This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa File: 876cd901-f77b-3bef-b6a4-45e8de312927.roa (raw, json) Hash identifier: W02fcO/IoEup9gdvZLlp39S1fX15A9/u6tB0i0x11xY= Subject key identifier: 52:56:C1:AD:93:35:9E:97:92:52:AC:18:7F:17:E4:71:8E:D4:75:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BE74809709230850B51878D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa Signing time: Tue 18 Nov 2025 18:44:34 +0000 ROA not before: Tue 18 Nov 2025 18:44:34 +0000 ROA not after: Mon 16 Feb 2026 18:44:34 +0000 asID: 30036 IP address blocks: 2604:2d81:3600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:48:09:70:92:30:85:0b:51:87:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 18 18:44:34 2025 GMT Not After : Feb 16 18:44:34 2026 GMT Subject: CN=cc76befe-4cf3-48b5-bde8-e353c01c974e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:50:56:62:44:d5:66:4d:cf:2d:4b:30:7c:90: 47:3f:29:74:02:11:c2:77:cb:5d:74:f8:96:25:7b: a7:53:be:d5:ca:d8:98:d8:8d:e9:49:42:e9:6d:8e: 7f:0f:f3:02:2f:c1:2b:e8:13:19:96:85:37:59:87: 26:e3:d3:e9:9d:b0:bc:d2:6e:b2:58:32:0a:8b:16: e5:6f:c8:8a:0d:0b:9e:7c:7e:62:49:e2:4b:84:40: 2b:f6:4d:36:e3:c2:d4:79:5d:60:0b:49:1b:bf:62: 3a:7b:ec:b3:34:55:67:ca:84:d8:fb:20:28:42:cc: 9e:39:e4:75:16:c0:28:d9:c1:aa:bd:d9:64:0e:0d: 88:e9:7c:db:c9:6e:eb:42:8b:25:17:c8:5a:1c:89: d3:a8:cc:b3:5a:f0:56:d1:a3:55:81:79:29:a6:46: c3:a2:57:78:d5:8b:76:83:1a:ee:48:1a:8f:46:94: fe:23:d4:ba:e6:fe:cf:2c:6c:be:ef:35:f6:f6:a6: fe:f3:d3:ee:95:9e:9f:b7:cc:78:2e:6f:8a:19:88: 50:dd:45:e9:68:3e:93:e8:51:85:b2:90:75:2b:8b: 13:9b:25:e5:b9:b8:31:13:41:18:f5:93:bc:a6:36: 01:c6:4d:fa:54:34:3e:18:99:39:ef:be:b4:6e:1b: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:C1:AD:93:35:9E:97:92:52:AC:18:7F:17:E4:71:8E:D4:75:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:59:ec:6d:bd:39:4c:6c:3a:3a:5c:4b:93:b8:1f:72:b3:68: 0a:96:88:04:52:d6:95:3a:a4:c1:f8:af:c2:38:18:5a:8f:74: 4c:01:c5:a2:7a:5c:db:fe:09:64:c1:3c:a2:12:46:22:b1:7a: 28:7f:2d:07:8b:d0:c6:dc:63:d3:a6:09:66:50:94:a4:d4:c2: 82:5d:ce:56:92:18:59:47:d4:ac:a9:62:ad:e4:75:1e:62:17: be:77:0a:66:71:d3:ad:c8:c2:c3:db:d9:e8:7a:57:a0:cd:ea: ed:25:5a:9d:bd:8e:09:51:a4:1b:35:3b:6d:24:98:9e:10:9a: 1c:96:ad:ce:4f:a1:82:53:16:9b:f1:f9:fb:33:0f:8b:22:e9: 9d:05:a3:70:cd:04:b6:1a:50:02:89:bc:69:36:c8:d5:dc:1e: 99:2f:93:c3:2a:53:58:45:dc:1d:a2:e9:2f:b5:e8:19:3e:d7: 79:ae:04:94:75:a0:bd:ba:57:11:61:f9:e4:f3:b1:df:e9:4c: f8:13:b5:89:ee:98:93:41:06:c1:a1:c5:2c:6b:81:c3:28:c0: 40:39:2a:06:ac:98:5a:0a:6a:2e:81:59:3b:36:60:3b:98:53: 11:1f:f1:37:bb:77:1f:3c:84:5a:5b:bd:e9:62:7a:14:d3:17: 62:51:94:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvnSAlwkjCFC1GHjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExODE4NDQzNFoXDTI2MDIxNjE4NDQzNFowLzEtMCsGA1UEAxMk Y2M3NmJlZmUtNGNmMy00OGI1LWJkZTgtZTM1M2MwMWM5NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFBWYkTVZk3PLUswfJBHPyl0AhHCd8tddPiW JXunU77VytiY2I3pSULpbY5/D/MCL8Er6BMZloU3WYcm49PpnbC80m6yWDIKixbl b8iKDQuefH5iSeJLhEAr9k0248LUeV1gC0kbv2I6e+yzNFVnyoTY+yAoQsyeOeR1 FsAo2cGqvdlkDg2I6XzbyW7rQoslF8haHInTqMyzWvBW0aNVgXkppkbDold41Yt2 gxruSBqPRpT+I9S65v7PLGy+7zX29qb+89PulZ6ft8x4Lm+KGYhQ3UXpaD6T6FGF spB1K4sTmyXlubgxE0EY9ZO8pjYBxk36VDQ+GJk57760bhsSWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJWwa2TNZ6XklKsGH8X5HGO1HUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc2Y2Q5MDEtZjc3Yi0z YmVmLWI2YTQtNDVlOGRlMzEyOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxZ7G29OUxsOjpcS5O4H3KzaAqWiARS1pU6pMH4r8I4GFqPdEwB xaJ6XNv+CWTBPKISRiKxeih/LQeL0MbcY9OmCWZQlKTUwoJdzlaSGFlH1KypYq3k dR5iF753CmZx063IwsPb2eh6V6DN6u0lWp29jglRpBs1O20kmJ4QmhyWrc5PoYJT Fpvx+fszD4si6Z0Fo3DNBLYaUAKJvGk2yNXcHpkvk8MqU1hF3B2i6S+16Bk+13mu BJR1oL26VxFh+eTzsd/pTPgTtYnumJNBBsGhxSxrgcMowEA5KgasmFoKai6BWTs2 YDuYUxEf8Te7dx88hFpbveliehTTF2JRlC4= -----END CERTIFICATE-----Generated at Tue Nov 25 10:28:06 2025 by rpki-client