This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa
File: 8e5738ff-fe38-301f-865a-f822c6887cbd.roa (raw, json)
Hash identifier: s7TeXKh+98fwJs9Q8HsMRmFKWRWh9rsHYYRE7ceRl9Q=
Subject key identifier: 3A:9B:F9:44:91:98:BA:FF:00:85:8D:AF:61:8A:E5:BA:86:86:94:74
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C76814F67CEB0454D0B3EB800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 2604:2d81:3480::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:4f:67:ce:b0:45:4d:0b:3e:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=1cde3905-5b9b-4f63-9a75-99fcda9f414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:25:b9:07:7c:cb:e2:53:7e:fc:7d:af:19:
0f:06:c6:e0:e9:fa:ec:bf:25:7c:f6:e6:bd:4c:b9:
9d:a3:00:d6:2c:f2:b8:2f:3a:e8:99:9c:d2:3f:ee:
3e:a7:a2:66:11:0c:26:5c:6e:1c:27:2c:f9:c4:ad:
c2:8b:05:08:6e:28:5f:07:3c:34:4e:a3:2c:89:05:
d4:c2:59:05:28:79:19:15:51:74:cd:da:69:3f:96:
f7:64:b2:90:f4:c7:92:2c:e4:90:37:99:55:d1:2f:
c3:f2:3f:8f:0d:60:cc:23:50:40:70:73:df:73:2b:
a5:59:b5:e3:81:fb:23:a3:3a:81:6e:c7:84:6e:1e:
1f:ff:a3:f7:d2:63:c7:dd:bd:a5:6d:ad:9d:54:ac:
2e:d3:4d:1d:9c:4d:54:17:1d:32:cf:ab:d5:e2:13:
9e:3c:4e:55:4c:63:c2:86:bf:f1:d6:ef:83:6b:0d:
61:f5:9a:b9:97:e3:7f:22:0d:e9:a4:c2:b0:72:ab:
9c:ae:52:da:c7:00:65:01:a7:23:ab:0e:91:ff:82:
06:de:11:67:d6:0d:df:54:0f:b0:c8:d2:1f:c1:2e:
43:92:95:0a:23:71:29:19:de:77:54:5d:eb:53:65:
1b:18:ab:bd:2d:c4:6c:80:15:7a:25:c1:29:06:76:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:F9:44:91:98:BA:FF:00:85:8D:AF:61:8A:E5:BA:86:86:94:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:3480::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:a7:69:bf:e4:f9:42:4c:2a:3f:6b:80:37:3c:50:79:f2:8a:
3f:72:32:97:52:d8:b6:a6:12:34:20:fe:fe:e5:1f:eb:f5:05:
57:90:bc:f4:d8:35:92:df:80:cf:6a:de:d5:2a:61:49:eb:40:
d3:0e:24:f3:71:19:ae:bc:30:55:4a:ec:f5:0c:e5:2e:6b:ea:
4c:c0:ef:c2:c3:3a:74:78:35:4b:fa:09:f5:3c:fe:99:79:4e:
ca:ce:29:eb:3b:e5:73:34:5b:a5:17:5b:7a:00:86:28:6a:f3:
fc:69:60:af:b6:5b:b0:6d:8d:a6:d7:35:ef:25:35:f1:45:ac:
d9:06:15:df:6c:cc:66:ef:ee:96:58:78:1f:fb:5e:57:79:10:
70:6e:97:78:50:53:f2:7b:91:b7:ba:5e:78:2c:21:14:22:ae:
6c:26:f0:1a:bd:97:f4:bf:94:72:23:d2:b4:b2:72:63:38:d8:
50:b4:ae:a7:27:6f:a0:1c:eb:c4:53:98:02:02:cb:e6:f2:4e:
80:f6:7a:66:7b:5b:1f:b2:3b:6f:fb:d6:8e:c3:9e:7d:e5:6c:
20:14:42:7d:82:4c:e6:62:12:e2:d8:39:3a:a6:52:74:8c:88:
5e:25:dd:94:7d:3b:44:7c:c0:1e:73:4e:52:e3:d7:97:a6:70:
e3:e8:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:09:46 2026 by rpki-client