This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa
File: 898a90de-f28f-3be2-bc2f-1b4b0127723c.roa (raw, json)
Hash identifier: 5tn1H+v5HsxJplW7uwcfRN30wY1Qnf5tzYni2huq4ss=
Subject key identifier: 7E:24:D4:B1:27:6B:C4:CF:50:5B:16:52:C1:DD:14:43:0B:66:63:03
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4871D4F91596480ED3BC3400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2d80:9700::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:d4:f9:15:96:48:0e:d3:bc:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=712c1be0-89d5-4c34-8199-ffa3ea24ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:05:e1:13:c1:3e:87:eb:b0:ec:b8:d1:cd:
03:e0:02:29:09:1d:59:15:b0:09:80:f1:b9:3d:61:
92:98:2c:1c:6c:55:c8:b4:96:f5:7b:0f:d3:6e:5a:
f7:32:cf:69:eb:44:d2:dc:1b:6a:ca:b5:01:d3:db:
df:ba:bd:85:e0:8c:81:0a:80:dd:42:b4:6d:65:0b:
7f:db:de:4e:3e:a1:56:d6:3f:94:14:7e:6e:60:14:
0e:01:85:0e:ad:c0:ad:59:49:7a:0a:03:b3:90:64:
70:8d:2a:d1:61:a1:77:c7:c6:5e:68:cf:19:43:80:
c7:e0:5a:19:c1:1a:e9:f5:0c:c4:2d:71:08:d1:ab:
2a:41:cd:8e:39:91:06:68:4c:f5:73:44:d5:b9:16:
d6:70:76:37:b3:b2:96:3b:9c:20:ab:f7:d7:a7:86:
d2:d2:e4:52:ab:71:f5:fc:81:d8:34:62:33:ca:10:
60:c7:10:0e:9c:ad:fc:cc:53:49:08:0b:b1:74:b3:
5d:7d:03:1d:d5:4f:d2:71:76:af:ac:40:ef:2e:5f:
4e:c3:d1:14:14:89:e7:3f:a1:11:83:e2:0f:9e:3c:
f9:dc:52:77:b3:78:20:dd:50:98:5f:65:f0:16:ca:
0e:33:f6:81:22:7b:af:c4:e4:56:29:7f:2d:6d:cd:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:D4:B1:27:6B:C4:CF:50:5B:16:52:C1:DD:14:43:0B:66:63:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:9700::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ff:94:42:27:f8:ae:d2:7a:e8:f7:0d:7c:f6:fc:4d:95:e0:
d2:e9:9f:89:35:69:9e:d9:91:ab:61:65:96:1f:c8:fd:40:62:
71:d4:fd:2a:eb:13:75:e5:86:f5:a0:ad:31:31:0d:2b:6d:cf:
63:ec:30:0e:f5:78:a7:7d:ed:06:48:7b:f3:c9:4f:c0:4b:92:
84:b4:42:36:e0:35:c2:d4:b3:cb:27:d1:e7:18:1d:54:31:f0:
91:8e:d9:c8:03:4b:c1:aa:f8:8c:4d:29:fa:1a:a2:0b:f8:e0:
77:14:f4:09:f7:e2:e1:8c:86:88:5b:ca:e3:2b:97:a5:9b:12:
99:dd:96:94:17:64:2c:cb:e4:49:12:10:02:fe:d9:43:46:aa:
21:2a:a7:64:c1:e3:04:23:67:3d:eb:08:59:00:b3:81:2a:7c:
1d:f3:45:8d:bb:d9:4b:44:0c:7d:ab:59:bb:fb:e7:2a:29:e1:
2e:e9:26:6e:f4:1d:8d:60:06:ef:45:d0:4d:62:8d:ba:42:fd:
7d:ec:e2:1e:7d:64:ea:6e:a4:ed:a4:06:20:b5:38:b8:ec:33:
6b:ef:a1:2b:7c:f7:1f:5a:c1:0b:ce:56:a6:fa:0a:07:b9:29:
b4:b4:8c:92:ff:32:4e:11:1e:16:75:29:7f:7b:62:62:7a:20:
12:03:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:47:46 2026 by rpki-client