This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa File: 86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa (raw, json) Hash identifier: 16W83808lMSt3+xbqHJXfBsLd1/GvqOngwJc5QT5ouk= Subject key identifier: D1:D6:D2:20:AC:35:90:F8:D9:15:00:2F:4E:D4:0C:3A:9C:29:DE:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC02DC89124478375EFD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:3a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:02:dc:89:12:44:78:37:5e:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=3a122691-7471-46b6-85eb-ff872512bf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:c3:8b:38:7f:35:f4:cc:9d:22:fd:a3:44: df:6a:08:df:b4:87:b8:e2:80:ab:e5:79:ea:e4:12: cc:3c:1f:c2:7d:35:27:2a:4c:12:e6:2f:d5:95:b0: cf:51:c9:47:07:c3:22:05:70:b6:f1:ab:94:74:a5: d5:b0:e2:97:a2:27:61:50:65:c0:b5:f6:52:cf:93: 61:db:c1:77:ac:92:a7:5e:47:b5:31:cb:97:a9:e6: 41:a7:bf:1e:48:a5:a0:3e:70:df:9d:88:68:d7:f4: 02:1c:cb:2c:2e:a3:05:bd:12:b6:30:2b:2b:d1:55: ae:29:f5:81:26:6d:69:be:60:38:89:4b:12:54:3b: e0:ce:47:6e:85:01:4b:eb:34:6f:12:31:a2:6c:ce: df:24:10:82:4d:1c:9b:67:a9:a6:e7:a1:67:8c:b1: 9f:ec:5a:0a:8e:06:e5:4a:c0:19:06:f9:07:b8:0f: 13:14:46:af:ba:77:b3:0d:9c:ab:8b:d7:c7:2e:03: 97:2b:83:2b:91:49:4b:51:25:5d:28:b6:78:12:7b: dd:30:38:9e:bf:6b:05:8d:7a:68:9d:ec:e8:35:77: c2:a6:83:41:fa:61:51:96:82:2e:8c:79:c9:7d:a9: da:5f:e1:77:c2:aa:f3:58:86:58:cb:ac:64:41:be: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D6:D2:20:AC:35:90:F8:D9:15:00:2F:4E:D4:0C:3A:9C:29:DE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3a00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:33:5f:93:cf:9e:a2:48:72:dd:3c:ed:2c:bf:26:ee:9b:f2: e4:0d:9a:a6:b3:73:79:64:38:e4:b4:4a:10:6f:24:de:cf:8f: 22:92:05:28:fe:ba:22:2b:54:d4:70:24:50:9f:22:b9:72:94: fb:11:4f:26:17:3c:0d:dc:04:4b:f8:2d:04:c8:47:55:3b:9b: b9:92:de:cd:d3:8d:f1:22:9b:00:df:ff:84:3b:35:40:16:62: f1:62:c4:fe:0f:6d:33:f9:98:84:e5:e7:f6:fa:ac:09:69:0a: 3d:bd:00:a3:79:bf:f5:f2:df:f1:01:d1:5c:55:00:21:c5:3f: 98:37:0e:4b:f9:f0:8d:70:09:a2:4e:c8:89:6f:12:bc:86:05: 2f:28:e0:9a:5a:cf:8c:ad:a2:74:6e:a2:0b:ad:fb:29:76:c2: 95:1c:23:36:66:f2:3e:49:77:d6:57:d4:9d:1e:11:45:37:be: b2:12:71:28:c4:39:ea:b1:76:c8:dd:13:c3:3f:a9:09:6a:a8: 11:73:5e:72:b1:09:dc:d8:0c:05:9c:84:91:35:7a:07:a0:41: 28:a1:ee:93:ab:15:f9:95:00:d2:2c:01:6b:45:44:8e:72:7a: 13:b2:69:d6:13:c9:03:87:c2:f5:ec:86:28:a1:f4:01:3e:58: 25:a8:ce:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3ALciRJEeDde/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk M2ExMjI2OTEtNzQ3MS00NmI2LTg1ZWItZmY4NzI1MTJiZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc7Dizh/NfTMnSL9o0TfagjftIe44oCr5Xnq 5BLMPB/CfTUnKkwS5i/VlbDPUclHB8MiBXC28auUdKXVsOKXoidhUGXAtfZSz5Nh 28F3rJKnXke1McuXqeZBp78eSKWgPnDfnYho1/QCHMssLqMFvRK2MCsr0VWuKfWB Jm1pvmA4iUsSVDvgzkduhQFL6zRvEjGibM7fJBCCTRybZ6mm56FnjLGf7FoKjgbl SsAZBvkHuA8TFEavunezDZyri9fHLgOXK4MrkUlLUSVdKLZ4EnvdMDiev2sFjXpo nezoNXfCpoNB+mFRloIujHnJfanaX+F3wqrzWIZYy6xkQb7IpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHW0iCsNZD42RUAL07UDDqcKd59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZhZmZjMGQtZjEyNy0z YzViLTk4MGUtZTBhOWI0YTI0YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAczX5PPnqJIct087Sy/Ju6b8uQNmqazc3lkOOS0ShBvJN7PjyKS BSj+uiIrVNRwJFCfIrlylPsRTyYXPA3cBEv4LQTIR1U7m7mS3s3TjfEimwDf/4Q7 NUAWYvFixP4PbTP5mITl5/b6rAlpCj29AKN5v/Xy3/EB0VxVACHFP5g3Dkv58I1w CaJOyIlvEryGBS8o4Jpaz4ytonRuogut+yl2wpUcIzZm8j5Jd9ZX1J0eEUU3vrIS cSjEOeqxdsjdE8M/qQlqqBFzXnKxCdzYDAWchJE1egegQSih7pOrFfmVANIsAWtF RI5yehOyadYTyQOHwvXshiih9AE+WCWozsk= -----END CERTIFICATE-----Generated at Sun Jan 11 09:44:39 2026 by rpki-client