This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa File: be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa (raw, json) Hash identifier: CMTk/5YW94rtluWyCnxhng1KmGbqsH85jOHfRMMz1hY= Subject key identifier: 4A:30:FA:01:28:C5:2E:EB:B9:58:84:32:49:2D:75:8B:E6:6B:6C:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC1C92B28964C2B3FFF200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:9c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1c:92:b2:89:64:c2:b3:ff:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=492d14bb-dca0-43d0-af28-35c04085d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:24:5c:e6:05:f5:23:15:a3:ea:30:df:6e:31: 77:28:db:0d:0b:0d:32:a6:8d:61:c5:e3:f1:cc:1d: 4a:d5:1f:29:11:05:dc:d2:17:8e:da:13:26:a6:30: b8:3c:37:03:50:e4:d5:c0:10:63:ba:4b:50:ad:59: 19:2c:c0:20:d4:0d:1a:2d:08:27:1b:f2:52:74:f0: 02:a0:7a:00:4d:b8:d9:c6:7e:fb:36:a0:33:aa:24: 6f:21:a0:8b:55:eb:82:68:47:04:9d:b9:b4:e8:5a: 2f:3f:0a:1f:9b:e7:fc:02:1d:99:be:6c:c7:ce:9e: 28:62:b0:25:98:70:4b:bc:ae:6e:21:e7:e9:b6:21: ea:7b:1e:91:39:b8:41:5f:08:dd:e9:76:fa:e9:1e: 09:4e:e5:e8:74:0e:3a:fe:6f:08:ba:0b:6d:5c:42: 31:7c:ff:09:e6:1d:65:ee:bb:82:63:72:9a:72:ed: 0c:ed:74:05:91:03:81:19:cf:47:b0:37:6b:f5:87: 5f:b9:09:62:fa:70:9e:69:2f:57:9e:2f:49:ed:f4: cc:a2:00:68:4e:bb:a4:b7:bf:e5:3e:3d:9d:fc:90: 01:28:06:f0:ca:8e:40:07:4f:b5:08:3d:98:d0:e4: 61:01:75:e4:ae:fe:96:da:4d:f2:a1:46:43:da:fd: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:FA:01:28:C5:2E:EB:B9:58:84:32:49:2D:75:8B:E6:6B:6C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:94:97:20:c9:26:c0:e6:87:b8:04:f6:e2:35:c5:12:ab:c4: 7c:6d:bf:cb:13:e6:38:3b:90:9f:3a:5c:11:2d:84:08:a3:9c: b3:8a:c9:1f:56:39:68:59:87:bb:37:7a:66:e3:70:44:bd:09: b8:5d:a9:a1:20:b3:fc:9f:86:f6:f3:48:44:12:af:ef:64:30: 7e:cb:a3:3e:37:2f:4b:49:65:fc:25:91:2a:8c:d1:93:0c:bd: f6:20:73:78:e7:47:67:b2:0f:95:fc:19:ff:04:72:3f:10:69: 63:95:57:b1:23:c6:ae:c5:c6:14:ea:9e:c1:a6:a5:0b:9a:59: d4:17:5e:d1:fa:66:a2:0e:75:e4:cb:a6:ba:7a:92:da:ca:e6: 20:54:78:c8:e6:3c:43:d9:54:37:d4:8b:6a:7a:18:ed:15:94: 23:ea:6d:57:bc:14:24:99:03:c9:e9:da:e0:86:d2:92:55:1d: ee:88:d5:e8:f9:17:99:8c:7f:d2:23:81:4c:da:87:8b:33:ce: 68:47:b4:9e:c3:b8:7e:b6:64:1c:4b:d0:31:3e:2a:0d:87:ec: f6:67:d0:e3:82:62:97:70:f9:59:3a:0d:50:e7:ac:f8:5e:3a: 3f:b2:7f:99:2d:4c:a9:8e:94:99:22:c8:72:07:d4:1b:88:e3: 12:af:63:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3BySsolkwrP/8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NDkyZDE0YmItZGNhMC00M2QwLWFmMjgtMzVjMDQwODVkOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSRc5gX1IxWj6jDfbjF3KNsNCw0ypo1hxePx zB1K1R8pEQXc0heO2hMmpjC4PDcDUOTVwBBjuktQrVkZLMAg1A0aLQgnG/JSdPAC oHoATbjZxn77NqAzqiRvIaCLVeuCaEcEnbm06FovPwofm+f8Ah2ZvmzHzp4oYrAl mHBLvK5uIefptiHqex6RObhBXwjd6Xb66R4JTuXodA46/m8IugttXEIxfP8J5h1l 7ruCY3Kacu0M7XQFkQOBGc9HsDdr9YdfuQli+nCeaS9Xni9J7fTMogBoTrukt7/l Pj2d/JABKAbwyo5AB0+1CD2Y0ORhAXXkrv6W2k3yoUZD2v3W/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEow+gEoxS7ruViEMkktdYvma2z8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU5YjQxMWYtMGVkMS0z NzU5LTk0MTUtZDNiNTdiOWYzZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuUlyDJJsDmh7gE9uI1xRKrxHxtv8sT5jg7kJ86XBEthAijnLOK yR9WOWhZh7s3embjcES9CbhdqaEgs/yfhvbzSEQSr+9kMH7Loz43L0tJZfwlkSqM 0ZMMvfYgc3jnR2eyD5X8Gf8Ecj8QaWOVV7Ejxq7FxhTqnsGmpQuaWdQXXtH6ZqIO deTLprp6ktrK5iBUeMjmPEPZVDfUi2p6GO0VlCPqbVe8FCSZA8np2uCG0pJVHe6I 1ej5F5mMf9IjgUzah4szzmhHtJ7DuH62ZBxL0DE+Kg2H7PZn0OOCYpdw+Vk6DVDn rPheOj+yf5ktTKmOlJkiyHIH1BuI4xKvY14= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:41 2026 by rpki-client