:dd:e2:da:cd:c1:97:01:d1:f5:a4:98:
6e:1b:d2:21:30:46:7b:ec:f8:02:1e:6d:de:ed:00:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:87:0F:80:A5:0B:01:D4:A0:1A:49:33:36:DC:31:14:15:EB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:3880::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:61:5b:b2:12:e6:11:1c:12:73:48:1e:b9:08:93:82:60:4c:
33:5b:75:03:b9:ad:8f:6e:69:b4:5f:97:ea:cf:df:ea:a6:15:
4c:7b:49:6b:4d:ee:0b:47:e8:7f:ec:c1:a1:aa:f5:3f:59:9f:
b9:f9:4b:7c:9c:06:a5:2a:81:57:f1:de:17:b2:03:e6:b1:a7:
93:54:24:79:71:27:f8:6b:d5:05:ee:47:3c:93:9c:5d:d7:4c:
5e:e1:4f:18:10:e8:79:cd:28:52:6a:5e:55:4a:02:ec:a2:1d:
49:7f:7c:d4:fd:e5:c9:25:94:bc:64:35:8b:b0:e7:c6:91:17:
13:ab:58:ca:71:28:75:1d:72:a0:48:0b:f4:fe:3a:a7:4f:13:
94:bd:f2:35:a2:d2:f7:d8:de:a7:ec:03:08:77:54:0b:1d:e2:
7c:14:fd:5e:33:56:4b:3e:bd:9d:08:fe:61:f4:2d:02:d7:12:
18:8e:c6:1a:f3:f4:dc:d8:ab:53:18:d8:0a:e5:c6:be:8e:cf:
4f:a7:cb:5f:ce:42:85:b4:ce:78:61:d7:1d:47:20:79:a8:bf:
58:3e:27:c6:c9:cc:26:bc:62:00:2d:89:eb:0a:2c:f3:2e:ef:
d5:6e:84:a0:bd:cd:bd:c5:cd:e9:ae:33:1a:60:39:f1:ee:61:
ea:de:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:04:07 2025 by rpki-client