This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa
File: 8af02d33-3818-363b-9ae2-bd31488eab24.roa (raw, json)
Hash identifier: nOxyytzsZqX9XmjvZTsFG7YP6WGuWqhsRpw30fGRvM0=
Subject key identifier: D9:14:CE:91:F3:54:3F:ED:A2:B6:E6:57:F8:29:F6:78:54:11:84:14
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B9E07A95CE1457F5CA4946580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 19905
IP address blocks: 2604:2d81:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:a9:5c:e1:45:7f:5c:a4:94:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=07e6b17e-f983-4c42-a245-6eb6ad83da5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:f7:59:83:48:73:3d:a7:c6:1d:6d:76:01:
a2:c5:68:a3:b5:08:ed:44:d8:92:56:ac:98:c9:6a:
86:dc:bf:8d:e4:58:ee:b3:e0:5d:13:b4:c5:58:9a:
3f:23:ff:a4:16:88:da:42:71:cc:f8:25:95:8c:29:
15:f7:66:b8:72:cb:cc:25:18:1c:1d:48:ca:24:9d:
5e:d3:d1:16:e9:58:70:e8:e6:42:1b:34:71:af:b4:
48:cc:68:38:4f:87:f6:0d:ad:e3:84:79:3e:0f:47:
cf:79:c6:5d:0b:97:b8:b6:09:e9:af:01:38:2d:b4:
33:f8:52:a9:5f:59:e7:f0:26:47:ae:1d:78:67:2d:
2e:22:f6:fd:0b:d4:72:c1:48:0b:81:9e:f8:31:7f:
e1:b6:77:f1:3b:75:b0:f6:5f:08:2c:10:5f:f9:40:
b5:a0:cf:5b:fa:3a:35:ed:c7:1d:f2:ba:c5:c0:b2:
14:90:19:f6:b1:7d:3d:34:eb:c2:b7:5c:53:c5:94:
90:dc:e0:07:24:6d:60:8c:40:7f:4e:e1:f0:81:28:
e9:cc:8c:23:6c:02:fa:6f:83:50:50:c2:5e:f9:57:
17:2e:79:01:76:d0:d3:98:2e:74:59:42:80:0a:c2:
35:40:13:f6:70:a5:7e:5d:91:94:d7:be:c6:45:01:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:CE:91:F3:54:3F:ED:A2:B6:E6:57:F8:29:F6:78:54:11:84:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:5d:61:8c:99:f2:9d:b3:03:b1:63:4f:db:b1:77:aa:ad:bb:
5c:8d:7d:9a:b1:04:cb:0f:cc:30:c2:b0:1d:60:c9:a4:a1:da:
d6:01:6e:66:f9:de:ad:57:e8:4d:c9:11:9e:01:55:fd:0b:e2:
e1:bc:c9:e1:a1:67:fd:13:ff:54:1a:1c:21:fd:92:1b:f7:bb:
b0:4b:b3:60:e2:a0:3c:e1:9e:e5:dd:0e:07:16:28:c3:31:e9:
4d:55:0e:f5:9f:6e:db:5d:44:c0:fb:23:68:43:60:61:4f:02:
a6:88:8d:7f:23:97:8a:4f:4c:7c:84:c8:81:c5:06:ce:52:16:
76:33:28:6e:5a:c4:8c:93:08:64:d0:e8:a2:b8:a8:7d:a9:37:
75:1e:23:d4:f2:74:a0:09:7c:23:98:5b:0f:1a:af:14:fb:29:
e5:3a:b1:52:6f:1c:6f:5a:2f:69:f9:99:0b:21:9c:26:a2:7b:
96:31:c9:79:3c:98:7d:10:73:82:ea:72:1f:49:ed:29:d1:20:
0d:9b:4b:fc:1a:a6:2d:d6:07:b0:0d:81:7f:19:5a:9b:1e:89:
28:49:4f:be:90:77:51:ab:74:02:07:20:90:85:99:66:9d:79:
c9:77:04:30:45:72:22:16:9d:29:5b:4b:ec:a9:c7:99:7c:87:
4a:d8:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:06:17 2025 by rpki-client