This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09d47854-c4d4-315e-bca0-1317b9e10b37.roa File: 09d47854-c4d4-315e-bca0-1317b9e10b37.roa (raw, json) Hash identifier: tcsIU52nyHGQlKcib0ZFaZmhN+AjZeDs+UqsZ/JM48A= Subject key identifier: 39:8A:13:A3:B5:79:C1:FE:29:2B:9D:63:07:8F:09:2E:3C:B3:AC:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82ED113412FEE66B34640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09d47854-c4d4-315e-bca0-1317b9e10b37.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2e:d1:13:41:2f:ee:66:b3:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5ca6abd6-d641-4ef1-883b-692d8c624b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:04:30:c5:a3:d7:64:05:12:50:dc:e3:d1: 31:05:d2:1f:f3:0d:31:0b:17:1b:a1:c8:8a:c2:39: a1:6e:d5:56:bf:87:9b:a1:54:10:41:c4:19:45:42: 0a:8a:64:6c:69:62:e9:b4:64:5e:59:bc:27:d3:a7: 28:86:73:83:bb:39:55:a6:32:06:c2:6a:1f:4c:00: 83:3d:16:ad:9b:46:3b:bf:b9:e4:a5:f3:b9:3f:09: 76:01:f4:f0:3a:72:22:03:c8:e1:82:6d:af:af:dc: c7:fe:7a:7b:fa:2b:2b:fb:62:c1:ca:b8:5b:67:50: 6e:1c:fe:89:f9:d8:b7:11:3d:a4:29:f5:12:69:80: a5:50:3a:8b:c7:e1:18:81:bf:2e:95:3a:85:cb:ea: 18:f8:31:08:21:72:e2:62:54:51:ff:ee:00:f6:52: a5:46:02:c3:6e:c6:43:3c:f6:93:a6:dc:f0:8f:e1: 23:ad:eb:71:e1:53:10:8f:31:ca:da:f9:51:bf:36: 91:15:b7:7a:68:42:fc:5d:a8:18:93:7b:64:dc:ba: 34:74:66:7e:9e:28:3a:4d:6b:27:84:55:8c:81:7a: 11:2c:70:df:8c:d0:53:16:28:65:ba:69:b3:03:25: c3:11:c3:44:d9:d4:95:04:d7:a1:57:e2:0c:40:3d: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:13:A3:B5:79:C1:FE:29:2B:9D:63:07:8F:09:2E:3C:B3:AC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09d47854-c4d4-315e-bca0-1317b9e10b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b6:d5:d9:93:d9:3a:e2:b8:fe:b5:b0:36:ac:4f:7f:d6:71: 3e:32:a0:27:07:14:ca:44:8f:51:7b:9a:81:b6:f7:cd:9d:48: 95:a1:db:64:82:dd:86:41:24:05:12:64:b8:fb:4b:8f:a3:40: 25:ad:86:d0:7f:ed:a6:f7:32:bc:17:27:17:3c:8c:7d:90:fd: 66:a0:4d:2b:3d:67:bc:44:c9:0a:4e:d1:ba:23:13:29:43:39: ec:1a:19:3e:70:f2:95:36:bf:6d:67:a5:70:36:12:c4:ab:31: b1:08:fa:53:55:6f:5e:b5:ec:92:62:52:d1:1a:2d:49:5a:70: c4:e3:95:9a:89:5d:42:b2:b6:07:7b:5e:fe:d2:4f:87:b2:60: cb:78:06:fd:55:47:8d:c8:77:18:84:42:7c:b1:eb:15:1c:3c: 1b:64:f8:1b:44:9a:47:a5:23:05:94:2f:8c:ef:78:9b:61:47: ba:cf:f7:10:e7:64:95:4f:c3:10:23:51:a9:cf:ea:09:18:a9: 02:74:44:21:6f:ee:5e:b1:fd:2f:d6:94:7a:d0:66:16:f4:38: 82:9a:fb:d6:c4:6a:6a:ba:2e:43:66:9b:34:64:35:72:be:01: 70:37:11:c3:fe:28:0d:40:5c:34:f6:72:b7:42:e5:b3:a5:e6: e7:b4:fc:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqC7RE0Ev7mazRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NWNhNmFiZDYtZDY0MS00ZWYxLTg4M2ItNjkyZDhjNjI0Yjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6sEMMWj12QFElDc49ExBdIf8w0xCxcbociK wjmhbtVWv4eboVQQQcQZRUIKimRsaWLptGReWbwn06cohnODuzlVpjIGwmofTACD PRatm0Y7v7nkpfO5Pwl2AfTwOnIiA8jhgm2vr9zH/np7+isr+2LByrhbZ1BuHP6J +di3ET2kKfUSaYClUDqLx+EYgb8ulTqFy+oY+DEIIXLiYlRR/+4A9lKlRgLDbsZD PPaTptzwj+Ejretx4VMQjzHK2vlRvzaRFbd6aEL8XagYk3tk3Lo0dGZ+nig6TWsn hFWMgXoRLHDfjNBTFihlummzAyXDEcNE2dSVBNehV+IMQD3aMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDmKE6O1ecH+KSudYwePCS48s6yeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDlkNDc4NTQtYzRkNC0z MTVlLWJjYTAtMTMxN2I5ZTEwYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuitAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPLbV2ZPZOuK4/rWwNqxPf9ZxPjKgJwcUykSPUXuagbb3zZ1IlaHb ZILdhkEkBRJkuPtLj6NAJa2G0H/tpvcyvBcnFzyMfZD9ZqBNKz1nvETJCk7RuiMT KUM57BoZPnDylTa/bWelcDYSxKsxsQj6U1VvXrXskmJS0RotSVpwxOOVmoldQrK2 B3te/tJPh7Jgy3gG/VVHjch3GIRCfLHrFRw8G2T4G0SaR6UjBZQvjO94m2FHus/3 EOdklU/DECNRqc/qCRipAnREIW/uXrH9L9aUetBmFvQ4gpr71sRqarouQ2abNGQ1 cr4BcDcRw/4oDUBcNPZyt0Lls6Xm57T8Jw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:35:58 2025 by rpki-client