This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de50c26e-1b4d-3d6d-bb78-ba3406508069.roa File: de50c26e-1b4d-3d6d-bb78-ba3406508069.roa (raw, json) Hash identifier: rCCgUBW5RNOLgaL2WYr0x1etiqzktUfuHwAtXfai8RU= Subject key identifier: 8C:70:B5:54:3E:17:6D:FE:FC:98:B5:2E:AF:92:50:3E:43:33:C7:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF615F5509A18EA8C6CAD5940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de50c26e-1b4d-3d6d-bb78-ba3406508069.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 19905 IP address blocks: 2604:2d81:3000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:f5:50:9a:18:ea:8c:6c:ad:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=2bcb25bd-1244-425b-8cab-a9ae3a0f5b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:26:b0:fb:aa:b4:01:8c:09:d1:92:9e:15: 94:5c:76:13:80:05:1b:c0:59:e0:a8:67:91:c0:18: 56:88:15:bd:12:c9:62:5e:2f:5b:21:f0:2d:80:60: 19:3b:87:4a:eb:f2:27:80:5e:83:90:19:50:11:83: 47:9f:ce:c9:14:a1:b1:90:5a:ab:f9:82:0e:ff:b4: c3:aa:df:83:4b:2c:aa:64:22:f7:bc:e6:a9:7f:5b: 35:7d:98:13:b0:2b:46:c7:2b:40:b6:b5:14:08:13: ff:d4:8d:79:32:6d:18:85:42:19:76:38:76:3f:bc: 50:c6:bb:04:92:7f:2c:35:15:dd:2a:08:a5:17:6c: a9:5a:63:b8:68:f1:5e:08:f4:04:5a:c7:99:d9:49: 13:75:97:4c:0e:f0:98:50:3c:35:e0:04:69:c5:92: 9f:a6:61:44:10:5f:b5:54:9a:0f:68:29:c2:e1:1a: 9b:7c:08:b9:e9:53:8b:ce:29:93:32:b9:02:7f:7a: ec:88:67:d8:0a:2a:74:9e:1d:fa:7c:90:60:0e:4d: 70:13:56:6e:9b:63:6f:da:82:b2:3e:88:82:04:19: cf:22:1a:8e:3a:db:fb:99:9f:44:18:d4:25:30:52: 90:83:f7:59:fc:89:c1:24:1e:29:38:89:1e:3e:c8: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:B5:54:3E:17:6D:FE:FC:98:B5:2E:AF:92:50:3E:43:33:C7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de50c26e-1b4d-3d6d-bb78-ba3406508069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:df:0e:03:1f:98:cc:ef:a1:33:e6:15:70:8b:0b:bf:78:69: 0a:e1:5d:b2:eb:eb:70:1e:70:a1:96:7d:93:74:aa:e1:54:4e: 93:3d:2d:b0:3c:85:65:9b:96:31:f6:86:7d:d4:cb:35:ec:d5: 8e:05:63:7d:22:aa:c0:fa:cd:81:e9:84:6b:69:ee:d9:aa:15: ea:e6:8e:cf:fe:2e:62:9c:f9:b1:f0:cc:87:85:6e:94:19:73: 99:36:60:00:82:25:fe:55:24:97:45:d9:90:01:38:10:89:0e: d2:c9:a4:1d:01:bf:30:99:3a:ce:75:24:82:69:9d:a1:44:9f: c0:97:e9:53:92:a2:ce:76:8e:51:24:66:62:9d:eb:7c:a9:1d: 76:d6:f0:bf:79:f5:12:86:f3:48:05:27:fa:5a:b7:4e:89:f0: 9a:2a:5f:85:ae:fc:01:55:9a:58:e7:7b:c7:b0:5a:90:67:22: ff:bf:97:8e:f4:9c:59:5b:13:7d:8c:d4:83:9d:20:dc:6e:9d: bc:e7:a9:50:65:4d:7d:69:93:55:99:cc:60:ed:0a:1c:80:7e: d2:42:c8:79:f7:26:9b:e7:78:e6:98:e8:8e:55:8b:4f:15:00: 09:ac:10:63:af:38:77:9c:5d:82:da:9a:31:6d:f5:f9:52:1c: 58:84:ff:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv2FfVQmhjqjGytWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk MmJjYjI1YmQtMTI0NC00MjViLThjYWItYTlhZTNhMGY1YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsmsPuqtAGMCdGSnhWUXHYTgAUbwFngqGeR wBhWiBW9EsliXi9bIfAtgGAZO4dK6/IngF6DkBlQEYNHn87JFKGxkFqr+YIO/7TD qt+DSyyqZCL3vOapf1s1fZgTsCtGxytAtrUUCBP/1I15Mm0YhUIZdjh2P7xQxrsE kn8sNRXdKgilF2ypWmO4aPFeCPQEWseZ2UkTdZdMDvCYUDw14ARpxZKfpmFEEF+1 VJoPaCnC4RqbfAi56VOLzimTMrkCf3rsiGfYCip0nh36fJBgDk1wE1Zum2Nv2oKy PoiCBBnPIhqOOtv7mZ9EGNQlMFKQg/dZ/InBJB4pOIkePsjOeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIxwtVQ+F23+/Ji1Lq+SUD5DM8fcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGU1MGMyNmUtMWI0ZC0z ZDZkLWJiNzgtYmEzNDA2NTA4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLfDgMfmMzvoTPmFXCLC794aQrhXbLr63AecKGWfZN0quFUTpM9 LbA8hWWbljH2hn3UyzXs1Y4FY30iqsD6zYHphGtp7tmqFermjs/+LmKc+bHwzIeF bpQZc5k2YACCJf5VJJdF2ZABOBCJDtLJpB0BvzCZOs51JIJpnaFEn8CX6VOSos52 jlEkZmKd63ypHXbW8L959RKG80gFJ/pat06J8JoqX4Wu/AFVmljne8ewWpBnIv+/ l470nFlbE32M1IOdINxunbznqVBlTX1pk1WZzGDtChyAftJCyHn3JpvneOaY6I5V i08VAAmsEGOvOHecXYLamjFt9flSHFiE/5Y= -----END CERTIFICATE-----Generated at Tue Nov 25 09:06:35 2025 by rpki-client