This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa File: 844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa (raw, json) Hash identifier: qqkXda43tIB6QR8lEShvdLn7h49thU7+CTAksl1DSdY= Subject key identifier: 52:EB:B4:2F:66:B0:12:AA:92:68:A6:98:61:0C:F7:E1:D3:00:C5:5D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C19B53DFC7D03CC9B943CDB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa Signing time: Sat 06 Dec 2025 20:15:02 +0000 ROA not before: Sat 06 Dec 2025 20:15:02 +0000 ROA not after: Fri 06 Mar 2026 20:15:02 +0000 asID: 30036 IP address blocks: 2604:2d81:8000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:19:b5:3d:fc:7d:03:cc:9b:94:3c:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 6 20:15:02 2025 GMT Not After : Mar 6 20:15:02 2026 GMT Subject: CN=b01ad659-c226-4ffc-b7b8-dac68e7e3858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:ea:55:45:cc:cb:90:b7:a6:01:d4:25:09: 3b:0a:b5:e0:c4:b7:5b:27:08:2b:bd:04:50:12:53: 77:cc:48:66:eb:d7:34:fe:37:af:62:13:80:de:77: 4f:77:eb:c9:48:9c:2d:04:0f:71:f5:06:80:dd:1d: b7:83:09:52:f0:0b:17:ae:9f:6c:b7:75:fa:e7:f7: 29:d7:a3:d3:4e:80:35:84:74:15:29:52:9f:88:e9: fd:80:10:87:26:3d:a0:ce:83:41:01:58:40:32:c4: 15:cd:ad:78:92:44:23:dc:2e:fa:bb:b5:94:69:b1: 88:51:48:1d:6e:7f:91:c9:d2:ec:0a:10:56:5f:6f: 11:ee:e4:78:58:94:ae:ec:f1:cc:19:cc:7e:96:3a: 64:85:a1:d5:57:9d:9e:1c:d3:9d:70:bb:34:f1:0f: 44:7a:18:95:7c:f4:2d:67:19:9f:43:4d:e8:1e:39: e7:1b:a7:c1:0d:52:44:6a:8b:b8:11:78:0f:2b:cf: 81:ef:aa:b0:11:73:40:8d:91:25:9d:1e:e7:ef:a2: 8c:97:78:df:5f:a3:5a:a1:ca:4d:6b:8d:8f:74:6f: 79:71:a8:b6:f2:f9:89:13:a0:74:7e:23:7c:04:93: c8:4a:42:62:53:1b:c4:ce:67:bc:d3:55:6c:13:52: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EB:B4:2F:66:B0:12:AA:92:68:A6:98:61:0C:F7:E1:D3:00:C5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:8000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f6:34:74:4a:63:42:19:ab:5c:7b:6d:f1:53:58:19:bb:5c: bf:92:4f:66:73:bc:f4:b3:f4:b1:23:b5:44:79:60:07:66:2b: 25:99:7b:7b:76:a1:03:c3:ca:1e:ec:a8:16:df:88:cc:b5:28: ab:3a:05:c0:ac:05:97:77:3a:c9:5b:d4:a2:c3:1c:ad:24:4b: 6c:a4:0d:50:14:14:22:b0:eb:0a:3f:25:da:10:10:3a:09:08: 90:88:96:0e:61:b1:0f:89:a6:16:9a:6e:2b:d5:74:37:09:f3: b9:b1:13:7c:d0:b2:48:e5:48:60:aa:8a:41:42:cf:f3:45:d0: b4:fd:c8:1c:e5:53:76:ee:69:b1:fc:3d:64:02:f9:ae:f5:c8: 98:9e:a0:63:5b:a6:9f:e3:5b:5a:41:ed:e8:c0:38:65:a5:36: fb:ed:4b:de:e6:44:78:00:b9:2e:29:79:46:11:fd:0f:6f:03: 4d:72:03:4b:ba:ce:ed:a2:d6:4f:2a:79:f4:db:2e:7d:c5:bb: 87:b5:35:6b:48:e5:c1:be:93:5c:a3:2f:87:eb:91:45:c7:3b: 91:a0:db:9e:3e:29:ae:3d:cf:cf:27:d7:8e:0f:9d:0f:57:1b: 71:3d:85:e8:99:c2:fd:58:e0:b1:5a:6a:6b:4f:80:cd:61:9c: 4e:f6:1e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwZtT38fQPMm5Q82wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwNjIwMTUwMloXDTI2MDMwNjIwMTUwMlowLzEtMCsGA1UEAxMk YjAxYWQ2NTktYzIyNi00ZmZjLWI3YjgtZGFjNjhlN2UzODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D3qVUXMy5C3pgHUJQk7CrXgxLdbJwgrvQRQ ElN3zEhm69c0/jevYhOA3ndPd+vJSJwtBA9x9QaA3R23gwlS8AsXrp9st3X65/cp 16PTToA1hHQVKVKfiOn9gBCHJj2gzoNBAVhAMsQVza14kkQj3C76u7WUabGIUUgd bn+RydLsChBWX28R7uR4WJSu7PHMGcx+ljpkhaHVV52eHNOdcLs08Q9EehiVfPQt ZxmfQ03oHjnnG6fBDVJEaou4EXgPK8+B76qwEXNAjZElnR7n76KMl3jfX6NaocpN a42PdG95cai28vmJE6B0fiN8BJPISkJiUxvEzme801VsE1JxCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLrtC9msBKqkmimmGEM9+HTAMVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ0ZTNlMDctNjcyYi0z ZmI5LTlkOWEtNGQzNzFiMGZhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEP2NHRKY0IZq1x7bfFTWBm7XL+ST2ZzvPSz9LEjtUR5YAdmKyWZ e3t2oQPDyh7sqBbfiMy1KKs6BcCsBZd3Oslb1KLDHK0kS2ykDVAUFCKw6wo/JdoQ EDoJCJCIlg5hsQ+JphaabivVdDcJ87mxE3zQskjlSGCqikFCz/NF0LT9yBzlU3bu abH8PWQC+a71yJieoGNbpp/jW1pB7ejAOGWlNvvtS97mRHgAuS4peUYR/Q9vA01y A0u6zu2i1k8qefTbLn3Fu4e1NWtI5cG+k1yjL4frkUXHO5Gg254+Ka49z88n144P nQ9XG3E9heiZwv1Y4LFaamtPgM1hnE72Hok= -----END CERTIFICATE-----Generated at Sun Dec 7 00:27:23 2025 by rpki-client