This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa
File: af258b90-914b-332d-8f1a-c71ceb351383.roa (raw, json)
Hash identifier: pe7EyQkw+WWwzMhX8O8r6BIXZ2sOSKuowe7azxgYglU=
Subject key identifier: 18:2A:38:CB:96:AF:56:96:58:D0:B3:C5:06:C0:AB:23:BF:66:FC:7C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BCF0070C04C113FF95D5EA780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa
Signing time: Mon 10 Nov 2025 02:00:31 +0000
ROA not before: Mon 10 Nov 2025 02:00:31 +0000
ROA not after: Sun 08 Feb 2026 02:00:31 +0000
asID: 19905
IP address blocks: 2604:2d81:d00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cf:00:70:c0:4c:11:3f:f9:5d:5e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 10 02:00:31 2025 GMT
Not After : Feb 8 02:00:31 2026 GMT
Subject: CN=72156913-91e2-456a-bc22-144e77a2fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:3b:98:15:b7:6d:38:d1:78:d8:de:b9:54:
4c:9b:3b:49:8f:01:fb:73:34:f6:1c:76:c3:6c:ea:
3c:c1:5a:5e:31:12:80:dc:2c:eb:f5:fb:a5:c3:cc:
3c:c5:ea:a7:94:4b:2c:76:6e:00:d6:e7:a7:72:ef:
43:86:b9:37:f4:fe:8b:cf:12:0c:79:1c:26:2e:ab:
c6:bd:37:6c:8b:a9:82:bf:82:58:92:b7:b0:76:a3:
9a:77:9c:92:25:bc:3e:51:a0:35:01:93:bb:1d:4a:
30:db:ed:58:ea:f2:15:dd:b7:a1:1e:45:8a:98:f3:
86:b1:37:9a:07:0d:88:df:ae:79:fe:ff:93:7b:20:
c3:18:7c:a1:fa:13:19:e9:fe:e4:ab:53:57:22:1f:
76:22:25:4a:24:0a:71:63:43:db:02:a9:a0:75:78:
66:2b:54:9d:4a:ad:3e:5e:ea:36:b4:7f:2a:d2:ef:
3b:d9:b1:5c:5a:ff:48:b4:cc:75:cc:a2:77:b3:de:
6d:3a:23:c6:1e:fe:4c:9c:1d:ff:0b:1b:6f:09:12:
88:ea:f0:d3:67:c7:64:72:62:ab:c6:d4:4b:b3:67:
52:ff:7e:21:c6:6a:ad:94:1b:3d:60:da:2f:da:bf:
1f:52:ad:74:75:f3:5a:34:9a:a9:b1:83:c4:31:a4:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:38:CB:96:AF:56:96:58:D0:B3:C5:06:C0:AB:23:BF:66:FC:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:d00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:dc:d6:bc:44:12:ea:11:9b:c8:15:70:cd:5b:18:e4:3b:88:
fb:3d:90:b7:06:a8:cb:67:69:53:09:4c:68:fc:9b:a5:ba:25:
19:b1:3d:db:67:2d:e7:41:a5:c8:e9:8d:fc:99:71:68:1b:09:
08:6f:d7:14:b0:f5:9a:2b:99:ad:0f:b1:e5:f1:66:f5:de:d4:
da:e1:a5:61:bc:50:c6:69:47:ed:4b:a2:d8:bd:9a:50:70:8d:
f4:de:b0:3a:4a:70:32:b5:25:27:98:1a:a0:a1:e6:7a:f6:26:
1f:db:e2:21:48:b2:cb:58:9b:27:bc:a6:c2:56:74:17:1e:c5:
31:1b:cc:48:f6:7d:a6:94:a9:75:22:4a:12:87:2c:07:1f:84:
ae:ad:81:0f:7d:97:ee:03:84:2a:c6:8e:76:08:19:03:d3:81:
3f:ec:a9:81:90:60:83:9c:8e:58:9f:82:8b:dc:aa:fa:5c:5e:
34:a1:42:71:c5:a7:52:42:60:a0:2f:8e:82:20:96:78:17:61:
9f:e4:58:22:b5:57:82:81:18:25:24:4d:0e:b9:84:36:cb:0c:
f1:f3:e0:5b:1c:bc:59:98:df:bd:c9:a4:a7:21:ad:6d:7b:31:
f4:8a:cb:97:8c:e8:1d:35:ec:f9:9c:4a:eb:e9:89:5d:4f:0e:
49:10:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:33:49 2025 by rpki-client