This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa File: 043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa (raw, json) Hash identifier: yYJOXj1wO3zSK713mMY84qknlnRHBXZ1FH7Y61aRHA4= Subject key identifier: 62:40:19:F5:64:72:75:8D:C0:B5:50:1C:BD:D0:50:70:B2:63:69:42 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C48712BC6A56D38668A06BF40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2b:c6:a5:6d:38:66:8a:06:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=b89fe24b-0330-452c-bc95-2b6bf0804313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:1a:75:2b:bb:71:92:5e:a6:83:85:84:b0: 40:c3:ca:d2:76:4c:76:44:be:3a:ed:b0:0a:42:a2: 36:32:44:23:e1:38:20:fb:df:1b:17:41:d5:be:43: 9c:23:2d:37:98:cd:2d:2b:24:2d:e1:ef:74:80:e8: f4:e6:0c:cc:99:05:bc:73:1c:6e:a5:86:c7:20:52: 17:aa:33:4b:4c:71:e4:3e:31:05:94:a6:0a:3c:34: 6d:da:dd:d0:67:ef:bb:00:9f:c8:d6:62:15:16:f7: 96:06:76:a4:9a:5e:0d:89:0c:ce:39:21:e9:b4:18: bc:60:d0:88:e1:d9:2d:73:9a:6b:2a:cd:d5:11:fb: 84:4e:92:48:ba:8b:4c:56:da:d8:40:fd:95:2b:3c: 29:61:7e:f5:0c:ab:1a:59:18:84:ad:05:e3:14:8e: ed:bf:c0:db:f3:c0:0b:81:27:2c:c7:99:d3:d6:f2: c8:f2:47:5a:58:1b:f9:2b:ea:c6:b0:ac:c2:92:4b: f3:d9:ec:8f:62:3d:b4:fc:e8:3f:9a:07:47:f1:63: d9:a5:73:ec:b4:2b:b5:5c:4c:cf:7b:26:8c:a4:4d: de:c3:5a:52:9c:fd:75:31:b2:49:fb:6e:20:83:5b: 6b:34:ec:c0:44:7b:3d:4c:42:66:22:c2:23:ea:94: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:19:F5:64:72:75:8D:C0:B5:50:1C:BD:D0:50:70:B2:63:69:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:89:a5:96:5c:88:07:82:21:6e:c9:2b:9b:68:9c:9b:68:b1: 94:a1:1a:90:fe:34:0f:71:e7:2b:f7:95:0f:0b:2d:52:d3:0f: b0:64:31:b2:7f:be:a6:56:70:6c:b1:51:16:2a:7c:86:06:8d: b5:55:05:c5:c5:82:3b:f7:9d:73:46:84:21:7a:b9:b8:8f:7f: 10:c1:8e:bb:57:eb:e2:71:c9:79:f9:c0:6f:87:b3:34:7b:87: 15:9a:f8:ed:e7:71:a1:e7:b2:8c:45:30:29:ca:d6:8e:c1:11: 99:1f:0b:cc:2b:db:9b:a3:2e:3f:10:8a:1a:0e:c8:0f:94:b8: f0:6d:e5:54:13:59:75:ac:8c:65:bb:fd:50:c1:ad:4a:e7:c9: 29:ad:d2:77:5d:f2:7a:72:f9:bb:24:82:bc:86:71:e6:87:0b: 9b:0b:dd:1b:5a:14:62:9b:94:08:3c:16:6f:4f:1c:f8:cf:2b: 20:37:4f:84:a5:9f:67:79:2a:2d:b9:93:0b:23:bf:fb:82:31: df:a2:cc:90:aa:09:4d:4b:f5:60:78:68:16:02:48:30:3f:f5: 47:c5:08:c9:57:c6:e2:11:7f:ef:89:9e:46:02:94:e4:0f:1e: 06:3a:93:f3:34:09:ce:75:91:98:82:ff:8a:7d:1a:f6:74:16: 04:3d:32:2d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcSvGpW04ZooGv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk Yjg5ZmUyNGItMDMzMC00NTJjLWJjOTUtMmI2YmYwODA0MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q4adSu7cZJepoOFhLBAw8rSdkx2RL467bAK QqI2MkQj4Tgg+98bF0HVvkOcIy03mM0tKyQt4e90gOj05gzMmQW8cxxupYbHIFIX qjNLTHHkPjEFlKYKPDRt2t3QZ++7AJ/I1mIVFveWBnakml4NiQzOOSHptBi8YNCI 4dktc5prKs3VEfuETpJIuotMVtrYQP2VKzwpYX71DKsaWRiErQXjFI7tv8Db88AL gScsx5nT1vLI8kdaWBv5K+rGsKzCkkvz2eyPYj20/Og/mgdH8WPZpXPstCu1XEzP eyaMpE3ew1pSnP11MbJJ+24gg1trNOzARHs9TEJmIsIj6pSvMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGJAGfVkcnWNwLVQHL3QUHCyY2lCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDQzZTFkMWMtNzAzMC0z Y2VhLThlNmMtNmNiZTJkZTliNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgImlllyIB4Ihbskrm2icm2ixlKEakP40D3HnK/eVDwstUtMPsGQx sn++plZwbLFRFip8hgaNtVUFxcWCO/edc0aEIXq5uI9/EMGOu1fr4nHJefnAb4ez NHuHFZr47edxoeeyjEUwKcrWjsERmR8LzCvbm6MuPxCKGg7ID5S48G3lVBNZdayM Zbv9UMGtSufJKa3Sd13yenL5uySCvIZx5ocLmwvdG1oUYpuUCDwWb08c+M8rIDdP hKWfZ3kqLbmTCyO/+4Ix36LMkKoJTUv1YHhoFgJIMD/1R8UIyVfG4hF/74meRgKU 5A8eBjqT8zQJznWRmIL/in0a9nQWBD0yLQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:57:12 2025 by rpki-client