This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05af1b13-24bb-3b08-a77a-e5447a254280.roa File: 05af1b13-24bb-3b08-a77a-e5447a254280.roa (raw, json) Hash identifier: q0mOcIHJwiU3N+mFMlfDw4ObjiF2snu9/GmydRtCoTM= Subject key identifier: 41:D3:A4:CC:02:F3:33:C7:BD:24:B3:F2:D9:22:E0:E9:43:5E:22:5F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B1224C745BA96E7AB597C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05af1b13-24bb-3b08-a77a-e5447a254280.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:22:4c:74:5b:a9:6e:7a:b5:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=17a662ff-3b77-4ca8-a04f-296f77e648e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:7c:d0:12:76:e9:1a:dd:f9:ef:4e:3e:0c: d3:d8:b2:d5:66:be:60:63:15:17:06:be:c2:29:1e: fe:97:ac:bb:6b:3c:97:98:d5:9d:55:a2:60:b0:2f: 46:40:09:69:10:89:3a:8c:d7:79:45:e6:30:11:8f: 45:64:04:94:25:e1:38:92:75:aa:01:ea:e5:a9:5b: 8f:fd:b6:8b:01:4f:06:56:5e:60:4b:4a:b4:05:a9: 97:21:b7:47:7c:a4:7d:2c:16:45:47:ca:85:06:1d: a2:78:ac:1b:da:fe:df:e8:a8:d0:30:52:b6:86:42: c2:66:06:a6:ef:d3:2c:0b:17:1f:49:83:7e:ee:62: 3c:58:32:0e:97:45:12:d2:e7:16:b0:35:39:e8:91: a0:a2:5c:ce:27:f7:70:2c:7d:cf:6d:61:78:ae:58: ff:e2:52:18:7d:92:05:82:d4:2e:2d:ee:a6:f1:b2: 79:fa:c9:b3:92:56:d4:b1:08:a7:a9:ab:71:7d:c2: d0:a8:48:98:78:cc:88:50:2e:e8:94:42:70:4a:91: 46:64:13:44:46:eb:32:5b:68:a5:68:00:b0:f7:e0: 06:8e:8d:80:c6:f8:be:65:27:f0:6c:6a:39:1e:7e: 2a:b9:9f:c2:d3:75:b3:d2:cb:5c:2e:a6:6f:c1:fa: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D3:A4:CC:02:F3:33:C7:BD:24:B3:F2:D9:22:E0:E9:43:5E:22:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05af1b13-24bb-3b08-a77a-e5447a254280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ab:82:ea:97:75:1f:4a:f5:6c:f9:2a:41:5e:87:97:e6:c7: c7:c5:9e:19:c4:93:87:46:07:85:9c:ff:4c:5f:3c:0f:46:f6: 9f:50:cf:10:e5:e2:59:f8:fe:22:52:f9:3e:b2:e1:40:20:76: 43:32:d1:a0:35:a5:95:71:03:70:9a:1a:8c:b2:97:f1:43:2e: eb:8d:3a:d1:0d:0c:3e:1a:ca:e7:ea:d3:df:34:03:26:56:3d: c1:10:7f:9e:ff:52:cc:41:61:6d:4e:66:48:08:43:cd:90:e5: bb:78:6b:76:bd:a7:f1:43:b6:03:da:50:48:86:56:36:28:12: 41:0f:0d:2d:09:44:c5:c4:6f:35:ee:4f:dd:a9:63:a7:23:d8: e7:60:48:4c:15:93:25:54:a6:3e:b5:11:a4:d6:87:e5:bf:54: ff:99:a2:48:f6:0d:ae:b5:4f:01:85:32:14:ea:c4:94:2f:a1: 34:d9:7c:1b:c6:a0:da:47:f6:6a:6d:8b:98:d1:1d:c7:d7:5c: c9:a4:be:85:a6:66:2c:f0:db:76:ab:64:3b:d6:26:30:af:19: a8:a0:a6:4a:57:d1:26:4d:db:b5:5a:24:75:48:57:80:07:28: 23:47:24:c0:77:bd:1a:e4:ae:3c:37:ef:49:40:09:f7:95:94: b6:cc:c2:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sSJMdFupbnq1l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MTdhNjYyZmYtM2I3Ny00Y2E4LWEwNGYtMjk2Zjc3ZTY0OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Z80BJ26Rrd+e9OPgzT2LLVZr5gYxUXBr7C KR7+l6y7azyXmNWdVaJgsC9GQAlpEIk6jNd5ReYwEY9FZASUJeE4knWqAerlqVuP /baLAU8GVl5gS0q0BamXIbdHfKR9LBZFR8qFBh2ieKwb2v7f6KjQMFK2hkLCZgam 79MsCxcfSYN+7mI8WDIOl0US0ucWsDU56JGgolzOJ/dwLH3PbWF4rlj/4lIYfZIF gtQuLe6m8bJ5+smzklbUsQinqatxfcLQqEiYeMyIUC7olEJwSpFGZBNERusyW2il aACw9+AGjo2Axvi+ZSfwbGo5Hn4quZ/C03Wz0stcLqZvwfp3HQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEHTpMwC8zPHvSSz8tki4OlDXiJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDVhZjFiMTMtMjRiYi0z YjA4LWE3N2EtZTU0NDdhMjU0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujHww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO6uC6pd1H0r1bPkqQV6Hl+bHx8WeGcSTh0YHhZz/TF88D0b2n1DP EOXiWfj+IlL5PrLhQCB2QzLRoDWllXEDcJoajLKX8UMu64060Q0MPhrK5+rT3zQD JlY9wRB/nv9SzEFhbU5mSAhDzZDlu3hrdr2n8UO2A9pQSIZWNigSQQ8NLQlExcRv Ne5P3aljpyPY52BITBWTJVSmPrURpNaH5b9U/5miSPYNrrVPAYUyFOrElC+hNNl8 G8ag2kf2am2LmNEdx9dcyaS+haZmLPDbdqtkO9YmMK8ZqKCmSlfRJk3btVokdUhX gAcoI0ckwHe9GuSuPDfvSUAJ95WUtszCAA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:40 2025 by rpki-client