This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12797aa8-2e07-3c05-aabb-866558927d3a.roa File: 12797aa8-2e07-3c05-aabb-866558927d3a.roa (raw, json) Hash identifier: DXFfjuvbXAm4sIYwUy65QCLdruTr5Yi5V2wVEu1KwjU= Subject key identifier: 2C:78:9B:22:C6:67:D9:E3:E8:FF:5C:2C:C2:8F:1F:10:7D:C7:15:3F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82FD31DEA8BCE31638500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12797aa8-2e07-3c05-aabb-866558927d3a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:c000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2f:d3:1d:ea:8b:ce:31:63:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5891f385-8933-4d44-ba7b-3de0282cff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:2a:c5:bd:55:b5:aa:47:17:70:17:d8:a7: 29:1f:ec:d2:7c:25:01:3c:3f:d2:fa:51:07:32:46: 96:5b:5f:5a:92:7d:64:aa:08:a0:2f:c8:c1:e4:df: cb:91:c6:4b:cb:1c:ad:3d:16:aa:56:a7:25:37:c1: 3f:f4:6f:0d:b3:7b:bf:4b:0b:22:96:32:a1:4b:d9: 7b:61:84:ff:6e:db:ed:5e:95:44:e5:6e:87:03:f3: a7:34:61:7e:a2:e7:83:0c:f6:4c:b9:7b:bc:e3:b2: 8f:b3:ee:df:a0:4b:1b:41:4d:33:c1:c1:c0:43:86: 3b:7c:b1:f9:86:60:7a:47:ad:88:9a:12:2c:3f:b7: ab:c4:93:04:78:7b:54:c7:da:1e:f1:46:6c:92:3f: 9b:1f:04:a6:3e:53:1d:6b:28:36:57:10:60:f5:32: 08:5c:a6:da:38:b8:d9:eb:76:39:4b:05:1c:a9:50: db:02:48:56:7c:b3:65:2d:d9:a8:75:37:d9:b5:75: 77:b9:90:63:f8:50:95:8b:55:be:e8:12:a7:7f:18: e7:d5:1d:54:b8:18:b7:60:58:d1:4a:ab:cf:af:84: 30:b4:cc:2d:57:cd:98:bf:2c:9d:ca:b7:75:e3:06: 35:24:dd:34:12:d3:62:12:8a:54:2d:5a:1e:1c:26: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:9B:22:C6:67:D9:E3:E8:FF:5C:2C:C2:8F:1F:10:7D:C7:15:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12797aa8-2e07-3c05-aabb-866558927d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:c000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:46:03:02:9c:b6:12:1e:b2:a0:46:31:dc:b2:29:8c:61:38: 22:b6:c8:6f:33:8e:64:49:f3:f4:55:6c:3a:4d:74:12:71:fa: 08:56:b6:ec:ea:6a:1b:ad:02:44:a6:5b:b0:1b:dc:b9:42:6f: f5:a5:c8:4b:2d:18:2d:dc:ae:e4:ee:f1:95:64:e1:05:16:d8: 08:42:1e:53:7a:ac:cc:3f:b7:95:07:94:18:07:b4:74:41:2b: 67:1d:31:84:a3:10:95:3f:0b:af:b9:f3:52:82:d0:f9:00:53: fe:04:ba:d9:79:7d:97:83:f5:8d:84:51:e3:3b:5e:b0:d6:49: 40:31:ac:2c:67:ed:9a:78:1d:c6:ca:6e:bd:44:26:0c:86:f8: e5:60:d6:0c:d3:17:d0:5f:86:62:56:66:4a:d5:04:f7:38:e3: 98:e5:7b:ef:d3:cc:07:e1:c8:cd:8e:13:45:b1:de:e2:d3:5a: cb:14:7a:4e:9d:2e:04:1b:18:2c:22:b9:53:16:ba:36:b8:53: 69:0a:d8:56:1d:0b:81:3c:9f:fa:81:ea:8a:97:b0:76:11:74: 3d:35:36:9d:72:ff:01:1b:52:ad:8a:c1:21:b4:29:8b:09:e4: 0e:41:b4:4d:ce:a8:6e:91:25:54:d6:ac:0d:19:c3:0b:60:72: 92:bc:bc:66 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqC/THeqLzjFjhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTg5MWYzODUtODkzMy00ZDQ0LWJhN2ItM2RlMDI4MmNmZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnMqxb1VtapHF3AX2KcpH+zSfCUBPD/S+lEH MkaWW19akn1kqgigL8jB5N/LkcZLyxytPRaqVqclN8E/9G8Ns3u/SwsiljKhS9l7 YYT/btvtXpVE5W6HA/OnNGF+oueDDPZMuXu847KPs+7foEsbQU0zwcHAQ4Y7fLH5 hmB6R62ImhIsP7erxJMEeHtUx9oe8UZskj+bHwSmPlMdayg2VxBg9TIIXKbaOLjZ 63Y5SwUcqVDbAkhWfLNlLdmodTfZtXV3uZBj+FCVi1W+6BKnfxjn1R1UuBi3YFjR SqvPr4QwtMwtV82Yvyydyrd14wY1JN00EtNiEopULVoeHCZbyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCx4myLGZ9nj6P9cLMKPHxB9xxU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTI3OTdhYTgtMmUwNy0z YzA1LWFhYmItODY2NTU4OTI3ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMkYDApy2Eh6yoEYx3LIpjGE4IrbIbzOOZEnz9FVsOk10EnH6CFa2 7OpqG60CRKZbsBvcuUJv9aXISy0YLdyu5O7xlWThBRbYCEIeU3qszD+3lQeUGAe0 dEErZx0xhKMQlT8Lr7nzUoLQ+QBT/gS62Xl9l4P1jYRR4ztesNZJQDGsLGftmngd xspuvUQmDIb45WDWDNMX0F+GYlZmStUE9zjjmOV779PMB+HIzY4TRbHe4tNayxR6 Tp0uBBsYLCK5Uxa6NrhTaQrYVh0LgTyf+oHqipewdhF0PTU2nXL/ARtSrYrBIbQp iwnkDkG0Tc6obpElVNasDRnDC2Bykry8Zg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:17:07 2025 by rpki-client