This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
File: 0065fc65-bd2c-3357-b051-a0feb3c33a10.roa (raw, json)
Hash identifier: zkHikgW/Lm8IlIA+sEO90se6QPnCJn46zkksLdIR+xQ=
Subject key identifier: DA:F9:87:9C:E5:B8:63:B4:F1:DE:77:6B:4E:31:B3:17:ED:5A:94:AB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C37B1232DF0C456437E4630B3
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e88:9400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:23:2d:f0:c4:56:43:7e:46:30:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=07ca8762-7fbb-4de1-b8d3-72860b7ffc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:07:dc:62:ff:1b:cb:c8:97:2e:ff:07:00:
36:43:73:46:b5:c9:c0:55:82:b0:da:86:c7:22:41:
00:cd:b4:1c:e0:79:7e:aa:08:55:ff:ab:66:c8:35:
ab:2e:59:03:a6:fa:e1:74:d0:8f:61:fa:ee:a4:7b:
ce:e1:92:c8:cf:48:a4:16:4a:f7:a7:f8:a4:81:a1:
fe:d5:00:52:3b:12:a6:85:1e:c1:85:c5:43:7a:1b:
77:84:ee:cb:70:bf:b1:a1:ec:2a:6e:11:e2:b4:65:
ba:33:27:bc:ed:27:1e:a7:7c:f5:ae:94:8e:fb:e1:
2f:e4:bc:d5:a5:e5:e9:cc:9c:32:2c:1b:71:fa:4e:
c5:10:f9:ab:e7:a7:ac:91:34:5a:d0:f8:00:2d:fb:
67:aa:44:76:c5:ce:88:87:e0:fa:30:7f:33:c3:77:
95:f5:a3:9f:28:cd:2c:35:d9:63:08:a9:58:e8:94:
df:7b:da:06:8e:39:f0:83:73:db:c0:7d:0e:8f:95:
5f:3b:8d:98:64:97:43:28:ab:e9:e0:67:fc:15:0f:
fc:1a:92:fe:be:3c:74:31:0e:05:b6:10:48:9b:09:
79:49:0a:61:9b:2f:5e:9d:62:19:47:e9:01:2a:3d:
4d:8a:52:f9:bf:f9:2b:33:6f:89:7b:56:42:7f:67:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:87:9C:E5:B8:63:B4:F1:DE:77:6B:4E:31:B3:17:ED:5A:94:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:9400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:ae:bb:42:0a:89:4b:5e:44:7f:dc:18:f0:86:03:49:df:e4:
00:3d:a6:c1:a2:69:25:d5:fc:cf:c0:47:ea:33:e2:36:e3:ab:
9a:52:75:da:67:f4:80:40:e4:ee:a3:4d:e9:0f:5f:1f:af:f4:
8d:3e:23:84:82:79:96:56:2b:a4:5e:20:89:b3:3e:1b:87:e8:
7c:66:b3:44:ce:f1:e8:f7:d1:92:2e:35:d2:22:ec:f5:0f:aa:
28:7e:65:b8:af:cb:8e:a4:e0:f3:9e:e4:9f:2b:65:06:41:75:
7c:22:79:98:56:54:53:71:bb:6c:3b:7a:4a:cc:dc:3a:63:fe:
49:ee:91:6b:da:4f:36:da:53:4a:f1:af:74:c6:3e:5c:88:2d:
9b:4e:a0:11:0a:01:67:28:80:db:95:13:8b:c3:11:bc:a8:af:
bf:71:a1:b0:f8:d5:77:1c:8b:93:97:46:c1:75:1e:20:a0:06:
03:10:57:c2:61:16:42:9a:b3:39:fa:24:62:52:29:76:6d:11:
52:8e:19:f0:0a:b1:d7:8b:0f:a4:8a:ac:cb:cd:29:90:c7:bc:
ad:31:76:bf:c3:e6:ef:98:02:3a:e3:e1:e4:e2:d3:8e:84:e3:
ac:bf:df:ce:de:15:03:01:e1:06:65:62:85:3d:dc:02:18:63:
ee:33:74:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sSMt8MRWQ35GMLMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk
MDdjYTg3NjItN2ZiYi00ZGUxLWI4ZDMtNzI4NjBiN2ZmYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeYH3GL/G8vIly7/BwA2Q3NGtcnAVYKw2obH
IkEAzbQc4Hl+qghV/6tmyDWrLlkDpvrhdNCPYfrupHvO4ZLIz0ikFkr3p/ikgaH+
1QBSOxKmhR7BhcVDeht3hO7LcL+xoewqbhHitGW6Mye87Scep3z1rpSO++Ev5LzV
peXpzJwyLBtx+k7FEPmr56eskTRa0PgALftnqkR2xc6Ih+D6MH8zw3eV9aOfKM0s
NdljCKlY6JTfe9oGjjnwg3PbwH0Oj5VfO42YZJdDKKvp4Gf8FQ/8GpL+vjx0MQ4F
thBImwl5SQphmy9enWIZR+kBKj1NilL5v/krM2+Je1ZCf2er8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNr5h5zluGO08d53a04xsxftWpSrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDA2NWZjNjUtYmQyYy0z
MzU3LWIwNTEtYTBmZWIzYzMzYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnK67QgqJS15Ef9wY8IYDSd/kAD2mwaJpJdX8z8BH6jPiNuOrmlJ1
2mf0gEDk7qNN6Q9fH6/0jT4jhIJ5llYrpF4gibM+G4fofGazRM7x6PfRki410iLs
9Q+qKH5luK/LjqTg857knytlBkF1fCJ5mFZUU3G7bDt6SszcOmP+Se6Ra9pPNtpT
SvGvdMY+XIgtm06gEQoBZyiA25UTi8MRvKivv3GhsPjVdxyLk5dGwXUeIKAGAxBX
wmEWQpqzOfokYlIpdm0RUo4Z8Aqx14sPpIqsy80pkMe8rTF2v8Pm75gCOuPh5OLT
joTjrL/fzt4VAwHhBmVihT3cAhhj7jN0KQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:31:08 2025 by rpki-client