This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bcf8370-f826-3700-9c35-85866d96e908.roa File: 4bcf8370-f826-3700-9c35-85866d96e908.roa (raw, json) Hash identifier: uDN2t0VAOfUH1qCynH2j+IZfSHoz7CM7ieA8iLB7GdE= Subject key identifier: 98:BA:69:3C:8A:06:D9:29:44:E5:B8:54:8D:B3:9A:52:05:E3:1A:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDCF5E72F43BBE77E1EEB3E60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bcf8370-f826-3700-9c35-85866d96e908.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d81:d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e7:2f:43:bb:e7:7e:1e:eb:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=189d51c4-4e69-4ec2-b571-b5e0a9350096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:09:41:c1:a9:10:55:e7:bb:22:38:9b:0b: 0f:31:2e:15:af:0e:fb:4f:38:dd:4a:e9:83:45:85: f5:89:48:7b:f5:ba:97:ac:3d:3e:b4:29:13:4c:e6: f6:d5:29:ae:2b:d2:4c:39:27:2f:42:68:db:78:fe: 0a:57:bc:61:d0:20:7e:86:79:6e:f3:64:35:6e:2c: fd:73:e5:c6:fb:64:7c:a4:5e:a8:2f:61:83:42:2d: d4:9f:23:77:96:04:e4:74:6f:9a:ec:2c:9f:99:48: 60:10:56:6a:80:f3:7a:f4:3c:4c:93:61:39:18:89: fa:98:33:4b:fd:d7:c3:6e:87:26:9e:d0:c9:56:3f: 59:15:8a:a0:f6:31:98:48:0f:a3:ff:0b:63:a2:46: e6:dd:8c:4a:cf:1b:aa:c3:d5:9c:57:7c:24:08:1f: 4f:1f:7b:85:6a:7b:4c:c6:ce:e9:4f:d2:58:4f:20: 56:46:3c:39:2d:f8:5a:04:ef:8a:d9:bf:e6:00:5c: 5a:fe:ca:97:a7:4a:3b:3d:e2:df:4c:b8:7d:39:47: 1a:1b:b7:95:74:6f:d4:c2:88:c2:4a:51:00:d1:bf: 3a:c3:8d:d2:d5:e2:74:e9:6e:14:b3:fd:cd:cf:81: 6d:84:dd:05:f4:ba:35:1d:14:af:66:0e:06:33:c8: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:69:3C:8A:06:D9:29:44:E5:B8:54:8D:B3:9A:52:05:E3:1A:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bcf8370-f826-3700-9c35-85866d96e908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:17:d1:2c:3b:be:ad:6b:98:97:ee:2d:bd:6d:57:27:1f:be: 9e:a8:83:85:c6:e9:9f:78:bd:d2:af:31:56:c9:c1:94:93:dd: b3:fa:55:78:1c:7d:0a:8e:2f:22:bf:0e:03:6e:a2:b6:fb:db: aa:95:6c:86:59:01:70:06:6f:d9:93:bd:b1:30:1f:59:11:3a: 43:b8:c1:c5:16:6f:32:ee:f2:fe:c1:da:01:61:23:ec:26:19: 44:b2:3d:0f:95:c9:a0:bb:24:d7:8f:0a:a1:0f:15:48:0e:89: 91:58:fc:44:01:e2:a4:bc:a0:25:52:eb:7d:88:32:ca:94:f4: 74:77:56:90:34:fa:4d:ea:2e:37:41:f8:84:c9:b1:64:f0:85: f5:39:93:e4:78:d2:b8:d6:11:bb:06:75:9e:95:ec:ae:6c:ca: db:de:19:93:6d:e4:26:c1:fe:70:e0:0c:9d:2d:5a:31:61:42: 5e:ab:f0:fc:08:71:32:1e:52:86:f1:0f:82:42:44:7b:53:da: 60:16:9d:82:f1:64:f2:95:0a:b0:fd:d0:df:1f:d9:6c:48:d4: 04:b8:c2:28:ee:a2:b6:bf:9b:72:14:50:44:b9:a2:2e:96:b9: 4f:24:2b:e6:8b:35:bc:f2:6f:2c:a6:f0:14:c2:57:85:72:9b: 98:3f:43:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvc9ecvQ7vnfh7rPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MTg5ZDUxYzQtNGU2OS00ZWMyLWI1NzEtYjVlMGE5MzUwMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqIJQcGpEFXnuyI4mwsPMS4Vrw77TzjdSumD RYX1iUh79bqXrD0+tCkTTOb21SmuK9JMOScvQmjbeP4KV7xh0CB+hnlu82Q1biz9 c+XG+2R8pF6oL2GDQi3UnyN3lgTkdG+a7CyfmUhgEFZqgPN69DxMk2E5GIn6mDNL /dfDbocmntDJVj9ZFYqg9jGYSA+j/wtjokbm3YxKzxuqw9WcV3wkCB9PH3uFantM xs7pT9JYTyBWRjw5LfhaBO+K2b/mAFxa/sqXp0o7PeLfTLh9OUcaG7eVdG/UwojC SlEA0b86w43S1eJ06W4Us/3Nz4FthN0F9Lo1HRSvZg4GM8isOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJi6aTyKBtkpROW4VI2zmlIF4xraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGJjZjgzNzAtZjgyNi0z NzAwLTljMzUtODU4NjZkOTZlOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQ2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAX0Sw7vq1rmJfuLb1tVycfvp6og4XG6Z94vdKvMVbJwZST3bP6 VXgcfQqOLyK/DgNuorb726qVbIZZAXAGb9mTvbEwH1kROkO4wcUWbzLu8v7B2gFh I+wmGUSyPQ+VyaC7JNePCqEPFUgOiZFY/EQB4qS8oCVS632IMsqU9HR3VpA0+k3q LjdB+ITJsWTwhfU5k+R40rjWEbsGdZ6V7K5sytveGZNt5CbB/nDgDJ0tWjFhQl6r 8PwIcTIeUobxD4JCRHtT2mAWnYLxZPKVCrD90N8f2WxI1AS4wijuora/m3IUUES5 oi6WuU8kK+aLNbzybyym8BTCV4Vym5g/Q4s= -----END CERTIFICATE-----Generated at Tue Nov 25 09:06:41 2025 by rpki-client