This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa File: e08bba05-46f0-378a-a0e6-d067d719e9b8.roa (raw, json) Hash identifier: UjUJAiWP8XJiIKzJ36yiAKGp4kAKxULyyned58cSaXs= Subject key identifier: 60:B4:F9:CD:58:C2:84:78:6A:4C:E1:27:67:E8:2B:0C:68:35:6E:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BD1787839FFDD64E5E9445FA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa Signing time: Mon 10 Nov 2025 23:14:23 +0000 ROA not before: Mon 10 Nov 2025 23:14:23 +0000 ROA not after: Sun 08 Feb 2026 23:14:23 +0000 asID: 30036 IP address blocks: 2604:2d81:e00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:78:78:39:ff:dd:64:e5:e9:44:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 23:14:23 2025 GMT Not After : Feb 8 23:14:23 2026 GMT Subject: CN=2d8b09e9-87d6-4df2-8b03-b678cb883a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:d0:f8:bc:e6:01:72:d0:c8:9b:3f:26:bf: e4:32:0e:12:78:ff:99:2f:eb:54:ef:75:91:ff:33: a7:92:43:21:fe:99:b1:41:02:07:c6:f7:3a:23:fa: a9:2d:5a:95:b6:fd:9a:7e:36:30:1f:36:8f:a2:56: 26:89:11:20:86:fc:77:51:2e:0d:2b:2a:30:99:f6: 5a:12:76:35:13:fe:d1:fa:3c:cc:97:a1:a6:04:dc: 7b:db:e5:40:79:1b:f6:4c:c9:22:c3:07:04:48:06: 73:5b:10:a7:2d:a6:5c:98:2b:a5:57:15:2e:cf:39: a9:26:05:f5:36:bc:59:83:10:78:fd:37:3e:ca:ac: 77:53:bd:b6:4a:85:27:91:16:19:d1:3e:e2:0e:8b: 71:e2:2e:d2:49:52:58:6b:6e:7f:98:6b:9c:a2:5b: f4:b3:87:d5:45:16:3d:f3:02:25:4e:52:74:01:3b: cb:9a:36:c7:c3:43:01:80:00:30:85:94:86:22:4b: e1:dc:8e:68:77:83:55:a7:cb:1b:7b:1f:26:ce:6a: f8:22:39:5f:97:ef:8f:fb:a9:69:ff:73:4e:ab:e2: 0b:03:af:15:00:2d:aa:f0:4a:0e:11:2d:b4:af:4f: 7a:73:44:20:b5:82:e3:28:66:9c:fd:4f:3c:99:b7: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:F9:CD:58:C2:84:78:6A:4C:E1:27:67:E8:2B:0C:68:35:6E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:e00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:48:2f:87:78:9d:c9:f6:f7:e5:39:af:41:6e:05:d4:39:24: ca:c4:46:78:e5:23:0d:9c:01:38:f2:3d:17:8f:2e:1d:52:64: 6a:db:a7:93:70:97:5a:d0:b7:19:62:d1:a5:4e:18:1a:67:87: a0:96:b1:80:b9:4d:45:fe:1d:47:1c:1c:99:13:84:ae:47:e4: bf:8e:1b:64:60:f8:57:0d:cd:fd:72:d1:40:1b:d3:8e:0f:3a: 3c:69:df:38:fe:57:03:fe:f1:2a:b5:86:68:59:f3:3a:22:03: cb:fc:ae:32:08:64:6f:04:ce:cd:b5:f5:37:56:c3:53:87:86: 9c:e7:65:ca:8f:80:f4:aa:82:10:a0:d1:81:71:4c:2f:5a:06: 57:f2:3a:7c:f6:94:4e:14:4c:35:2c:3b:c4:ad:ef:66:2c:7a: 1a:82:f7:79:93:e0:49:23:d3:67:bc:2c:81:b7:ed:de:67:2d: bc:6f:6b:4a:00:07:2a:be:1b:ed:af:bb:d1:08:9b:d2:18:3c: 4d:cc:aa:01:9a:7d:24:d1:3e:17:76:c0:37:40:77:34:62:c6: 98:07:de:4d:4e:b6:a8:ff:2f:a3:63:ab:7f:2b:fa:9b:86:74: 4b:7d:9d:49:40:a5:da:57:bc:7a:3d:00:2e:ac:c1:e0:d4:c4: 3e:ce:ff:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvReHg5/91k5elEX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDIzMTQyM1oXDTI2MDIwODIzMTQyM1owLzEtMCsGA1UEAxMk MmQ4YjA5ZTktODdkNi00ZGYyLThiMDMtYjY3OGNiODgzYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVTQ+LzmAXLQyJs/Jr/kMg4SeP+ZL+tU73WR /zOnkkMh/pmxQQIHxvc6I/qpLVqVtv2afjYwHzaPolYmiREghvx3US4NKyowmfZa EnY1E/7R+jzMl6GmBNx72+VAeRv2TMkiwwcESAZzWxCnLaZcmCulVxUuzzmpJgX1 NrxZgxB4/Tc+yqx3U722SoUnkRYZ0T7iDotx4i7SSVJYa25/mGucolv0s4fVRRY9 8wIlTlJ0ATvLmjbHw0MBgAAwhZSGIkvh3I5od4NVp8sbex8mzmr4Ijlfl++P+6lp /3NOq+ILA68VAC2q8EoOES20r096c0QgtYLjKGac/U88mbef0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGC0+c1YwoR4akzhJ2foKwxoNW6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTA4YmJhMDUtNDZmMC0z NzhhLWEwZTYtZDA2N2Q3MTllOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQ4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpIL4d4ncn29+U5r0FuBdQ5JMrERnjlIw2cATjyPRePLh1SZGrb p5Nwl1rQtxli0aVOGBpnh6CWsYC5TUX+HUccHJkThK5H5L+OG2Rg+FcNzf1y0UAb 044POjxp3zj+VwP+8Sq1hmhZ8zoiA8v8rjIIZG8Ezs219TdWw1OHhpznZcqPgPSq ghCg0YFxTC9aBlfyOnz2lE4UTDUsO8St72YsehqC93mT4Ekj02e8LIG37d5nLbxv a0oAByq+G+2vu9EIm9IYPE3MqgGafSTRPhd2wDdAdzRixpgH3k1Otqj/L6Njq38r +puGdEt9nUlApdpXvHo9AC6sweDUxD7O/y8= -----END CERTIFICATE-----Generated at Tue Nov 25 12:10:16 2025 by rpki-client