This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa File: 89c6ef32-d0ed-3e70-9774-17aba56579b2.roa (raw, json) Hash identifier: 4+xXJeCvnHqwZ2dChdNumM9tSAa91OtEsT/o/Nu9XAg= Subject key identifier: 74:9D:06:55:B9:99:2E:D5:D4:8F:2E:A0:8A:53:D5:37:66:3C:79:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C41768726DD5709F3C6030900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2d80:eb00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:87:26:dd:57:09:f3:c6:03:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=798c79f2-5bbc-4155-a4f4-a3f9ee8c8b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:39:d0:92:e7:59:29:ed:08:4f:62:42:89: 61:9e:36:5c:bd:3d:e0:1b:c6:eb:76:24:3c:f6:50: e1:79:b4:f3:57:11:c7:fc:66:37:88:7c:ef:d4:da: 06:13:db:3b:35:47:73:1d:02:76:b4:5a:35:d4:bb: 39:e9:9e:34:05:f2:11:2a:b1:7d:21:c1:51:43:8d: 0d:77:f5:21:e3:ae:c1:4b:6d:6d:2e:e4:16:34:52: 47:d4:d0:d0:29:2a:60:b2:3a:b7:2b:5f:9d:a4:f9: 0e:8a:c3:7b:45:29:b1:4d:62:f2:a0:7b:22:b7:22: 05:0d:d1:1d:3e:73:41:a9:b9:6b:0f:46:b6:c3:5c: d5:3e:ed:94:60:e7:c6:3a:41:22:17:48:2b:df:bd: ae:99:f2:15:6c:8a:a7:18:03:a2:6d:ce:42:c1:e6: ee:12:4b:69:c5:af:2a:61:04:a6:31:6a:09:0d:5e: 44:f9:1d:0c:8d:99:6f:eb:18:1a:f7:d8:9d:01:75: 09:9f:ea:49:86:92:3e:00:76:62:ff:d7:25:bd:91: bc:dd:11:42:04:ec:c2:12:c7:08:ea:2d:40:ac:7d: 0c:ab:87:0f:b8:3e:b4:cb:55:82:77:e6:b2:a0:5e: 56:b1:43:f6:01:b7:15:17:b0:70:da:8b:13:c1:f2: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:06:55:B9:99:2E:D5:D4:8F:2E:A0:8A:53:D5:37:66:3C:79:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:eb00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6b:bd:9a:80:c7:22:97:4f:b4:78:6f:67:3c:89:71:2b:83: a1:f4:f1:44:c0:07:39:9e:8f:96:4b:67:81:09:2b:f7:ea:68: cd:59:60:e7:a5:1e:fd:81:d2:9b:77:59:19:73:9c:3c:90:8d: 78:27:55:1f:f2:36:fc:2d:54:4b:97:40:16:6f:75:f7:fd:24: bc:f0:cb:f7:6a:19:ce:3b:6c:58:21:87:0f:03:0d:b2:ef:c1: 49:68:32:75:c6:6d:f3:15:78:31:b1:ad:04:7f:88:92:2a:17: cf:4d:40:a2:c7:89:78:10:84:08:98:fa:29:ae:6d:45:d2:61: e0:21:4d:c9:b8:df:87:63:c4:50:8f:3d:db:d1:78:4c:f7:aa: d6:b7:93:a6:a5:53:e1:75:ff:57:61:2a:02:a2:b2:36:db:72: 35:e4:48:06:c6:10:34:79:01:34:5d:48:7e:e8:ab:8e:7f:b7: d0:ad:b5:87:a4:76:8e:d6:47:bd:5b:e1:d6:cd:98:5e:73:25: 48:59:03:23:d9:2e:cf:5f:85:b6:f0:0a:29:a3:81:bc:55:1b: f7:05:ca:e6:43:ca:43:3d:4e:a8:eb:ec:36:be:8f:d0:24:08: 50:2b:3f:b5:f4:d2:07:43:09:87:73:1c:30:17:ca:7d:79:56: cf:9e:9b:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExBdocm3VcJ88YDCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk Nzk4Yzc5ZjItNWJiYy00MTU1LWE0ZjQtYTNmOWVlOGM4YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uA50JLnWSntCE9iQolhnjZcvT3gG8brdiQ8 9lDhebTzVxHH/GY3iHzv1NoGE9s7NUdzHQJ2tFo11Ls56Z40BfIRKrF9IcFRQ40N d/Uh467BS21tLuQWNFJH1NDQKSpgsjq3K1+dpPkOisN7RSmxTWLyoHsityIFDdEd PnNBqblrD0a2w1zVPu2UYOfGOkEiF0gr372umfIVbIqnGAOibc5CwebuEktpxa8q YQSmMWoJDV5E+R0MjZlv6xga99idAXUJn+pJhpI+AHZi/9clvZG83RFCBOzCEscI 6i1ArH0Mq4cPuD60y1WCd+ayoF5WsUP2AbcVF7Bw2osTwfLBeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHSdBlW5mS7V1I8uoIpT1TdmPHkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODljNmVmMzItZDBlZC0z ZTcwLTk3NzQtMTdhYmE1NjU3OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNrvZqAxyKXT7R4b2c8iXErg6H08UTABzmej5ZLZ4EJK/fqaM1Z YOelHv2B0pt3WRlznDyQjXgnVR/yNvwtVEuXQBZvdff9JLzwy/dqGc47bFghhw8D DbLvwUloMnXGbfMVeDGxrQR/iJIqF89NQKLHiXgQhAiY+imubUXSYeAhTcm434dj xFCPPdvReEz3qta3k6alU+F1/1dhKgKisjbbcjXkSAbGEDR5ATRdSH7oq45/t9Ct tYekdo7WR71b4dbNmF5zJUhZAyPZLs9fhbbwCimjgbxVG/cFyuZDykM9Tqjr7Da+ j9AkCFArP7X00gdDCYdzHDAXyn15Vs+em88= -----END CERTIFICATE-----Generated at Mon Jan 12 11:39:25 2026 by rpki-client