This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07dd2d7d-426f-3201-99d0-485bc3442876.roa File: 07dd2d7d-426f-3201-99d0-485bc3442876.roa (raw, json) Hash identifier: HqpHza/nJ0QhJIO6ADPivVfnJmOcIYl9zLjBOPpTDd8= Subject key identifier: FD:62:A2:BD:5E:02:AE:51:42:30:DA:74:FA:FF:93:0E:4C:68:E2:A6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A829ED61474B8A5E3DA980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07dd2d7d-426f-3201-99d0-485bc3442876.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:29:ed:61:47:4b:8a:5e:3d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=56f32330-2cae-4fc3-b448-e0278b5c1ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:b9:5f:dd:7b:3f:1c:13:ee:ac:08:fb:5d: 69:65:30:cc:28:ae:22:80:bf:c1:19:29:eb:18:04: fb:46:d0:0a:cd:06:73:26:8c:f4:17:d9:87:fa:d3: 25:f0:a2:dc:5a:1d:94:a0:bc:9b:f1:04:51:f8:67: c0:ad:0a:a4:21:3e:0d:45:0d:8b:92:62:ec:eb:f2: 30:60:9e:ec:70:0a:4e:98:9e:94:1a:3b:da:ed:2f: ff:61:49:30:d7:c6:c8:0d:f9:18:8b:36:e1:b1:38: 01:2b:2d:42:b6:8e:a8:d1:39:10:af:73:6c:2a:2c: bd:ab:b7:83:40:bc:02:45:f9:b8:f3:d7:dd:ab:10: f4:90:64:ef:9f:f0:31:88:ff:e9:25:0b:77:f9:5f: 99:18:1f:62:ec:89:f3:c3:7f:63:e9:ae:e4:c0:43: 89:1f:a1:fa:a5:42:c9:67:07:61:37:a1:e2:03:5d: 5f:ae:31:21:be:8a:c0:c9:38:fd:a3:c8:ce:d7:58: 3a:2b:b7:18:f1:57:77:69:4f:57:0c:4a:0c:27:96: 44:9a:32:22:72:82:7a:e9:f4:e2:61:11:03:cf:af: ec:34:6d:a3:34:07:37:b2:03:87:b0:a2:ca:ea:ba: 65:1d:b0:13:a7:f1:3a:f0:ba:65:8a:71:f8:0a:e3: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:A2:BD:5E:02:AE:51:42:30:DA:74:FA:FF:93:0E:4C:68:E2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07dd2d7d-426f-3201-99d0-485bc3442876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e9:ff:f3:4b:62:29:59:69:51:68:95:7c:e1:65:2c:6e:0d: 8e:06:a1:e1:68:b0:b2:d1:17:5b:13:64:64:14:6d:39:c2:96: 53:de:10:13:74:af:f2:41:5e:80:a5:62:b2:59:10:1b:4e:01: 4c:8c:eb:67:fa:38:0d:08:f5:23:ef:fd:da:4d:19:41:d5:85: 0d:01:6c:24:18:5d:dd:f3:ed:e8:82:7f:e2:b2:59:ec:45:b0: 57:79:e7:ff:04:b8:c5:6b:cb:35:7d:bf:6f:98:6f:18:a4:2a: 1d:d6:f6:b8:6c:2b:32:49:9c:bf:9f:5e:95:66:7e:23:9c:2b: 00:3c:7d:9c:1f:84:fa:a3:42:0c:85:fc:5b:01:91:51:93:35: a8:53:61:da:4a:90:d3:c4:33:b1:d5:05:df:b2:3f:34:8d:ab: fd:1f:95:a1:3a:c5:f0:09:06:e2:39:26:3f:59:47:dd:c6:a8: e8:34:2e:43:90:f8:c0:b0:7b:2a:69:69:3a:d9:19:69:26:5d: 80:24:21:e1:7a:f2:72:ea:2f:d9:c8:db:a5:2c:7d:f6:08:58: 27:1a:05:a7:98:9d:e7:b6:c0:36:95:86:cc:9c:35:e0:a4:63: 20:6a:14:e7:9a:c1:04:c6:b6:68:d0:32:59:95:25:3e:ec:d1: 41:ef:2a:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCntYUdLil49qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTZmMzIzMzAtMmNhZS00ZmMzLWI0NDgtZTAyNzhiNWMxYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT65X917PxwT7qwI+11pZTDMKK4igL/BGSnr GAT7RtAKzQZzJoz0F9mH+tMl8KLcWh2UoLyb8QRR+GfArQqkIT4NRQ2LkmLs6/Iw YJ7scApOmJ6UGjva7S//YUkw18bIDfkYizbhsTgBKy1Cto6o0TkQr3NsKiy9q7eD QLwCRfm489fdqxD0kGTvn/AxiP/pJQt3+V+ZGB9i7Inzw39j6a7kwEOJH6H6pULJ ZwdhN6HiA11frjEhvorAyTj9o8jO11g6K7cY8Vd3aU9XDEoMJ5ZEmjIicoJ66fTi YREDz6/sNG2jNAc3sgOHsKLK6rplHbATp/E68LplinH4CuPdQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP1ior1eAq5RQjDadPr/kw5MaOKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDdkZDJkN2QtNDI2Zi0z MjAxLTk5ZDAtNDg1YmMzNDQyODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiuAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW+n/80tiKVlpUWiVfOFlLG4Njgah4WiwstEXWxNkZBRtOcKWU94Q E3Sv8kFegKVislkQG04BTIzrZ/o4DQj1I+/92k0ZQdWFDQFsJBhd3fPt6IJ/4rJZ 7EWwV3nn/wS4xWvLNX2/b5hvGKQqHdb2uGwrMkmcv59elWZ+I5wrADx9nB+E+qNC DIX8WwGRUZM1qFNh2kqQ08QzsdUF37I/NI2r/R+VoTrF8AkG4jkmP1lH3cao6DQu Q5D4wLB7KmlpOtkZaSZdgCQh4Xrycuov2cjbpSx99ghYJxoFp5id57bANpWGzJw1 4KRjIGoU55rBBMa2aNAyWZUlPuzRQe8qWQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:44:08 2025 by rpki-client