This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9de32f5-c2d8-34e0-b3e5-88d26c6f11aa.roa File: b9de32f5-c2d8-34e0-b3e5-88d26c6f11aa.roa (raw, json) Hash identifier: KkRga/HpB1s7KSSdy6GSEHOM8jQTL/YtXmpYCbfIlg0= Subject key identifier: 84:DE:1E:6D:E9:A9:54:34:32:2E:C1:3F:1E:16:BE:37:C9:9E:CA:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C7B35B5EA8AFD5C85835D2F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9de32f5-c2d8-34e0-b3e5-88d26c6f11aa.roa Signing time: Sat 10 Jan 2026 18:27:17 +0000 ROA not before: Sat 10 Jan 2026 18:27:17 +0000 ROA not after: Fri 10 Apr 2026 17:27:17 +0000 asID: 19905 IP address blocks: 2604:2d81:3780::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7b:35:b5:ea:8a:fd:5c:85:83:5d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 10 18:27:17 2026 GMT Not After : Apr 10 17:27:17 2026 GMT Subject: CN=179de935-a831-4093-83d0-51f0b995a9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:dd:83:ad:1d:b8:2d:87:e9:76:c5:b0:c4: 94:44:43:67:5e:b9:90:6b:ee:2a:8c:d4:de:ba:c2: 6f:35:fc:16:75:b8:0e:a6:5a:df:eb:3d:18:21:17: 61:c6:ba:e4:01:86:df:cf:3f:5a:c2:51:e1:c8:6a: 67:26:e8:5b:cd:41:44:c5:be:5b:08:0c:58:4c:7e: d8:56:b7:1a:8a:bc:23:cf:e4:3b:fc:97:25:80:55: 40:ac:b5:ac:81:ac:a5:1e:2d:a8:b1:66:03:15:9a: a9:b0:2c:ef:26:21:19:75:a9:d6:98:71:93:76:62: 74:99:46:9a:9d:42:c3:10:51:a9:19:c7:42:52:e7: 7d:04:5f:7c:db:7d:98:56:df:9c:ea:0c:dc:4a:ad: 4d:23:5f:4f:f2:fd:f2:9e:1a:36:9c:df:f7:42:bd: fa:ea:ca:12:3d:79:26:53:f7:ab:cd:b6:34:06:ee: 24:44:55:a3:0c:36:d0:29:fe:dc:41:6d:1d:01:4b: 3f:d8:e8:39:d0:15:24:42:f9:dd:b8:e4:64:94:11: 2a:2b:37:26:08:68:2f:0a:e7:37:9f:6f:05:59:4e: 0f:d8:cb:21:51:bc:ff:a5:2e:77:b9:ba:60:30:d2: a6:16:75:26:b3:be:41:ff:4e:79:87:20:f4:a6:fd: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:1E:6D:E9:A9:54:34:32:2E:C1:3F:1E:16:BE:37:C9:9E:CA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9de32f5-c2d8-34e0-b3e5-88d26c6f11aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3780::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b2:b3:fa:14:99:db:06:86:45:3d:8c:86:59:c7:fa:d4:12: 38:98:8e:8c:39:40:5b:e8:81:fe:6d:c0:d9:9f:87:5c:ce:97: d3:5d:79:45:83:0a:fa:75:32:1e:f9:b7:bc:ea:f6:6b:5b:51: f0:37:23:81:86:51:94:82:5d:47:20:c1:35:5e:45:aa:eb:eb: 95:46:1f:f4:45:0e:0d:85:ba:4a:ef:68:51:cb:5f:f0:35:ba: 28:21:3a:fd:e5:64:c7:cd:90:fa:f6:aa:3a:27:57:97:ab:b5: c5:3f:0e:81:44:1f:d3:d6:54:63:0d:ae:4a:b8:c6:a9:7e:1e: 11:8a:bc:33:a9:18:c7:a7:80:cc:e8:e6:8c:bb:8a:99:f7:a0: 2d:f0:f0:cb:62:5e:a5:4d:29:7e:34:cf:d6:d2:17:c5:f8:fa: 12:af:d8:5d:dd:2a:a0:43:e5:3e:c0:ab:fb:92:b7:d6:e1:83: 54:5a:21:17:a0:dc:f7:da:6a:f2:ef:29:e2:99:f5:fd:dc:dd: 29:d8:9c:0d:5a:76:60:83:d9:2c:ac:9a:c1:a2:d2:84:54:26: 1a:91:a4:bb:ca:c5:14:01:40:31:e3:9f:cf:6a:a9:d2:81:37: 16:4e:70:11:0e:d7:d2:79:64:ce:1f:13:e9:d4:72:7a:5c:83: aa:1f:eb:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx7NbXqiv1chYNdLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDExMDE4MjcxN1oXDTI2MDQxMDE3MjcxN1owLzEtMCsGA1UEAxMk MTc5ZGU5MzUtYTgzMS00MDkzLTgzZDAtNTFmMGI5OTVhOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzdg60duC2H6XbFsMSURENnXrmQa+4qjNTe usJvNfwWdbgOplrf6z0YIRdhxrrkAYbfzz9awlHhyGpnJuhbzUFExb5bCAxYTH7Y Vrcairwjz+Q7/JclgFVArLWsgaylHi2osWYDFZqpsCzvJiEZdanWmHGTdmJ0mUaa nULDEFGpGcdCUud9BF98232YVt+c6gzcSq1NI19P8v3ynho2nN/3Qr366soSPXkm U/erzbY0Bu4kRFWjDDbQKf7cQW0dAUs/2Og50BUkQvnduORklBEqKzcmCGgvCuc3 n28FWU4P2MshUbz/pS53ubpgMNKmFnUms75B/055hyD0pv270wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFITeHm3pqVQ0Mi7BPx4WvjfJnsqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjlkZTMyZjUtYzJkOC0z NGUwLWIzZTUtODhkMjZjNmYxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWys/oUmdsGhkU9jIZZx/rUEjiYjow5QFvogf5twNmfh1zOl9Nd eUWDCvp1Mh75t7zq9mtbUfA3I4GGUZSCXUcgwTVeRarr65VGH/RFDg2FukrvaFHL X/A1uighOv3lZMfNkPr2qjonV5ertcU/DoFEH9PWVGMNrkq4xql+HhGKvDOpGMen gMzo5oy7ipn3oC3w8MtiXqVNKX40z9bSF8X4+hKv2F3dKqBD5T7Aq/uSt9bhg1Ra IReg3PfaavLvKeKZ9f3c3SnYnA1admCD2SysmsGi0oRUJhqRpLvKxRQBQDHjn89q qdKBNxZOcBEO19J5ZM4fE+nUcnpcg6of6/o= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:07 2026 by rpki-client