This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa File: 0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa (raw, json) Hash identifier: fZMtTjm+C1FfSRCzc20AWQB1UQI4ppAdCgEvt+NRE2s= Subject key identifier: FA:9F:E2:71:DB:0E:85:2D:65:FE:A7:E3:22:F4:57:7A:34:98:9C:3B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B10383EDF4CB05C51FDD40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:03:83:ed:f4:cb:05:c5:1f:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=b9455145-9bd8-43df-b082-f9a0997a1e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:e3:d5:c2:ea:47:ff:e1:22:56:f4:52:69: 5f:77:af:e1:c6:eb:78:65:bd:a5:e4:1e:cc:2c:6a: e7:90:d3:cc:2b:9c:10:a2:bf:a7:51:02:55:d8:3f: 6f:4b:02:df:65:6e:90:e4:99:a0:7d:ac:f0:8e:60: be:fe:9a:64:00:6c:0e:28:10:a6:53:d0:bf:f4:56: e5:69:61:bb:ef:ea:e0:62:a2:93:20:2e:24:82:b0: 14:07:f8:a5:29:ba:78:b4:67:18:61:fa:07:5d:f0: 84:95:de:e9:67:34:90:5d:64:19:fe:f8:ad:a6:8f: 45:cf:69:0e:ce:89:6e:b5:ca:4b:60:b6:31:19:4f: 02:71:4b:f5:96:33:c7:95:9e:b3:2b:ec:33:c0:0f: af:b6:a3:63:8f:db:70:a7:1f:53:09:47:09:c5:18: e0:6e:7d:48:f0:b9:22:f5:dc:dc:02:ea:71:af:a6: 18:f8:bf:7a:71:e9:40:15:84:33:30:8c:8f:7c:b5: 33:41:01:54:61:dc:88:a8:5c:07:b6:8f:22:ee:49: 48:0d:0b:03:c9:eb:24:8f:7c:5b:65:5a:b4:d8:a3: 47:54:73:d0:af:84:2f:38:da:b6:67:ed:c2:3b:f7: ea:2d:d9:fb:0e:8d:b2:a8:a6:8a:cd:16:56:98:78: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9F:E2:71:DB:0E:85:2D:65:FE:A7:E3:22:F4:57:7A:34:98:9C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d5:f5:a6:e6:45:78:6e:dd:4b:31:b0:b2:2b:3b:54:75:4f: 8c:01:4d:b5:90:f5:cc:bd:2c:61:f7:2a:4b:2f:1a:77:35:82: 1e:64:e8:25:11:30:98:3a:ad:58:47:25:de:df:57:dc:23:81: f2:17:70:a2:4c:b2:55:7b:a1:20:56:26:dc:6a:ec:58:ab:54: 25:1c:9a:c7:17:5c:7a:70:06:b3:1e:9b:f6:f3:1c:b7:12:10: d1:49:fe:ac:f3:68:51:f1:7c:1f:3a:3e:e2:3c:6d:3d:ae:69: f6:d7:46:eb:7d:8e:52:04:c7:06:fc:d9:7c:e4:75:5c:08:c7: ff:3e:6c:c3:89:1f:18:66:f2:b7:24:7e:43:65:f7:05:b8:87: 16:ec:9f:7c:c6:2c:82:91:04:5d:c5:df:a2:fa:7d:e5:a2:a5: fe:14:7c:76:27:ac:e4:97:25:bd:48:8d:4e:6b:39:52:c5:2b: fc:9e:44:4e:a8:ca:33:3f:13:07:0f:cb:e4:44:7b:cd:c4:34: 3e:9d:06:ef:8b:0a:e9:52:ad:c5:09:2f:92:6f:03:d0:6a:18: 36:16:e2:68:e3:8f:a3:a8:5b:dc:cd:86:31:49:e7:0f:43:c6: cf:95:ae:7f:af:dd:75:1a:4f:88:b4:72:40:cb:f8:49:7a:20: 94:6d:66:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sQOD7fTLBcUf3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk Yjk0NTUxNDUtOWJkOC00M2RmLWIwODItZjlhMDk5N2ExZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNfj1cLqR//hIlb0Umlfd6/hxut4Zb2l5B7M LGrnkNPMK5wQor+nUQJV2D9vSwLfZW6Q5JmgfazwjmC+/ppkAGwOKBCmU9C/9Fbl aWG77+rgYqKTIC4kgrAUB/ilKbp4tGcYYfoHXfCEld7pZzSQXWQZ/vitpo9Fz2kO zolutcpLYLYxGU8CcUv1ljPHlZ6zK+wzwA+vtqNjj9twpx9TCUcJxRjgbn1I8Lki 9dzcAupxr6YY+L96celAFYQzMIyPfLUzQQFUYdyIqFwHto8i7klIDQsDyeskj3xb ZVq02KNHVHPQr4QvONq2Z+3CO/fqLdn7Do2yqKaKzRZWmHhnAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPqf4nHbDoUtZf6n4yL0V3o0mJw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZkZDM0NmYtZWZjMS0z NjlkLWI3YzktOWJlZjk0ZWJmMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiFQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI9X1puZFeG7dSzGwsis7VHVPjAFNtZD1zL0sYfcqSy8adzWCHmTo JREwmDqtWEcl3t9X3COB8hdwokyyVXuhIFYm3GrsWKtUJRyaxxdcenAGsx6b9vMc txIQ0Un+rPNoUfF8Hzo+4jxtPa5p9tdG632OUgTHBvzZfOR1XAjH/z5sw4kfGGby tyR+Q2X3BbiHFuyffMYsgpEEXcXfovp95aKl/hR8dies5JclvUiNTms5UsUr/J5E TqjKMz8TBw/L5ER7zcQ0Pp0G74sK6VKtxQkvkm8D0GoYNhbiaOOPo6hb3M2GMUnn D0PGz5Wuf6/ddRpPiLRyQMv4SXoglG1mYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:57:42 2025 by rpki-client