This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
File: 123f721a-ef6b-3594-aee1-809863a3160b.roa (raw, json)
Hash identifier: 2+g++WEa4aWgRQNjGsExCI6pbA93Bfu6oeNtttYIoEM=
Subject key identifier: A2:E6:C1:53:68:FC:E9:7D:64:26:DF:C2:66:F1:FC:69:B5:7D:48:A5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C37B106756E2A33A776BB61F0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8c:a000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:06:75:6e:2a:33:a7:76:bb:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=a67fde91-6d4a-45a6-ac92-3b84976ea2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:f6:c6:5d:9e:2e:3a:f8:8d:4f:7a:38:65:
0f:10:c7:bf:2d:1d:4e:e6:6e:f0:ce:84:4e:d4:3c:
ec:d9:c1:43:39:27:03:4c:72:60:f3:48:b7:f3:a8:
19:b0:72:b2:38:35:e7:eb:b4:dc:3d:6f:3e:5e:df:
b6:39:65:1a:5d:ba:7a:9a:6c:c1:70:d6:36:6e:aa:
b9:ab:85:7f:0f:1b:a5:48:f9:b2:86:c1:b1:82:9c:
72:1c:c1:cf:1d:f6:91:e5:f7:ed:55:8b:af:67:cf:
26:1d:28:ab:18:c8:67:6e:03:ee:e2:02:38:38:67:
f5:eb:14:bb:c9:79:8d:cf:2e:9f:44:65:d0:a3:9b:
77:07:7c:c0:a8:0e:0b:09:3a:a3:38:b6:70:07:23:
5e:cb:43:19:9b:13:22:85:e6:98:74:9e:ae:17:e5:
cf:88:b1:fe:1b:de:27:39:41:47:6f:28:a6:61:cb:
7c:e2:92:c6:f8:39:48:dc:f5:5e:df:33:7f:cc:95:
88:a0:c3:1e:67:cf:02:b2:ae:99:bb:c6:5f:c5:b4:
ac:82:0c:18:34:0e:9e:94:85:1e:30:d7:88:d8:8a:
d1:99:80:49:61:a7:1e:f3:21:91:9d:2b:61:1a:0c:
22:05:41:16:28:8b:0f:36:41:0e:33:d5:13:0c:3c:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:C1:53:68:FC:E9:7D:64:26:DF:C2:66:F1:FC:69:B5:7D:48:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:a000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:eb:b7:b0:c9:7a:38:ed:f1:80:f8:cd:0d:ca:e3:58:1e:00:
73:8d:9c:60:bb:4f:60:7a:be:e8:4f:eb:ec:8e:05:88:cd:48:
71:07:de:4a:ba:8f:1d:47:f4:72:31:fc:16:65:5e:38:cd:46:
f0:e2:73:94:50:19:ff:e6:f7:c4:b1:bf:47:3c:53:38:e9:3e:
ee:fb:e3:f1:fb:9e:7e:e8:ed:d9:2e:59:59:09:27:36:c1:1e:
40:e9:8b:85:34:1f:3a:93:da:40:47:a7:2b:e4:35:1a:3c:9f:
0b:e9:ad:41:4c:84:17:25:67:0a:54:8f:b4:80:85:79:d7:66:
6e:7a:96:82:89:f1:ec:e3:43:f9:e0:20:b0:00:5c:fa:2e:da:
0b:1a:98:30:7c:f2:2c:ea:9f:d8:7d:43:0a:91:c6:14:67:17:
6b:d3:a7:df:22:96:f7:73:64:f5:db:30:b1:9a:c9:e0:f5:15:
d9:7d:93:06:b4:46:64:a8:0a:28:71:ea:a9:56:97:56:6b:6d:
39:d5:51:09:6e:67:d0:e3:cf:c2:b9:1c:48:09:49:b4:97:eb:
34:1a:ab:13:79:da:c7:a2:a1:a9:bb:a1:59:f6:9f:aa:0a:80:
f2:88:30:92:fb:3e:0b:60:7e:75:e7:dc:ad:ef:a6:34:7d:9a:
f2:bd:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:34:29 2025 by rpki-client