This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa File: cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa (raw, json) Hash identifier: NneVX5dHhIHxkRM1o9tqOjPb5yjsdqW4WYLobHIYeSI= Subject key identifier: 5A:81:E1:61:E3:8E:FC:FD:E3:35:E0:68:54:9F:A1:9F:D6:F7:8F:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BEC50B8E26CE4170FE1617500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 19905 IP address blocks: 2604:2d81:1f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:b8:e2:6c:e4:17:0f:e1:61:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=10840a66-6d7f-4d15-9157-d7a0b5a4ce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:40:85:c8:aa:5e:33:0a:41:b5:8b:66:41: fd:0b:b9:49:f9:35:94:d7:82:c5:6f:4a:43:29:60: 3b:7a:4d:f8:69:7b:59:f1:3b:2c:d1:9e:9d:c1:86: 65:fb:1d:a0:0e:2b:39:e2:6d:28:43:40:7f:48:8c: e9:5d:fb:85:62:6f:03:e9:60:95:f2:c4:66:a8:6e: 90:7b:64:89:bb:b0:81:6f:de:8c:98:2e:36:2e:79: 3b:f2:e6:87:de:66:11:34:ea:7b:6f:64:9a:f6:c9: c4:4d:96:ac:5b:6f:03:c9:0b:3f:53:5a:aa:7d:cb: 42:3b:4b:88:c7:b5:6d:e7:6a:6b:c7:82:80:77:f7: 88:89:24:4d:9a:9f:55:10:74:b8:a4:ac:ad:48:7a: 75:3d:c1:db:16:66:f4:6f:c9:84:26:35:1b:3c:df: b9:1f:eb:ba:48:37:53:9c:ed:23:8b:60:4b:d7:a8: 44:8c:60:15:c2:90:0f:fe:cf:9e:2d:1d:56:9a:c8: 8c:5a:d9:cf:b3:39:87:cb:10:9b:89:b0:c7:f1:52: e3:1e:75:49:48:b7:d9:e2:c3:37:51:e3:96:b7:cd: f0:a6:5a:29:50:42:f0:27:03:48:71:94:d4:5c:e4: 45:d5:1b:db:bb:9d:35:f9:88:88:f0:13:74:b8:1d: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:81:E1:61:E3:8E:FC:FD:E3:35:E0:68:54:9F:A1:9F:D6:F7:8F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:09:df:08:6b:f7:3a:06:22:72:dc:f5:27:dd:cb:61:01:5b: ae:ba:80:42:0d:f4:da:10:9a:97:97:cc:82:39:01:42:be:7e: 2e:a5:c7:e1:81:8d:60:0d:63:45:06:2e:f1:6c:3d:7e:12:56: c8:13:f7:d6:b4:71:ee:a3:b6:a8:1f:31:d7:8f:78:f5:5f:c2: d0:07:56:21:17:b5:fb:4a:16:0d:c7:61:93:3e:6f:b8:e6:b8: ad:16:4e:25:25:a0:67:0e:65:85:c3:68:b4:8a:4c:bf:27:96: 30:17:f8:e2:3d:53:4a:0b:05:5f:42:62:1f:6e:48:ce:f5:1b: 59:5f:97:37:a0:b1:4a:ed:3f:58:ef:d6:42:4d:40:a6:11:28: bd:03:e0:22:c5:34:e8:f5:94:fb:06:bc:25:11:00:53:6d:36: 0c:28:28:45:cd:42:35:dc:6c:25:12:a3:25:ba:8c:8c:fa:2c: 83:31:9d:23:74:0c:bf:91:02:b8:5b:ae:62:e4:ce:98:91:be: 09:0b:45:86:5b:b0:6d:cf:6e:25:b8:a9:30:f4:f3:28:85:47: c5:77:c6:f0:13:4d:b6:65:cc:0f:59:19:02:84:46:41:b2:8d: bd:9f:fc:6e:47:c3:96:ed:d6:2e:e3:5c:e3:7b:e4:da:f5:41: 1a:dd:50:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvsULjibOQXD+FhdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk MTA4NDBhNjYtNmQ3Zi00ZDE1LTkxNTctZDdhMGI1YTRjZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jRAhciqXjMKQbWLZkH9C7lJ+TWU14LFb0pD KWA7ek34aXtZ8Tss0Z6dwYZl+x2gDis54m0oQ0B/SIzpXfuFYm8D6WCV8sRmqG6Q e2SJu7CBb96MmC42Lnk78uaH3mYRNOp7b2Sa9snETZasW28DyQs/U1qqfctCO0uI x7Vt52prx4KAd/eIiSRNmp9VEHS4pKytSHp1PcHbFmb0b8mEJjUbPN+5H+u6SDdT nO0ji2BL16hEjGAVwpAP/s+eLR1WmsiMWtnPszmHyxCbibDH8VLjHnVJSLfZ4sM3 UeOWt83wplopUELwJwNIcZTUXORF1Rvbu501+YiI8BN0uB3nGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqB4WHjjvz94zXgaFSfoZ/W949yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y0YzA0YTYtNjdmMC0z ZDZjLTk3ZTMtYTIzYTYyZjljOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsJ3whr9zoGInLc9Sfdy2EBW666gEIN9NoQmpeXzII5AUK+fi6l x+GBjWANY0UGLvFsPX4SVsgT99a0ce6jtqgfMdePePVfwtAHViEXtftKFg3HYZM+ b7jmuK0WTiUloGcOZYXDaLSKTL8nljAX+OI9U0oLBV9CYh9uSM71G1lflzegsUrt P1jv1kJNQKYRKL0D4CLFNOj1lPsGvCURAFNtNgwoKEXNQjXcbCUSoyW6jIz6LIMx nSN0DL+RArhbrmLkzpiRvgkLRYZbsG3PbiW4qTD08yiFR8V3xvATTbZlzA9ZGQKE RkGyjb2f/G5Hw5bt1i7jXON75Nr1QRrdUFg= -----END CERTIFICATE-----Generated at Tue Nov 25 12:11:33 2025 by rpki-client