This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
File: db659dcb-53ca-380c-8090-293e02fbc7ce.roa (raw, json)
Hash identifier: I1NJSqk+P/O/GoZd2eQeJE9zXtqVyZgKNACQHNS8tRs=
Subject key identifier: BA:8A:3E:1A:43:77:E9:EA:B7:5F:57:09:F8:65:48:26:97:C0:33:1F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C794C23FB6553B31A275E3CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 2604:2d81:1d00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:23:fb:65:53:b3:1a:27:5e:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=6a10090e-dfe5-44d1-a17e-9dbf3b839382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:6a:35:d6:7e:d8:77:4c:04:3b:aa:fe:2b:
43:d7:6d:5f:56:83:ad:24:01:0a:43:fc:a0:64:0c:
d4:0d:d0:41:81:4d:95:af:e2:95:48:6f:93:bc:74:
1e:92:90:c3:7c:18:00:84:a0:1a:ba:31:1c:87:e9:
9a:e2:a3:b2:b5:44:56:3a:46:a9:4b:b3:32:76:c4:
79:4a:26:c6:d5:a0:10:3e:56:cd:72:c9:9b:b7:83:
d2:f3:1a:ce:06:5c:17:b9:e5:58:74:ad:13:26:46:
12:7d:fe:87:41:4a:09:55:a8:e2:e0:94:cc:98:61:
02:84:31:9e:b7:2b:eb:7f:a6:ca:c5:a4:86:4c:ab:
49:88:bc:ee:a7:ca:b5:f7:d9:34:5b:d0:99:3e:2d:
20:15:3d:eb:a2:91:af:7e:cf:54:dc:50:3e:43:0c:
a9:e2:33:83:c2:e4:4f:8b:f2:d9:7a:90:83:b2:1d:
17:56:32:fe:33:4c:ef:b2:9f:63:17:88:18:de:1d:
79:9b:fa:b3:0e:37:f7:47:24:34:2b:47:ea:85:b5:
49:47:db:88:11:5c:ec:d1:83:2d:1b:54:ab:08:81:
a3:15:3e:0e:aa:c1:fd:6c:3b:de:ac:e0:7e:c4:bc:
bd:8a:22:8e:13:30:f3:11:30:fe:35:c9:47:82:57:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:3E:1A:43:77:E9:EA:B7:5F:57:09:F8:65:48:26:97:C0:33:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:1d00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:00:39:25:61:6e:a6:9d:83:da:1a:fe:07:8f:e9:fc:15:20:
f4:5a:ff:2b:86:36:8b:64:6c:6a:ae:d6:a3:cb:63:1a:a6:f8:
2c:75:24:c2:a8:43:85:eb:70:2b:c6:31:2a:a2:4b:ea:57:d6:
a2:62:56:bb:27:f9:8d:81:1f:c0:d2:61:49:23:c2:4e:a3:bc:
0f:44:3b:95:8d:41:d6:b2:15:aa:6d:31:4f:53:95:e1:5c:b9:
46:f2:6a:02:46:e7:32:ce:d4:09:e1:a9:9a:67:5d:6d:01:8c:
a8:a3:37:2b:39:e2:d6:ce:6c:f4:df:5d:7b:0c:37:8f:e1:53:
ba:fe:12:9f:24:6a:ad:14:7d:28:af:e1:d9:73:e7:fa:0f:ae:
65:a0:41:a5:2b:14:17:6a:c0:ef:c7:1f:0d:6b:ad:b0:d5:a7:
ba:2f:43:64:8e:9a:3c:a1:f3:6a:d1:e3:f5:79:c7:0e:d6:60:
e1:54:40:63:9f:32:dc:85:dc:08:57:2b:fd:ab:45:d1:45:45:
40:aa:1c:c3:1a:98:3b:43:ef:df:8c:5b:c1:58:8a:57:93:88:
be:bf:35:35:fe:95:35:56:d5:5d:ff:8c:84:eb:52:12:42:dd:
4a:4e:16:8e:b8:78:ee:89:80:5e:ec:00:f0:d8:14:2c:e5:b6:
85:56:06:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TCP7ZVOzGidePMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NmExMDA5MGUtZGZlNS00NGQxLWExN2UtOWRiZjNiODM5MzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C5qNdZ+2HdMBDuq/itD121fVoOtJAEKQ/yg
ZAzUDdBBgU2Vr+KVSG+TvHQekpDDfBgAhKAaujEch+ma4qOytURWOkapS7MydsR5
SibG1aAQPlbNcsmbt4PS8xrOBlwXueVYdK0TJkYSff6HQUoJVaji4JTMmGEChDGe
tyvrf6bKxaSGTKtJiLzup8q199k0W9CZPi0gFT3ropGvfs9U3FA+Qwyp4jODwuRP
i/LZepCDsh0XVjL+M0zvsp9jF4gY3h15m/qzDjf3RyQ0K0fqhbVJR9uIEVzs0YMt
G1SrCIGjFT4OqsH9bDverOB+xLy9iiKOEzDzETD+NclHglcy1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLqKPhpDd+nqt19XCfhlSCaXwDMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI2NTlkY2ItNTNjYS0z
ODBjLTgwOTAtMjkzZTAyZmJjN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB4AOSVhbqadg9oa/geP6fwVIPRa/yuGNotkbGqu1qPLYxqm+Cx1
JMKoQ4XrcCvGMSqiS+pX1qJiVrsn+Y2BH8DSYUkjwk6jvA9EO5WNQdayFaptMU9T
leFcuUbyagJG5zLO1AnhqZpnXW0BjKijNys54tbObPTfXXsMN4/hU7r+Ep8kaq0U
fSiv4dlz5/oPrmWgQaUrFBdqwO/HHw1rrbDVp7ovQ2SOmjyh82rR4/V5xw7WYOFU
QGOfMtyF3AhXK/2rRdFFRUCqHMMamDtD79+MW8FYileTiL6/NTX+lTVW1V3/jITr
UhJC3UpOFo64eO6JgF7sAPDYFCzltoVWBrU=
-----END CERTIFICATE-----
Generated at Sun Jan 11 15:45:02 2026 by rpki-client