This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa
File: 7a1b3853-7749-3113-8c0f-5fa5698c4241.roa (raw, json)
Hash identifier: OvXPxEc6Uvbg2+LfJsaX6hfXnzH5LdUzDmBPd3Du96c=
Subject key identifier: FF:EC:48:87:8B:ED:76:71:5B:FF:00:03:D9:5B:EC:8F:E9:1C:CB:58
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BF0808496BE0D9FABE8D0EBC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa
Signing time: Sat 22 Nov 2025 02:00:30 +0000
ROA not before: Sat 22 Nov 2025 02:00:30 +0000
ROA not after: Fri 20 Feb 2026 02:00:30 +0000
asID: 19905
IP address blocks: 2604:2d81:1700::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f0:80:84:96:be:0d:9f:ab:e8:d0:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 22 02:00:30 2025 GMT
Not After : Feb 20 02:00:30 2026 GMT
Subject: CN=2bfbd591-0bec-4236-b052-4c9aabb14b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:1a:70:bf:a6:73:3a:13:ee:7c:82:a4:7d:
02:8d:3b:f7:80:8a:b0:ec:cb:97:a5:e8:78:c6:68:
6f:3c:b8:4b:95:0c:d2:d0:bb:fc:2d:99:c1:93:03:
81:2d:b3:d6:41:a2:9b:07:e9:b1:ab:0e:8e:5b:16:
1b:55:23:ca:a4:45:1a:a5:79:a8:b8:21:db:b3:b1:
2a:34:1a:3a:fd:e8:25:0a:c3:e2:dc:c1:58:34:c5:
b8:f6:4f:65:44:bd:76:5a:06:e6:a4:9e:dc:3f:95:
1a:b3:e3:de:24:01:28:16:8b:4d:c9:5f:4d:23:e3:
a2:0f:12:99:05:cd:7f:21:1c:bf:24:bf:7a:f6:52:
a5:45:6d:33:63:99:22:e5:28:5f:bd:09:7b:84:ac:
58:0e:31:b6:4f:03:65:c0:f4:df:60:25:e7:43:62:
48:24:92:a1:90:a6:79:8b:a9:26:da:98:d2:5b:b8:
dd:bb:a1:c2:85:44:f8:34:c9:03:75:be:e9:85:b9:
33:18:4f:cc:6d:be:d2:05:40:bd:17:87:e0:2a:19:
d7:d2:2c:73:65:a8:1f:e6:c7:a5:13:16:c3:78:8c:
e1:42:cd:a4:ce:50:b5:fb:6b:62:4a:07:bf:59:c3:
1d:9e:08:f3:20:4a:f4:32:b0:dc:6d:05:a0:7b:4d:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:48:87:8B:ED:76:71:5B:FF:00:03:D9:5B:EC:8F:E9:1C:CB:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:1700::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:95:20:ef:e3:a4:45:59:0f:d7:8d:2d:24:f1:dc:fb:f4:0f:
1e:e9:f5:03:5a:df:2b:f8:d4:7a:65:3e:98:01:5a:06:0e:3e:
21:79:2d:80:bb:42:5c:e6:39:4f:f6:41:99:a6:71:4c:1f:a5:
c6:74:8a:e1:a5:69:ff:cd:f8:13:a4:db:5f:34:73:a8:6f:6a:
83:42:db:67:0e:62:4c:c2:2a:d2:61:4e:12:1e:2d:79:18:ac:
d6:5e:10:6b:5a:1a:fd:91:96:4e:50:f2:27:0e:e2:79:dc:ea:
3b:2c:a9:04:7c:a4:42:ff:e5:6c:71:df:90:bf:cd:8f:d4:f7:
e2:6f:1c:be:bf:a0:ca:63:9a:72:fb:2b:e5:3e:7c:45:d1:c9:
29:2a:3e:26:b2:10:a5:39:d9:0c:c6:a1:83:d0:db:f1:37:6f:
ee:f3:5a:9c:e8:7f:00:cf:72:e3:cc:20:d7:8f:be:a3:fc:33:
84:d0:31:40:fd:c5:d0:c2:bc:b0:08:41:f7:fe:8b:f1:4c:23:
67:ee:74:82:46:ad:56:b1:da:55:2f:e2:2c:da:a4:11:fd:96:
0f:44:45:3a:d2:99:2b:1d:2b:99:8b:1b:43:52:10:7b:c0:36:
2d:e5:65:73:c6:8c:6b:75:31:7d:30:9e:e3:6f:16:b3:ce:c2:
b2:bc:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:36:34 2025 by rpki-client