This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa File: 8c3572fd-df72-3a21-ac76-8fc376426a57.roa (raw, json) Hash identifier: keCECCPFbwQKjasEZ3bsyyhpgOb+qJf3U8nkw3e+Jv8= Subject key identifier: 60:72:B5:47:04:90:C7:2E:08:D2:54:F2:42:1E:8B:35:FC:8B:9C:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A84275157B23ADAC248800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:8c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:42:75:15:7b:23:ad:ac:24:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a2a44a61-dbae-471c-9719-2e592aa4c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:66:af:e7:c1:41:e0:cf:15:2a:79:9a:41: 95:28:4a:9a:4f:42:f8:ef:63:80:9d:da:11:27:97: f6:5c:fe:2f:4e:ca:f1:98:f0:b2:7e:fc:bc:ef:c8: 34:ac:6d:01:b1:68:4c:55:5c:5b:ba:3f:8a:95:21: a1:71:9b:d9:10:d2:64:ef:08:9e:ef:94:2e:73:7e: 8f:58:0e:45:3e:cc:c6:41:93:0a:17:0c:d9:ff:b7: 00:a0:60:ba:49:4e:35:de:64:be:4d:5e:39:56:0a: 44:e4:7b:c6:27:77:0c:70:2e:11:e7:c3:41:e7:f6: d0:d3:d6:10:51:bd:5e:db:d6:16:36:79:40:2d:22: 5a:b1:a6:69:17:d1:4c:e3:4b:31:9e:70:54:e3:e3: b2:28:56:60:64:93:16:86:54:a2:16:77:bd:ef:ca: 5d:5a:0d:4b:04:53:d4:2c:5e:67:5c:46:9c:ac:88: 8c:08:51:5f:fa:b8:f7:e0:9a:4a:4f:0b:56:d1:1d: 33:c5:73:d9:41:7e:75:c9:81:6f:41:5a:40:48:d3: 8d:13:b8:40:2a:7a:1f:af:18:b7:cd:3e:da:b4:38: 32:8d:5f:32:d9:66:26:4c:8a:01:2a:42:9b:6f:5b: 80:7b:5d:1e:87:6a:fe:26:20:6b:a5:79:13:ae:7c: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:72:B5:47:04:90:C7:2E:08:D2:54:F2:42:1E:8B:35:FC:8B:9C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:73:43:d1:bd:1e:7e:66:64:00:cf:0b:33:33:2f:82:00:b2: 0b:d8:c2:0f:7c:25:73:a1:ff:5a:3c:bb:a3:3a:3f:5c:8a:e4: 84:a3:8b:bb:db:f7:61:7d:56:9a:e0:af:c3:f0:f5:6d:02:74: bd:49:af:c3:56:74:9d:41:0d:c4:f0:a7:46:57:d8:b0:b8:30: 14:c0:c5:b9:b0:45:1c:56:1c:55:31:55:d2:01:4f:59:be:e5: f9:2d:7e:60:c0:37:9d:33:4a:05:17:35:f3:e7:44:35:41:43: ee:c9:e6:83:d8:39:83:15:5a:83:64:22:9e:08:10:e5:f3:83: e8:85:9c:ab:f1:87:4c:61:cf:51:73:7e:72:5b:df:4c:fc:ba: 95:a6:ff:82:c4:2f:c7:91:68:a6:02:83:26:06:d5:81:37:75: 28:10:9d:f7:9c:b3:fa:1d:5c:03:db:c9:50:a7:92:48:61:2f: ad:ba:2a:38:29:19:e5:6e:8f:ed:30:00:f5:c9:a6:88:01:af: a2:e6:e6:ae:c9:63:65:63:d5:fb:db:3a:50:b2:39:c0:61:c8: 55:76:fa:38:c3:b2:5c:ee:5f:50:5a:88:a9:fa:5b:52:44:d1: 30:d9:07:0b:24:26:21:d1:84:e7:25:1f:c3:45:32:8e:96:49: 59:03:95:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqEJ1FXsjrawkiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTJhNDRhNjEtZGJhZS00NzFjLTk3MTktMmU1OTJhYTRjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Rmr+fBQeDPFSp5mkGVKEqaT0L472OAndoR J5f2XP4vTsrxmPCyfvy878g0rG0BsWhMVVxbuj+KlSGhcZvZENJk7wie75Quc36P WA5FPszGQZMKFwzZ/7cAoGC6SU413mS+TV45VgpE5HvGJ3cMcC4R58NB5/bQ09YQ Ub1e29YWNnlALSJasaZpF9FM40sxnnBU4+OyKFZgZJMWhlSiFne978pdWg1LBFPU LF5nXEacrIiMCFFf+rj34JpKTwtW0R0zxXPZQX51yYFvQVpASNONE7hAKnofrxi3 zT7atDgyjV8y2WYmTIoBKkKbb1uAe10eh2r+JiBrpXkTrnzsDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBytUcEkMcuCNJU8kIeizX8i5waMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGMzNTcyZmQtZGY3Mi0z YTIxLWFjNzYtOGZjMzc2NDI2YTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgIyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClzQ9G9Hn5mZADPCzMzL4IAsgvYwg98JXOh/1o8u6M6P1yK5ISj i7vb92F9Vprgr8Pw9W0CdL1Jr8NWdJ1BDcTwp0ZX2LC4MBTAxbmwRRxWHFUxVdIB T1m+5fktfmDAN50zSgUXNfPnRDVBQ+7J5oPYOYMVWoNkIp4IEOXzg+iFnKvxh0xh z1FzfnJb30z8upWm/4LEL8eRaKYCgyYG1YE3dSgQnfecs/odXAPbyVCnkkhhL626 KjgpGeVuj+0wAPXJpogBr6Lm5q7JY2Vj1fvbOlCyOcBhyFV2+jjDslzuX1BaiKn6 W1JE0TDZBwskJiHRhOclH8NFMo6WSVkDldQ= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:47 2026 by rpki-client