This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa
File: b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa (raw, json)
Hash identifier: xxt6/sSG3nT3Eoq6m5mhrH/nZA45fBfSx6xKB+TD9D8=
Subject key identifier: E0:0D:11:39:F1:EA:E0:33:03:0C:EC:74:CA:58:C6:0D:2B:C0:50:15
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C5EC68F61FA0C3FB70F13EB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 30036
IP address blocks: 2604:2d81:2000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c6:8f:61:fa:0c:3f:b7:0f:13:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=8f9e4a03-8cad-4e80-9d42-2d54ee134a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:41:f3:d1:d2:fa:28:57:97:91:1a:f5:86:
f1:b2:21:63:50:8c:07:6a:1f:4e:ff:c5:2a:1a:50:
bb:e2:ac:11:38:84:2a:0e:9d:ba:83:f4:bc:f9:1b:
63:71:79:81:74:b8:ee:0b:64:8b:1b:75:a5:9b:5c:
a6:89:9b:f3:8c:4e:01:fe:9d:ec:f7:a7:c4:c4:61:
c2:34:da:c8:92:8a:cf:fd:f8:40:06:4d:5c:66:bd:
0c:14:2a:1f:84:d8:1b:6a:72:5d:9b:8a:e3:29:53:
4f:3b:fb:08:56:1d:22:93:be:b3:79:79:35:8d:d6:
03:03:49:22:e0:63:96:06:6c:94:9e:f7:a5:61:ad:
7e:59:3b:fb:ed:d0:b2:35:f0:b8:78:18:31:c3:b1:
bf:a5:8c:20:83:2a:8e:22:7f:a3:26:28:a4:bd:44:
19:fe:61:68:f9:29:9f:37:c6:7a:c5:a3:d1:27:d6:
d3:d5:7a:ad:13:8f:18:a9:11:be:63:87:33:10:07:
cc:e7:41:5c:bb:a5:37:79:79:4f:35:2a:f1:8d:4b:
54:14:6b:2b:51:bb:22:db:33:01:36:4c:b2:7f:c6:
8a:11:cd:35:a4:3c:68:d1:05:a7:0a:9a:52:2e:48:
8b:15:85:91:f9:09:6e:58:72:79:37:43:b1:89:06:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:11:39:F1:EA:E0:33:03:0C:EC:74:CA:58:C6:0D:2B:C0:50:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:2000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:36:f0:b0:c1:0f:eb:05:c8:e7:22:55:88:b6:37:84:03:d5:
e6:8f:a1:67:65:1e:d8:42:63:d4:2c:cc:53:30:14:92:9e:25:
de:ea:87:c5:46:c4:c8:1f:ce:d7:1f:b7:31:37:00:02:2a:74:
04:82:bd:ef:6a:a3:70:bb:18:17:9c:33:18:bd:fa:7e:b1:8d:
2f:ed:7b:95:e6:38:c6:33:1c:25:d7:bf:ba:ff:ad:dd:28:f2:
69:dc:a2:b1:ae:e3:0c:14:b2:cc:21:e1:da:a3:23:de:73:7d:
c2:43:e6:9c:68:fb:09:23:0d:bc:16:47:de:5e:69:0c:00:b6:
67:b2:ea:b9:cb:a9:9a:ed:2e:4f:dc:fb:14:d5:89:e3:10:4a:
a3:68:0d:96:78:53:f6:2d:90:e8:d8:f3:62:6d:de:4e:ad:29:
d1:74:b5:f8:eb:b9:58:a1:22:63:d1:4a:d3:d5:53:8d:42:a5:
49:79:00:11:13:d4:f2:ab:e3:07:38:b6:75:03:bf:dc:94:fe:
61:ac:46:6b:6a:41:39:98:c5:ed:18:3f:f4:22:c7:34:84:a8:
34:89:63:b7:f8:6d:e7:d8:31:3f:92:ba:8c:36:06:6e:81:5b:
c7:1c:90:f3:c4:f8:6b:dc:ae:65:9b:90:12:e5:0b:02:ab:3a:
a9:aa:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:31 2026 by rpki-client