This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa File: 1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa (raw, json) Hash identifier: PWcIORv1UBO+l71EZKF5rzltTDVLF0SQZHgDMy9woTs= Subject key identifier: 31:CD:DE:F9:A2:A3:7E:DB:E1:CE:CF:B8:10:CC:C7:EB:1E:EB:A6:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A678329E5BCFB988D6FC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:c000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:78:32:9e:5b:cf:b9:88:d6:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1cf5a37a-be68-419e-8700-64e465868cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1c:49:0c:17:19:84:81:5c:34:96:aa:68:75: 39:30:e8:66:66:2e:b5:c2:9b:42:42:71:05:e4:e1: 7e:3d:42:31:f2:f2:98:24:d0:1f:f3:0f:87:66:e5: 85:80:57:33:b4:9c:8a:7e:b2:f6:0e:14:6a:61:9a: c5:b3:36:f5:58:a3:52:84:35:9e:40:ba:71:72:d5: a4:17:e7:54:6a:40:87:24:ca:23:43:87:86:03:a9: 5b:ed:59:63:be:61:5e:e1:73:ff:b6:58:33:e0:c5: 8c:4a:63:f8:f9:4b:dc:8d:65:3f:45:7e:c9:d1:da: 49:cf:fb:99:9d:94:a4:43:e0:ae:2f:7b:6d:10:c3: bf:da:11:ea:ab:e7:ed:79:ee:e8:73:c9:6d:0b:e0: 6e:00:17:50:2e:40:26:5e:dc:e2:a1:2f:2b:6b:33: c5:41:0c:69:d9:fe:15:c3:4a:77:45:9e:90:c5:ef: fd:32:4f:92:c3:f7:69:e5:ca:4b:73:32:46:2f:95: 2f:f7:22:f0:dd:b9:3e:1a:bb:fd:3a:fc:27:f1:ea: 31:55:c8:06:b2:08:43:26:2b:b7:82:9a:92:5b:e2: 6b:d9:13:c0:40:81:0f:14:5a:17:9e:cb:16:e7:06: b0:15:85:32:13:d2:ca:9e:af:ad:ca:95:21:6d:56: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:DE:F9:A2:A3:7E:DB:E1:CE:CF:B8:10:CC:C7:EB:1E:EB:A6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:c000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d8:23:cd:a4:57:6f:61:ff:58:0a:18:b1:fa:aa:71:9d:b1: 97:77:74:6e:54:6f:d8:5b:4c:bd:50:45:9d:c3:51:5f:b5:1c: 31:de:96:3e:a8:54:7b:24:7a:ce:15:56:66:ce:a5:cc:88:94: aa:c7:bf:3c:c8:c8:52:fc:b6:ce:96:d1:c1:b9:c1:a9:cc:60: e1:c8:1d:1a:60:ea:92:99:90:ee:ea:56:73:14:59:1c:e5:fc: fd:a7:e1:42:07:72:0e:0f:b0:c8:62:18:e1:aa:7a:45:2e:6f: cf:03:46:33:5e:d0:6b:09:00:7f:57:9b:09:42:ce:27:fe:55: 6a:c0:04:8c:d0:64:3a:9e:1e:35:c4:11:dd:da:1f:94:70:2f: 5d:5c:1e:ff:a3:51:32:01:ba:37:38:7a:b5:bb:cc:17:cb:ff: 21:6f:ec:62:d6:b7:b9:92:00:02:8f:b6:61:99:53:3b:b2:3f: a0:c8:ea:7c:80:42:9f:69:94:03:39:20:d2:dc:71:8c:b0:bd: f3:fa:f0:90:fb:93:b6:76:ca:1c:0b:3e:41:ce:92:9e:d6:57: ff:f6:ce:48:bb:57:c2:69:8b:ad:98:c1:e5:8d:de:03:f9:fb: 33:fb:6c:ad:9b:7b:f9:1c:c9:89:ce:e1:92:21:e5:2a:eb:31: 88:d5:d1:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpngynlvPuYjW/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWNmNWEzN2EtYmU2OC00MTllLTg3MDAtNjRlNDY1ODY4Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xxJDBcZhIFcNJaqaHU5MOhmZi61wptCQnEF 5OF+PUIx8vKYJNAf8w+HZuWFgFcztJyKfrL2DhRqYZrFszb1WKNShDWeQLpxctWk F+dUakCHJMojQ4eGA6lb7VljvmFe4XP/tlgz4MWMSmP4+UvcjWU/RX7J0dpJz/uZ nZSkQ+CuL3ttEMO/2hHqq+ftee7oc8ltC+BuABdQLkAmXtzioS8razPFQQxp2f4V w0p3RZ6Qxe/9Mk+Sw/dp5cpLczJGL5Uv9yLw3bk+Grv9Ovwn8eoxVcgGsghDJiu3 gpqSW+Jr2RPAQIEPFFoXnssW5wawFYUyE9LKnq+typUhbVYcBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDHN3vmio37b4c7PuBDMx+se66bRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWRmZDlhZGItMjgwMS0z NWQzLWJiM2ItYTJjNjVlYTc3NTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuicAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAINgjzaRXb2H/WAoYsfqqcZ2xl3d0blRv2FtMvVBFncNRX7UcMd6W PqhUeyR6zhVWZs6lzIiUqse/PMjIUvy2zpbRwbnBqcxg4cgdGmDqkpmQ7upWcxRZ HOX8/afhQgdyDg+wyGIY4ap6RS5vzwNGM17QawkAf1ebCULOJ/5VasAEjNBkOp4e NcQR3doflHAvXVwe/6NRMgG6Nzh6tbvMF8v/IW/sYta3uZIAAo+2YZlTO7I/oMjq fIBCn2mUAzkg0txxjLC98/rwkPuTtnbKHAs+Qc6SntZX//bOSLtXwmmLrZjB5Y3e A/n7M/tsrZt7+RzJic7hkiHlKusxiNXRag== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:34 2025 by rpki-client