This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c409e4f2-a4b0-3d6d-b595-80c16a08bced.roa
File: c409e4f2-a4b0-3d6d-b595-80c16a08bced.roa (raw, json)
Hash identifier: DhzF0CBJSXbFTMdgMpl5SoWOrZpF2dUkoVxpUwm4v6k=
Subject key identifier: 94:58:D1:ED:E5:55:37:EA:88:E5:70:1A:71:7D:DA:52:9C:EB:95:B0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BDB9064F8CFF9433369449B40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c409e4f2-a4b0-3d6d-b595-80c16a08bced.roa
Signing time: Fri 14 Nov 2025 14:00:37 +0000
ROA not before: Fri 14 Nov 2025 14:00:37 +0000
ROA not after: Thu 12 Feb 2026 14:00:37 +0000
asID: 30036
IP address blocks: 2604:2d80:3780::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:db:90:64:f8:cf:f9:43:33:69:44:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 14 14:00:37 2025 GMT
Not After : Feb 12 14:00:37 2026 GMT
Subject: CN=e514d70c-dddb-4e73-9a72-81d23e761bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:f3:bb:7d:8d:68:b2:e5:82:1f:e7:c9:c6:
d3:fe:9a:c7:2f:b2:a7:2e:a6:4e:90:64:a0:90:4d:
72:c6:30:5e:4f:da:4a:9e:02:7d:a4:d2:4e:87:56:
1f:d3:60:6a:a0:13:dd:ab:54:9e:23:bc:9b:e6:f0:
6e:d1:35:4e:df:5d:52:cf:93:d0:56:f7:c7:66:55:
54:9d:b7:cb:60:84:15:ce:c3:25:5d:11:79:4c:f8:
25:c7:e8:29:85:a6:5a:41:21:8b:e1:fc:5e:cb:d2:
3b:99:67:8c:cc:01:9d:02:a6:68:0c:26:77:b2:10:
f7:02:2d:91:fc:e6:c1:0e:32:97:71:ba:32:e7:5a:
01:ed:fa:94:80:69:6a:b4:aa:e1:ac:d7:ec:c5:7c:
0c:65:5c:61:18:cf:20:b5:88:fb:bd:8c:4f:c0:23:
54:51:36:04:af:7c:a4:58:1d:d6:3a:6c:86:fd:66:
f1:92:a5:2f:c7:11:ab:8a:64:c6:72:bc:3f:f6:8b:
59:47:27:9e:f0:24:02:cc:f9:bf:5b:90:12:2a:ec:
68:03:bb:04:c5:6d:fd:7c:79:a3:e0:3e:7d:e4:22:
b1:00:ee:cc:01:59:5c:21:b3:7c:6f:54:92:80:3a:
3c:00:9d:71:e9:88:2c:67:78:51:a0:6b:a1:c6:14:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:D1:ED:E5:55:37:EA:88:E5:70:1A:71:7D:DA:52:9C:EB:95:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c409e4f2-a4b0-3d6d-b595-80c16a08bced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3780::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:c8:a9:37:92:08:88:62:fa:79:b1:d2:e0:73:6d:c0:46:b0:
18:35:5c:26:2e:c2:2b:52:83:fb:94:06:d9:ff:0b:2f:ce:60:
18:c2:fc:14:3c:d1:76:b1:8a:f5:ac:c5:36:52:c6:ba:d0:cf:
76:d8:12:45:f0:87:4b:41:c8:5f:a7:87:0e:02:07:f3:c4:1c:
81:45:ca:60:c1:b9:04:43:96:92:67:cc:18:39:18:4e:7c:c3:
49:c4:d9:33:98:46:f8:13:0e:97:71:19:3a:34:be:21:8e:d3:
19:b3:66:8e:e3:fc:ee:98:71:8d:32:00:1c:b4:d4:82:31:e9:
44:29:46:95:6c:0a:3d:33:57:73:ef:25:18:c7:db:94:c2:2b:
ac:b9:e1:22:85:28:af:44:ca:d7:c2:e6:20:70:bd:ac:f5:4f:
22:e4:21:b1:d7:10:f1:05:19:dc:29:ed:d7:33:c0:e5:02:f3:
69:6d:f5:5b:85:53:27:44:0f:af:fd:b0:36:86:44:fa:fd:a5:
2e:85:f0:c6:64:4a:b8:94:c0:14:61:97:b2:4d:09:50:96:a7:
9f:cd:5f:de:5d:2b:fb:22:bb:0e:bd:ac:8a:4e:52:80:dc:dc:
b7:5b:b3:0b:dc:5f:0b:42:d0:ee:7c:59:cb:48:2f:37:9f:ef:
c4:20:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 12:12:20 2025 by rpki-client