This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa
File: 8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa (raw, json)
Hash identifier: VQO1pLGGiK9LAZyywn30uVo9k9DEIX+vR9UGCwRKfsw=
Subject key identifier: 78:44:7E:67:F8:EB:2D:54:CE:F9:F5:7E:5F:11:8B:44:C3:A2:28:53
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBDB456082C2FF20869B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2d80:bf00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:db:45:60:82:c2:ff:20:86:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=62e3d0c9-654f-4133-8aae-6abc8cd83067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:c5:56:13:d5:27:72:b7:97:03:57:39:9c:
f5:99:32:21:6f:3e:c3:6b:4c:45:fc:f1:6b:7d:0e:
4a:04:fc:bd:33:36:49:3f:e8:e5:44:cd:b4:7c:54:
b3:e6:fd:77:bc:a1:74:b5:7d:12:1f:53:d1:57:d4:
d7:51:ed:e5:fa:eb:cb:9c:1b:a8:96:68:c4:ad:c8:
5d:44:55:9e:98:a7:a4:9c:44:da:3f:0d:c3:1c:6e:
ae:69:d6:09:c6:cf:1d:e6:5a:43:48:30:e6:95:78:
c9:24:d7:9f:ce:35:a3:4f:e4:b3:75:ff:12:7d:d2:
3a:7c:d5:71:9c:b5:c9:db:61:72:22:bd:f2:6b:24:
0b:dc:b0:8b:35:f9:fb:e1:19:7a:ac:84:f8:12:29:
d3:8b:dc:f8:0e:8f:ee:ef:48:5b:f3:34:0f:17:d2:
aa:5e:4e:d7:99:dc:7c:8c:b4:37:ac:d5:72:75:97:
26:4d:61:8f:9e:75:dc:a6:77:d9:fe:cd:42:bb:86:
71:6c:62:73:17:8a:0a:30:4a:40:c8:6b:c8:5e:a9:
5c:c9:f5:f6:21:95:0e:83:40:41:f1:ff:ae:c5:47:
d7:25:07:ba:db:f3:cf:49:e8:e9:06:bf:65:1c:2d:
03:ab:db:49:ff:bb:35:be:70:e4:4e:f9:ee:97:60:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:7E:67:F8:EB:2D:54:CE:F9:F5:7E:5F:11:8B:44:C3:A2:28:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:bf00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9d:13:28:4f:46:39:0a:94:eb:6e:de:68:0b:82:14:e7:75:
e1:c6:01:cf:a5:08:98:02:47:c6:65:8e:9c:fc:13:43:e4:44:
97:63:e0:2e:d7:22:93:6c:25:ca:9c:23:67:7e:fb:33:2b:fb:
fa:eb:88:0a:7e:ab:1c:b9:4e:33:59:4a:6a:5c:7e:76:d5:2b:
85:c3:f1:7b:9c:c8:66:cc:ef:ab:f0:35:95:f6:d4:05:b5:00:
62:8c:70:1d:0f:ae:e7:ff:3e:83:9a:be:3b:e4:bd:bb:ce:0d:
37:ae:e8:d2:80:07:3a:bc:71:8d:8f:d4:27:a3:d6:8d:e8:a8:
28:82:36:b7:ee:35:a2:18:a3:7f:fa:3b:70:e5:23:95:39:5d:
1c:53:df:81:80:0f:48:79:a0:ba:11:23:27:66:d2:51:af:d9:
58:b7:fe:ee:c7:38:ea:bd:2e:28:fb:e1:9d:6d:ec:40:44:bb:
ba:4c:0e:2d:d2:83:9d:07:50:08:69:0b:25:24:cc:9a:ce:05:
da:c5:7e:19:89:5c:df:53:75:cc:b2:1f:16:6a:15:e5:67:b5:
30:da:11:ec:aa:32:ad:39:05:ff:6d:ac:f5:d7:a6:11:6f:a9:
61:0b:15:2f:c0:c7:47:05:a9:a8:f0:91:27:99:4b:87:a4:12:
7d:01:90:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC29tFYILC/yCGmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
NjJlM2QwYzktNjU0Zi00MTMzLThhYWUtNmFiYzhjZDgzMDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrDFVhPVJ3K3lwNXOZz1mTIhbz7Da0xF/PFr
fQ5KBPy9MzZJP+jlRM20fFSz5v13vKF0tX0SH1PRV9TXUe3l+uvLnBuolmjErchd
RFWemKeknETaPw3DHG6uadYJxs8d5lpDSDDmlXjJJNefzjWjT+Szdf8SfdI6fNVx
nLXJ22FyIr3yayQL3LCLNfn74Rl6rIT4EinTi9z4Do/u70hb8zQPF9KqXk7Xmdx8
jLQ3rNVydZcmTWGPnnXcpnfZ/s1Cu4ZxbGJzF4oKMEpAyGvIXqlcyfX2IZUOg0BB
8f+uxUfXJQe62/PPSejpBr9lHC0Dq9tJ/7s1vnDkTvnul2CZlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHhEfmf46y1Uzvn1fl8Ri0TDoihTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODI1OGJjMjktMmU0ZC0z
MmNiLTk0NDEtMDZjM2RjYWZhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgL8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEKdEyhPRjkKlOtu3mgLghTndeHGAc+lCJgCR8Zljpz8E0PkRJdj
4C7XIpNsJcqcI2d++zMr+/rriAp+qxy5TjNZSmpcfnbVK4XD8XucyGbM76vwNZX2
1AW1AGKMcB0Pruf/PoOavjvkvbvODTeu6NKABzq8cY2P1Cej1o3oqCiCNrfuNaIY
o3/6O3DlI5U5XRxT34GAD0h5oLoRIydm0lGv2Vi3/u7HOOq9Lij74Z1t7EBEu7pM
Di3Sg50HUAhpCyUkzJrOBdrFfhmJXN9TdcyyHxZqFeVntTDaEeyqMq05Bf9trPXX
phFvqWELFS/Ax0cFqajwkSeZS4ekEn0BkN0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:30:07 2026 by rpki-client