This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa File: b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa (raw, json) Hash identifier: iH2hHj6Ub2NFfogbMLk7hFM/yafQ/fkqdWQ33PBqAIE= Subject key identifier: 65:14:19:AA:E0:7E:55:F6:62:47:D7:30:B4:CA:B6:0C:1B:55:D4:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BD3308A4A1BA0DD4266EE1C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 2604:2d81:2300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:8a:4a:1b:a0:dd:42:66:ee:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=af5f2e76-332e-49ba-926f-3fa4464ca62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:4b:ed:b0:09:e4:03:a6:34:8e:77:58:aa: e9:8e:9a:43:4c:29:82:1a:39:9f:25:b3:f0:32:96: fc:df:ac:cb:d5:79:d7:86:55:1f:3e:61:89:bb:ad: b4:d8:ae:71:64:12:28:ea:a8:9c:c2:7f:7f:89:e1: 52:05:8b:fb:48:f3:41:d0:f2:9a:a8:07:99:dc:da: 64:a3:be:01:61:be:86:0b:82:75:a3:dd:f9:fb:31: ab:7e:83:ef:6c:21:ba:43:7d:39:8b:45:cd:dc:80: 6f:a5:4f:ed:e1:52:f6:0c:5c:7a:06:05:d9:1e:3b: ad:d5:61:a2:a3:f0:38:78:a7:f0:b6:ad:58:15:8a: 3e:5a:ca:f4:d1:1c:5b:a6:51:5f:b4:3d:fb:15:40: 50:7f:b8:87:7a:95:0d:92:48:51:d5:ba:2a:06:ee: 7a:73:ab:c9:9d:2c:9e:97:9e:5b:1a:d0:a1:fb:2b: 22:9c:e3:c4:52:1b:b1:28:50:2b:4b:b7:99:9a:ba: c6:54:a7:44:45:8a:b0:81:54:45:68:6d:8c:a8:33: f8:b3:69:1a:57:fb:b2:ed:90:44:9c:02:18:e8:92: f4:e2:a7:d5:9c:67:23:ac:e0:cb:bc:46:0f:77:a5: 93:eb:63:e1:57:78:43:4f:9a:f2:30:65:9f:b4:aa: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:14:19:AA:E0:7E:55:F6:62:47:D7:30:B4:CA:B6:0C:1B:55:D4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b0:b6:5a:96:17:c8:47:58:c5:ea:8c:11:56:51:f9:c0:7e: 42:38:4e:82:8d:85:ac:b4:d6:dd:5f:48:d3:d9:00:d6:40:25: f4:ce:3b:41:56:90:47:22:19:6f:72:4b:4f:7d:11:e3:eb:b4: 24:f6:cd:d8:b2:b8:40:76:fe:59:6f:70:b1:e6:78:c4:09:fc: d9:80:dc:9b:f4:85:c8:81:78:95:35:29:ad:6e:2a:1a:1f:e8: b8:b0:de:52:a9:2c:c6:12:b5:92:94:01:61:6e:a7:d6:60:32: 92:c4:13:2f:55:f4:7c:59:4b:18:7a:66:92:ac:75:ec:d6:64: 71:ea:d4:fe:b1:5c:53:98:5a:22:f3:4f:c8:d3:27:12:ec:03: 7f:ce:4c:88:06:97:8e:6e:da:1c:59:60:32:dd:91:a7:ba:d0: c3:31:21:f7:8f:40:89:67:9b:a1:16:90:96:3d:e3:c8:a3:d7: c9:0a:fd:46:aa:54:f2:80:f7:ca:b4:d9:8b:90:65:c1:1e:38: 33:e3:57:5b:0a:8d:66:2d:52:d4:ac:02:78:37:11:1f:aa:8f: d9:5d:4c:4a:1c:3b:8a:cf:7b:52:a0:1d:ae:b0:8b:df:ab:53: a2:ba:c1:7b:ee:df:bc:a0:82:a8:2d:b3:9b:3c:e3:71:f7:57: 9b:b5:af:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvTMIpKG6DdQmbuHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk YWY1ZjJlNzYtMzMyZS00OWJhLTkyNmYtM2ZhNDQ2NGNhNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBJL7bAJ5AOmNI53WKrpjppDTCmCGjmfJbPw Mpb836zL1XnXhlUfPmGJu6202K5xZBIo6qicwn9/ieFSBYv7SPNB0PKaqAeZ3Npk o74BYb6GC4J1o935+zGrfoPvbCG6Q305i0XN3IBvpU/t4VL2DFx6BgXZHjut1WGi o/A4eKfwtq1YFYo+Wsr00RxbplFftD37FUBQf7iHepUNkkhR1boqBu56c6vJnSye l55bGtCh+ysinOPEUhuxKFArS7eZmrrGVKdERYqwgVRFaG2MqDP4s2kaV/uy7ZBE nAIY6JL04qfVnGcjrODLvEYPd6WT62PhV3hDT5ryMGWftKqzSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUUGargflX2YkfXMLTKtgwbVdSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjNmOWI2NDUtZjVmMi0z MzNiLWFiMWItMWFlMTg0MWIyZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2wtlqWF8hHWMXqjBFWUfnAfkI4ToKNhay01t1fSNPZANZAJfTO O0FWkEciGW9yS099EePrtCT2zdiyuEB2/llvcLHmeMQJ/NmA3Jv0hciBeJU1Ka1u Khof6Liw3lKpLMYStZKUAWFup9ZgMpLEEy9V9HxZSxh6ZpKsdezWZHHq1P6xXFOY WiLzT8jTJxLsA3/OTIgGl45u2hxZYDLdkae60MMxIfePQIlnm6EWkJY948ij18kK /UaqVPKA98q02YuQZcEeODPjV1sKjWYtUtSsAng3ER+qj9ldTEocO4rPe1KgHa6w i9+rU6K6wXvu37yggqgts5s843H3V5u1rzk= -----END CERTIFICATE-----Generated at Tue Nov 25 10:32:03 2025 by rpki-client