This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa
File: 9a85e671-84fd-37eb-a0fd-8de578b73198.roa (raw, json)
Hash identifier: nUt13s34LwLLnWmU9QD5GIumoc6EBAIMVWqogN2wxZE=
Subject key identifier: D1:62:AF:B4:80:FE:57:3B:B3:63:5A:B6:24:10:14:B0:41:CE:99:E6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C5A967AA3762F1F8AED3AE700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa
Signing time: Tue 30 Dec 2025 02:00:30 +0000
ROA not before: Tue 30 Dec 2025 02:00:30 +0000
ROA not after: Mon 30 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 2604:2d80:5f80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5a:96:7a:a3:76:2f:1f:8a:ed:3a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 30 02:00:30 2025 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=ea771b02-9861-4571-91ec-66d3526170d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:95:e6:71:85:ea:f1:5c:f2:64:d1:56:f3:
6e:38:49:84:44:8d:5b:ec:96:1e:5b:56:5e:5e:26:
f9:15:51:4b:6a:43:eb:6b:19:e2:23:a4:0b:1d:48:
1f:ff:6c:d2:39:2d:0f:b8:ac:13:10:12:dc:22:1f:
25:11:d2:47:8e:a5:76:7d:46:8b:5d:e9:06:8b:c9:
0d:3d:ed:42:e1:35:7d:62:9e:11:9a:c2:3e:4d:44:
0c:e1:47:fd:51:60:52:2a:59:12:d0:63:ae:ac:71:
79:2a:b1:a0:73:de:15:ae:0f:4e:9f:20:0b:35:79:
bb:37:72:4b:7e:0e:c6:65:d4:14:fa:b4:6b:3a:d6:
44:ca:09:13:6b:f7:6c:4c:f9:b3:63:10:74:64:75:
3c:e2:51:76:33:55:ba:93:65:1e:96:fc:0b:80:30:
73:0c:68:67:b9:c9:1b:50:bd:1a:a6:49:c3:af:4e:
18:a7:49:08:13:91:44:1a:57:d6:e2:4e:4e:50:32:
0b:7f:b9:02:db:3e:9f:30:e5:2c:17:2c:c5:d8:df:
55:0c:c0:b8:b3:1d:a0:3c:88:77:bc:44:c9:39:80:
7f:f7:c2:6a:1d:70:a2:16:42:71:83:e9:78:1d:71:
11:60:79:18:76:8f:31:5c:61:47:81:67:bd:82:f0:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:62:AF:B4:80:FE:57:3B:B3:63:5A:B6:24:10:14:B0:41:CE:99:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:5f80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ab:e9:43:03:3b:e8:4a:46:29:d7:42:b6:e5:49:ff:a8:31:
e3:6b:25:ba:99:9d:5d:f8:12:99:41:7a:ab:c1:43:53:2e:ac:
96:41:b5:d0:73:fe:e1:90:f1:cd:5c:78:36:21:90:40:80:0d:
f6:ae:f1:0a:05:fb:48:ab:3f:1f:ca:49:b2:7e:d6:76:e9:75:
a5:4e:8c:83:67:38:73:85:6e:66:86:b3:9e:8f:85:c5:96:1b:
4e:94:ff:fd:b6:07:7f:9e:f4:16:15:a8:55:99:ce:bf:de:b7:
06:7b:30:33:67:8e:aa:ec:2a:aa:0c:30:10:34:c9:c1:e3:68:
75:35:0d:64:c6:3d:05:40:eb:0e:bc:1f:54:9a:2f:b7:1e:3b:
01:e0:a6:d0:d9:3a:90:99:17:40:95:3a:f3:6c:ed:a1:5e:95:
7f:60:3e:3c:d9:d1:1d:22:57:75:08:d3:d7:7a:ea:59:b0:79:
2b:dd:2c:4f:0d:f2:fe:3f:84:90:6e:27:93:42:d9:7b:39:d3:
ec:ec:10:f2:b6:59:be:15:43:21:0d:87:ad:c6:94:6d:71:b5:
2d:93:49:aa:f6:2e:b9:08:a8:69:14:15:fe:bd:c3:a3:27:a7:
1b:35:7a:d6:e8:62:a9:60:5f:c9:15:26:d1:c9:90:d3:9a:28:
32:4b:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:47:00 2026 by rpki-client