This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa File: d0a0fc8b-92d9-3b76-b756-796441d174fa.roa (raw, json) Hash identifier: 6/ZgRyIldcZbnjsf4lCl7cUJth9B0BFn+DvSYNI7QDY= Subject key identifier: 54:2E:61:7F:6C:40:40:87:8D:62:A4:58:1C:C0:8A:74:D1:43:77:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C6192A483C2867FABC0DEC280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 30036 IP address blocks: 2604:2d81:600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:92:a4:83:c2:86:7f:ab:c0:de:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=e5846a99-b324-4911-8566-fd315a1e7141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:8e:f1:6b:8f:7c:76:c9:4e:a0:3e:d6:fe: 7a:12:57:60:79:3b:fc:14:67:3c:55:a5:87:d5:e8: 26:ee:93:7c:6d:f9:8a:5a:8f:a5:e8:49:38:09:a6: c9:45:96:79:df:21:ca:25:db:ff:55:64:74:ea:ee: 95:55:b6:11:d1:cb:09:b8:45:8f:f8:52:36:0e:8d: 8e:27:c7:5b:b5:1c:fb:56:8c:37:82:4d:26:8f:fd: eb:a6:95:21:82:0d:28:92:c6:9f:ae:a8:fb:cc:7c: 80:77:f4:de:e5:2b:65:42:64:dd:8d:04:38:f3:6b: d8:13:af:c2:dd:af:48:19:f5:4d:b5:29:3e:0f:fd: 6c:23:e6:a1:70:1f:c1:5a:05:25:e2:5a:73:a3:03: ae:22:61:77:dc:79:ac:b5:5d:97:dd:15:5e:ee:34: 78:26:00:2a:48:3f:e9:fc:cc:6e:a9:f5:42:41:1c: b5:f5:0c:f0:d0:d8:c2:f2:2f:c2:6f:71:80:5c:b9: dd:b2:17:06:43:cc:4c:7f:9e:62:fa:15:fc:50:38: 32:5c:de:2f:fe:94:a9:23:e6:08:2e:31:02:52:45: 21:02:be:88:fa:05:20:02:de:c8:a6:59:70:e8:e3: 19:27:54:84:f0:ae:20:47:41:a1:16:0b:9c:60:2d: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2E:61:7F:6C:40:40:87:8D:62:A4:58:1C:C0:8A:74:D1:43:77:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6c:cc:53:7a:03:f4:21:7f:30:0c:8d:9e:7d:47:f9:12:d4: 12:c4:9b:f2:d8:ef:75:b8:32:55:19:c9:e6:28:f7:af:df:2e: f1:db:79:22:17:46:0e:ff:ac:b2:81:13:22:3d:27:e0:34:fc: a2:6e:1c:3c:ff:ea:46:1c:53:b6:09:e4:1a:90:42:95:3e:a7: cf:f9:37:e6:e2:ca:13:b2:ec:c7:aa:a3:83:bb:ec:d5:e8:34: f6:70:ff:8a:c5:a8:12:5f:86:55:d7:07:e8:77:80:4a:8e:7d: 8c:0d:1f:15:10:5a:26:8b:4f:84:05:f4:32:81:68:74:1b:48: ca:60:5f:d7:a1:4a:53:03:32:31:14:d4:d8:18:6f:79:bd:91: 7c:56:4b:2a:dd:f2:7e:4d:28:62:ee:0c:fa:64:bd:01:81:86: 49:81:f6:97:d6:a6:5b:58:e2:89:01:fd:2d:64:9e:b2:c6:15: 69:f3:2b:59:4b:09:2b:c1:de:23:d5:11:c6:17:6d:e2:41:ae: b2:78:ab:4d:a0:25:6f:19:70:c5:23:ab:57:d2:e0:7b:b0:9d: d9:62:ac:f9:5a:4c:32:3d:20:cb:8f:4d:9c:13:55:9a:6e:dc: dd:e3:69:4f:c9:3b:e7:ce:a2:e4:7f:59:1d:82:2d:b7:44:22: ff:5b:09:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExhkqSDwoZ/q8DewoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk ZTU4NDZhOTktYjMyNC00OTExLTg1NjYtZmQzMTVhMWU3MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKqO8WuPfHbJTqA+1v56EldgeTv8FGc8VaWH 1egm7pN8bfmKWo+l6Ek4CabJRZZ53yHKJdv/VWR06u6VVbYR0csJuEWP+FI2Do2O J8dbtRz7Vow3gk0mj/3rppUhgg0oksafrqj7zHyAd/Te5StlQmTdjQQ482vYE6/C 3a9IGfVNtSk+D/1sI+ahcB/BWgUl4lpzowOuImF33HmstV2X3RVe7jR4JgAqSD/p /MxuqfVCQRy19Qzw0NjC8i/Cb3GAXLndshcGQ8xMf55i+hX8UDgyXN4v/pSpI+YI LjECUkUhAr6I+gUgAt7Ipllw6OMZJ1SE8K4gR0GhFgucYC1YiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQuYX9sQECHjWKkWBzAinTRQ3ftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhMGZjOGItOTJkOS0z Yjc2LWI3NTYtNzk2NDQxZDE3NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJszFN6A/QhfzAMjZ59R/kS1BLEm/LY73W4MlUZyeYo96/fLvHb eSIXRg7/rLKBEyI9J+A0/KJuHDz/6kYcU7YJ5BqQQpU+p8/5N+biyhOy7Meqo4O7 7NXoNPZw/4rFqBJfhlXXB+h3gEqOfYwNHxUQWiaLT4QF9DKBaHQbSMpgX9ehSlMD MjEU1NgYb3m9kXxWSyrd8n5NKGLuDPpkvQGBhkmB9pfWpltY4okB/S1knrLGFWnz K1lLCSvB3iPVEcYXbeJBrrJ4q02gJW8ZcMUjq1fS4HuwndlirPlaTDI9IMuPTZwT VZpu3N3jaU/JO+fOouR/WR2CLbdEIv9bCQ8= -----END CERTIFICATE-----Generated at Sun Jan 11 17:07:07 2026 by rpki-client