This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa
File: 4af779d3-3ad5-368f-ae8a-873a3a528992.roa (raw, json)
Hash identifier: qohyuYDuPwESHlXncL2tYiZIDupdl7SN1c6C4oKIVAI=
Subject key identifier: B3:39:30:94:8D:DF:5E:9E:38:C7:CD:3B:26:69:EB:24:AF:AB:D3:CF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A6A5020467401AAE3D5C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2d80:a680::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:a5:02:04:67:40:1a:ae:3d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=9b7d15ae-aa84-4a24-aa34-2d0dc4f2e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:f6:1c:b0:4b:f1:6a:e1:32:fb:d4:8f:e2:
66:b5:d6:3b:29:98:47:9a:0f:c7:22:c3:1c:c4:16:
c0:2a:a8:e6:08:0f:9a:be:39:e3:6b:a2:81:24:d8:
15:52:d1:46:7d:d6:76:65:35:ae:33:90:b3:15:8a:
f2:71:51:ff:6a:d6:3c:81:7b:41:c2:3b:7f:5b:c8:
c2:83:cf:b9:71:61:e1:1a:6f:f1:b4:fe:59:9d:58:
49:bd:c5:97:b8:39:6a:3f:10:e6:28:21:a4:ca:57:
02:ed:2b:df:c5:78:3e:3a:d0:e2:ec:85:f6:ee:3b:
29:35:29:fc:af:d6:3b:cd:93:47:f7:42:90:16:d5:
9f:98:37:22:04:ca:6d:01:bb:c7:27:41:df:2e:ac:
ca:75:08:0b:80:fc:77:d7:ba:49:2e:ad:b4:49:ef:
04:ac:c3:fd:bf:9a:79:26:89:b8:2c:ad:22:cf:c3:
b1:54:5c:72:86:8f:34:cd:8a:43:7a:91:af:b0:ba:
1c:90:ee:e7:8a:12:98:f3:f2:a1:8a:78:9e:0f:e4:
d8:b8:bc:53:73:77:8c:cb:0a:fd:b6:f7:72:6d:d1:
a8:9d:1a:21:84:5e:f5:15:ff:08:31:0e:b8:c1:b3:
d6:bc:1d:9e:92:ce:f4:cb:0e:2d:6f:d7:e7:5f:42:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:30:94:8D:DF:5E:9E:38:C7:CD:3B:26:69:EB:24:AF:AB:D3:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a680::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:88:c7:fb:a1:48:b5:b4:18:40:df:74:1d:ce:54:0e:68:91:
9c:7f:5c:bd:92:2e:53:cb:1a:07:62:2b:d8:dc:55:9f:c1:9b:
32:4d:85:79:dc:73:cc:60:e8:c4:98:e4:1f:d6:e9:35:95:6d:
e1:ff:1e:92:60:eb:30:d4:9d:41:61:b4:4e:bf:66:22:a1:d3:
10:cc:af:f1:87:07:97:a0:4b:19:ad:89:e7:69:01:72:22:18:
4c:dd:a3:68:b9:90:fb:5c:0e:33:ef:57:ca:7f:ef:2a:70:e4:
8a:61:3e:27:b1:60:0a:23:66:4f:06:b8:01:03:8b:0b:25:2a:
7c:05:b5:2a:1c:07:0e:be:e1:fd:ec:85:99:b1:3a:87:60:d8:
39:45:eb:07:cb:b0:03:93:83:6e:08:4b:25:0e:b6:29:f3:52:
d4:13:2d:18:a7:61:fd:b8:6e:7e:f5:c3:eb:4c:9c:a0:8e:d8:
9b:53:e0:7c:93:63:3a:f8:45:b1:ab:de:4a:4f:30:6d:2f:db:
e1:f6:71:31:d9:31:f0:4b:e6:b0:be:fd:f8:cd:35:12:3d:09:
e1:c0:22:fb:f4:8a:73:75:49:16:2e:60:50:40:30:bf:11:12:
d7:72:74:09:4a:84:02:88:56:95:5c:cf:04:d7:13:e1:24:19:
02:e0:cf:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpqUCBGdAGq49XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
OWI3ZDE1YWUtYWE4NC00YTI0LWFhMzQtMmQwZGM0ZjJlNjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZb2HLBL8WrhMvvUj+JmtdY7KZhHmg/HIsMc
xBbAKqjmCA+avjnja6KBJNgVUtFGfdZ2ZTWuM5CzFYrycVH/atY8gXtBwjt/W8jC
g8+5cWHhGm/xtP5ZnVhJvcWXuDlqPxDmKCGkylcC7SvfxXg+OtDi7IX27jspNSn8
r9Y7zZNH90KQFtWfmDciBMptAbvHJ0HfLqzKdQgLgPx317pJLq20Se8ErMP9v5p5
Jom4LK0iz8OxVFxyho80zYpDepGvsLockO7nihKY8/KhinieD+TYuLxTc3eMywr9
tvdybdGonRohhF71Ff8IMQ64wbPWvB2eks70yw4tb9fnX0KDdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLM5MJSN316eOMfNOyZp6ySvq9PPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGFmNzc5ZDMtM2FkNS0z
NjhmLWFlOGEtODczYTNhNTI4OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKaA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABuIx/uhSLW0GEDfdB3OVA5okZx/XL2SLlPLGgdiK9jcVZ/BmzJN
hXncc8xg6MSY5B/W6TWVbeH/HpJg6zDUnUFhtE6/ZiKh0xDMr/GHB5egSxmtiedp
AXIiGEzdo2i5kPtcDjPvV8p/7ypw5IphPiexYAojZk8GuAEDiwslKnwFtSocBw6+
4f3shZmxOodg2DlF6wfLsAOTg24ISyUOtinzUtQTLRinYf24bn71w+tMnKCO2JtT
4HyTYzr4RbGr3kpPMG0v2+H2cTHZMfBL5rC+/fjNNRI9CeHAIvv0inN1SRYuYFBA
ML8REtdydAlKhAKIVpVczwTXE+EkGQLgzwA=
-----END CERTIFICATE-----
Generated at Sun Jan 11 09:45:36 2026 by rpki-client