This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa File: f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa (raw, json) Hash identifier: QH5m11k1EiWAuahXT+QVY5f7htuoMSBsHCN6fDH5Syg= Subject key identifier: 40:6B:F5:36:82:EF:B4:FB:50:13:16:53:2D:9A:14:70:26:CE:C4:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC03ACA87B67A1879DE420 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d81:300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:03:ac:a8:7b:67:a1:87:9d:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=c9204e9f-35eb-4c42-a254-a75e8aee8b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:56:1d:c1:2a:36:33:a2:b7:b8:55:db:a7: c2:cd:ed:ca:74:db:bf:56:7b:18:32:68:16:cf:a9: 48:06:f2:2a:53:25:89:ca:4d:f3:97:4c:f5:58:eb: 6f:ee:db:6e:7e:af:d1:0a:53:d3:07:c5:89:7a:c0: 23:77:00:dc:4a:3e:a5:fb:f2:ec:6f:00:df:21:0c: a5:1a:d0:fb:1e:2b:b1:8a:44:f4:3f:0f:f9:53:07: 2e:21:a3:d2:4f:f1:2e:80:c1:a1:35:f7:93:20:16: 1b:6b:1d:d9:6e:dc:27:bc:89:6d:bc:5e:c5:6c:1f: 49:1d:6c:62:06:40:1f:b2:58:ed:73:6f:3f:40:5d: 39:21:2d:17:5e:73:78:eb:a0:57:40:f6:f3:99:10: 1a:4b:6f:b0:c1:a6:15:9d:02:02:f8:2e:94:e0:54: f9:59:13:53:d0:c5:bb:fe:d4:77:5e:49:97:bf:c1: ad:8c:a6:b6:c1:49:04:e5:9e:7e:fd:f5:98:6a:6d: 65:6d:16:a0:c9:0b:86:f9:4f:6a:4d:bf:2b:de:29: 5e:99:31:ab:d1:29:7c:e5:97:88:6d:38:cd:af:66: a7:40:58:32:91:37:82:77:ca:4d:65:3d:08:e2:ad: 2b:7d:46:31:19:d7:d9:41:a7:d6:85:b1:da:e2:b0: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:F5:36:82:EF:B4:FB:50:13:16:53:2D:9A:14:70:26:CE:C4:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fa:a3:c4:a4:10:3f:c5:20:46:86:1f:fe:84:96:46:da:b7: 35:bd:8e:f0:54:c1:27:f5:17:b0:23:08:f8:38:62:16:26:c8: 31:01:b4:ea:03:18:83:ec:2e:c0:07:db:a8:b6:03:5e:76:5a: c3:85:bb:86:5a:03:10:29:6f:5a:a8:c6:34:07:f7:a8:c3:ff: 4d:45:d3:cb:54:e9:2f:26:96:5c:e5:5f:a7:f1:2b:5e:a3:a0: cb:ca:aa:54:f9:98:19:91:23:5b:6c:85:55:13:c9:0a:a6:cd: 9d:b6:5b:c5:cb:e0:29:8a:e7:64:d1:ab:02:cd:57:35:80:6c: 97:99:58:ad:f6:88:e1:77:35:8c:10:e3:0a:10:0b:1e:ef:8e: 59:89:59:b4:98:48:e8:ad:56:44:35:b7:65:2a:96:44:f8:2e: 65:69:fc:07:03:3e:1c:65:47:f6:b0:73:36:c4:7f:c2:3a:dd: 98:e5:8f:ce:9f:85:8b:a3:eb:7a:f5:bd:ca:8f:79:1a:c9:c9: 9b:3a:7e:5b:b2:ab:67:bd:04:ea:04:16:a2:c8:e8:65:3c:f8: b7:21:bb:1b:2f:99:08:19:f6:ea:2b:ee:d1:fa:a9:e5:d4:f2: 58:7f:fc:29:b2:1e:a1:3d:20:cd:86:18:03:7a:df:10:2b:52: 8f:ac:90:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC3AOsqHtnoYed5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YzkyMDRlOWYtMzVlYi00YzQyLWEyNTQtYTc1ZThhZWU4YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FVWHcEqNjOit7hV26fCze3KdNu/VnsYMmgW z6lIBvIqUyWJyk3zl0z1WOtv7ttufq/RClPTB8WJesAjdwDcSj6l+/LsbwDfIQyl GtD7HiuxikT0Pw/5UwcuIaPST/EugMGhNfeTIBYbax3ZbtwnvIltvF7FbB9JHWxi BkAfsljtc28/QF05IS0XXnN466BXQPbzmRAaS2+wwaYVnQIC+C6U4FT5WRNT0MW7 /tR3XkmXv8GtjKa2wUkE5Z5+/fWYam1lbRagyQuG+U9qTb8r3ilemTGr0Sl85ZeI bTjNr2anQFgykTeCd8pNZT0I4q0rfUYxGdfZQafWhbHa4rB5vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBr9TaC77T7UBMWUy2aFHAmzsQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg2NGQ2NmYtYTFiOS0z ZjhjLWE5YWYtNDRiNGVlODUxOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH/6o8SkED/FIEaGH/6ElkbatzW9jvBUwSf1F7AjCPg4YhYmyDEB tOoDGIPsLsAH26i2A152WsOFu4ZaAxApb1qoxjQH96jD/01F08tU6S8mllzlX6fx K16joMvKqlT5mBmRI1tshVUTyQqmzZ22W8XL4CmK52TRqwLNVzWAbJeZWK32iOF3 NYwQ4woQCx7vjlmJWbSYSOitVkQ1t2UqlkT4LmVp/AcDPhxlR/awczbEf8I63Zjl j86fhYuj63r1vcqPeRrJyZs6fluyq2e9BOoEFqLI6GU8+LchuxsvmQgZ9uor7tH6 qeXU8lh//CmyHqE9IM2GGAN63xArUo+skOg= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:39 2026 by rpki-client