This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71af4e10-bfe3-34c3-903d-d4921c919b97.roa File: 71af4e10-bfe3-34c3-903d-d4921c919b97.roa (raw, json) Hash identifier: PF1aA6qtj3LzoDd/L8f3xrq8Gyn2zrHPHiugIHtnCJk= Subject key identifier: 9B:A4:85:17:F1:8A:12:4B:10:FE:90:ED:EB:FE:16:2E:C4:9F:16:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A828A8A44868420AEE5B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71af4e10-bfe3-34c3-903d-d4921c919b97.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:8880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:28:a8:a4:48:68:42:0a:ee:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1d51b68e-fbd0-487f-b93d-af679bae7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:a0:58:96:15:81:65:68:9c:2c:da:a9:8b: 65:fc:28:3d:55:47:f0:5c:d2:77:a6:df:ff:2c:6b: f0:37:5f:13:2f:f4:a5:ca:e1:ab:55:ee:5e:91:15: fa:c2:4b:75:bc:ee:1a:28:02:12:f4:fb:f0:81:ca: a6:e0:8e:86:c8:ea:f9:b6:39:4c:bc:43:9c:d3:f5: 94:7c:54:30:b6:f9:47:3a:69:fb:aa:f7:58:1a:1b: 29:ac:d2:b0:76:99:3c:e8:9e:ac:a3:b6:c5:bf:23: c7:1f:83:0a:f1:3a:20:9c:f6:2f:ef:84:5d:cd:6c: b5:b0:01:df:42:71:a0:bf:34:42:8f:32:b3:e1:c9: 04:85:1f:ed:67:58:af:aa:44:49:e9:e3:ca:76:81: 12:a1:f4:ef:0c:e1:cd:1e:40:e5:46:a5:e7:68:a8: 3b:ae:bd:50:bf:cc:43:3f:7b:ad:6c:0c:22:43:58: 66:8f:5c:77:2d:09:18:62:c5:62:31:39:eb:78:78: c9:54:c4:7e:57:7e:50:f9:83:b6:8f:a7:20:d0:a9: 9c:5c:64:34:60:6b:19:14:81:a2:9b:d4:f9:2b:e3: 72:19:7a:40:06:1c:24:8a:48:5a:5b:2b:56:42:e1: a2:96:f3:0c:87:58:1f:9f:8c:9a:1f:e9:9f:0b:59: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A4:85:17:F1:8A:12:4B:10:FE:90:ED:EB:FE:16:2E:C4:9F:16:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71af4e10-bfe3-34c3-903d-d4921c919b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ea:d0:72:bd:42:99:e6:4d:93:42:d8:52:c8:d6:9e:5e:90: 8f:b4:3f:ad:1a:75:7b:e1:0f:97:d8:1b:dd:ea:29:f9:c3:31: ec:81:df:96:93:52:92:9e:e0:7b:e8:78:8f:23:bb:57:c7:4c: 1e:b1:bc:4e:f2:45:46:73:b6:82:aa:92:6d:c2:3f:5d:fb:14: 43:69:a7:6e:c0:48:97:ad:c0:ff:33:f6:53:b5:90:9a:6b:5b: 00:af:77:4d:c2:a8:30:08:15:14:e7:5e:af:ac:b2:7f:54:45: 1e:7f:c9:61:35:81:c7:b9:bc:3c:04:4a:8f:c4:5c:03:d9:b1: 31:53:cd:15:ab:14:ec:9c:9c:2f:23:fd:38:f1:b3:15:14:f5: d7:ba:ce:e9:91:35:17:58:de:e4:dc:d7:3d:aa:80:aa:80:38: 12:30:30:cf:5d:d7:1d:24:94:f1:04:72:b0:aa:ce:6f:9a:46: 34:21:3b:99:dd:f9:1a:f4:c0:8f:36:cc:41:cf:5b:da:63:70: bc:34:3b:24:0e:db:20:67:20:1b:ff:39:a0:3e:84:da:f1:e0: 63:97:48:b6:01:c4:80:c6:0c:ea:d6:68:2e:80:c1:a6:76:6d: 51:ca:98:a8:20:4d:7a:ee:4b:42:82:4f:ec:c8:3d:fe:26:fc: f9:79:a0:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqCiopEhoQgruW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWQ1MWI2OGUtZmJkMC00ODdmLWI5M2QtYWY2NzliYWU3MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXagWJYVgWVonCzaqYtl/Cg9VUfwXNJ3pt// LGvwN18TL/SlyuGrVe5ekRX6wkt1vO4aKAIS9Pvwgcqm4I6GyOr5tjlMvEOc0/WU fFQwtvlHOmn7qvdYGhsprNKwdpk86J6so7bFvyPHH4MK8TognPYv74RdzWy1sAHf QnGgvzRCjzKz4ckEhR/tZ1ivqkRJ6ePKdoESofTvDOHNHkDlRqXnaKg7rr1Qv8xD P3utbAwiQ1hmj1x3LQkYYsViMTnreHjJVMR+V35Q+YO2j6cg0KmcXGQ0YGsZFIGi m9T5K+NyGXpABhwkikhaWytWQuGilvMMh1gfn4yaH+mfC1lG+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJukhRfxihJLEP6Q7ev+Fi7EnxYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFhZjRlMTAtYmZlMy0z NGMzLTkwM2QtZDQ5MjFjOTE5Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgIiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnq0HK9QpnmTZNC2FLI1p5ekI+0P60adXvhD5fYG93qKfnDMeyB 35aTUpKe4HvoeI8ju1fHTB6xvE7yRUZztoKqkm3CP137FENpp27ASJetwP8z9lO1 kJprWwCvd03CqDAIFRTnXq+ssn9URR5/yWE1gce5vDwESo/EXAPZsTFTzRWrFOyc nC8j/TjxsxUU9de6zumRNRdY3uTc1z2qgKqAOBIwMM9d1x0klPEEcrCqzm+aRjQh O5nd+Rr0wI82zEHPW9pjcLw0OyQO2yBnIBv/OaA+hNrx4GOXSLYBxIDGDOrWaC6A waZ2bVHKmKggTXruS0KCT+zIPf4m/Pl5oK0= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:53 2026 by rpki-client