This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8f4bd3e-9533-309b-b71f-02af76018c0b.roa
File: d8f4bd3e-9533-309b-b71f-02af76018c0b.roa (raw, json)
Hash identifier: xwz1oa9IWHWWal/3SqRi1EsX1up4hzC3w+Fl7owSGOo=
Subject key identifier: D6:60:A5:64:41:79:96:3B:CE:32:88:CE:07:56:9D:78:BD:05:EE:AF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A690B22E1193DED084A100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8f4bd3e-9533-309b-b71f-02af76018c0b.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2d80:b900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:90:b2:2e:11:93:de:d0:84:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=0abdf566-f948-4868-8023-cb5557372857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:30:a9:91:9b:4f:bf:01:ee:e6:eb:36:d9:
34:96:2b:88:71:51:1b:19:da:82:35:7d:2e:11:ed:
12:29:bc:0e:30:31:73:0a:4a:61:c8:a3:ff:9b:2f:
42:fb:64:70:42:05:4c:82:89:af:32:99:33:e8:76:
e5:b1:24:3c:10:75:29:0f:5b:5e:89:95:bb:3f:c3:
19:24:47:d6:fe:7c:a9:1c:ef:c8:a7:52:08:78:13:
dc:ad:51:34:76:64:25:87:87:31:f9:6f:41:56:22:
8f:c0:cd:52:84:69:dd:86:61:c7:4b:b9:26:b4:e5:
96:47:85:32:79:d1:5c:61:9d:a1:28:94:70:49:1c:
5d:78:ab:30:d8:83:bd:7d:41:49:64:4c:29:f0:62:
58:7b:fb:a6:3b:cc:de:a2:84:cf:e7:50:30:b3:8f:
0a:7f:a9:bf:7b:d8:a6:0b:59:79:69:51:f5:9c:a0:
b0:e3:13:7d:59:5f:f5:1a:16:7a:98:80:92:3c:d3:
d7:9b:2f:b7:45:c0:a5:29:f2:47:83:34:c5:84:28:
75:47:2f:05:8e:ce:41:82:34:7e:bc:06:8f:e2:f8:
e5:5b:d3:04:0c:48:df:77:01:66:19:5d:0c:24:d2:
9b:51:6e:2d:f1:25:ef:db:45:a6:7c:7b:d2:7c:9c:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:A5:64:41:79:96:3B:CE:32:88:CE:07:56:9D:78:BD:05:EE:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8f4bd3e-9533-309b-b71f-02af76018c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:b900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c3:fb:2b:57:ed:15:88:87:0c:90:55:19:44:38:d0:25:7b:
eb:f3:4b:3d:c9:14:22:0c:01:7c:31:07:e0:6f:a6:fe:61:08:
8c:a5:be:87:23:43:0f:d7:5e:a2:c3:9d:a7:e0:72:91:59:fb:
50:7a:ab:6b:73:e5:1c:11:b4:7b:de:56:7c:18:df:1f:e5:3e:
cd:0c:36:e2:ff:fe:ee:e7:14:7f:3b:ad:31:59:f0:21:51:d0:
3e:ef:73:b3:e4:55:03:f9:33:4e:e0:21:40:9f:42:aa:9f:de:
5a:98:a6:45:0d:2b:30:2d:ee:23:c0:7d:35:0a:c1:8f:92:1b:
95:f9:0d:ae:f2:b4:32:be:1b:0f:e0:85:fd:1a:9a:48:a2:b9:
84:0f:b9:95:ac:59:ac:34:ba:43:5b:12:2c:39:1f:a1:b8:30:
15:9d:4f:29:ba:36:c2:ff:e6:7a:b9:c0:2d:71:02:99:d4:56:
1f:1c:5a:48:54:f2:80:76:99:e1:2b:ec:1f:6f:17:ca:af:6a:
5b:00:7a:37:69:be:55:76:a5:39:2b:31:cc:53:d4:fa:79:5c:
24:76:10:ee:88:96:52:ea:ab:0c:a8:d7:8a:d8:0f:0f:7e:67:
1a:d4:27:0f:45:66:13:8d:3f:cd:fd:73:08:ba:1e:e2:c1:6d:
3c:fe:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:15 2026 by rpki-client