This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa
File: b21d6727-3f00-3161-a176-3b74158a3ade.roa (raw, json)
Hash identifier: Fq1P62o/zqTwEs509AXhUVJbPgNs4xUw1YaC39iIUG4=
Subject key identifier: DD:1B:F5:24:C5:F6:9C:38:AF:49:E4:6C:3B:50:42:D9:64:98:35:FA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C1401C7BF3BDB29A48871C040
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa
Signing time: Thu 04 Dec 2025 19:14:23 +0000
ROA not before: Thu 04 Dec 2025 19:14:23 +0000
ROA not after: Wed 04 Mar 2026 19:14:23 +0000
asID: 19905
IP address blocks: 2604:2d81:f80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:01:c7:bf:3b:db:29:a4:88:71:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 4 19:14:23 2025 GMT
Not After : Mar 4 19:14:23 2026 GMT
Subject: CN=3aa80b24-f5eb-4e7e-86bc-b0330ac4c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:61:64:dc:2f:12:18:5d:bb:79:9b:c2:da:
e5:dc:f1:b7:00:02:eb:15:e6:86:d9:89:39:4c:9a:
86:69:58:8e:ad:69:cd:16:f6:d6:22:15:a9:88:22:
2c:09:b1:13:58:e5:3c:ec:15:a8:1e:90:de:d5:45:
2f:e8:7e:54:69:89:48:c8:18:b4:5a:6a:b0:7c:09:
eb:6e:62:ae:b7:c2:11:95:5c:89:b0:04:52:40:32:
34:00:af:ff:7b:33:32:7e:67:4b:f2:38:ec:da:30:
48:fc:dd:b9:1c:da:28:ad:17:47:58:00:7c:0e:43:
f2:10:32:84:67:09:9e:ee:d4:4b:03:ac:93:dc:40:
af:29:32:79:c0:88:74:90:87:62:cb:fd:2a:91:1b:
ef:a6:ae:7c:53:77:be:f1:a4:7c:a4:d6:e3:20:0a:
50:60:b9:7a:8f:3b:b6:0a:a9:a5:f3:22:94:22:89:
10:b2:67:02:13:d9:87:7f:69:9f:ae:a5:53:80:bd:
52:bd:da:ab:c9:35:b3:0f:b1:74:5f:55:79:85:2a:
d2:8b:98:04:32:f0:51:15:91:19:d9:f6:6a:26:dd:
66:1d:c9:33:4a:89:5f:5e:cb:ba:82:0d:02:cc:64:
45:17:eb:10:dd:e2:17:a0:2f:c8:64:d6:58:b9:a5:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:F5:24:C5:F6:9C:38:AF:49:E4:6C:3B:50:42:D9:64:98:35:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:f80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:0f:69:49:0e:67:b8:fd:20:09:12:28:2a:3c:4c:b1:d6:e0:
6b:f8:da:c0:79:0b:6b:66:bb:3a:57:6b:b3:f5:ec:54:f3:7a:
a4:8c:83:3b:61:c1:5b:fd:57:bf:4e:04:e8:9f:25:de:66:9e:
fa:80:99:b2:f6:c7:3e:aa:60:f4:69:63:c7:dc:13:f1:b9:f7:
12:5a:e5:13:cd:dd:bc:f1:97:27:79:77:5a:3e:b5:7b:96:86:
a6:d7:c0:04:bb:59:60:74:6b:7e:86:94:a6:d7:a4:bf:42:e6:
ce:76:62:14:63:d6:f2:bc:1a:23:42:c0:cb:06:5b:3f:40:7f:
00:e6:70:d5:e6:19:f8:bd:47:da:d9:96:06:a2:81:ed:8e:98:
33:3a:d4:ea:92:ed:72:30:e6:4b:eb:26:fd:d9:48:4b:1f:f4:
40:4f:ed:65:4d:77:ee:9b:ae:02:71:38:9f:2d:ec:d5:9d:5a:
8d:dc:14:0d:52:37:d8:18:75:ab:b0:e5:b5:4f:d7:18:36:09:
17:6c:2e:b7:f6:e0:b7:90:eb:5e:5b:e8:b7:59:90:5d:06:66:
8e:dd:ed:2b:77:9f:93:4b:bb:e8:b3:27:ce:ba:15:8e:d9:c2:
37:17:89:84:97:f0:2f:cb:49:36:30:44:57:bf:6b:c0:29:6c:
d5:82:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 22:10:24 2025 by rpki-client