This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa File: 254c0fb0-008a-383a-bd3e-c9159a8f6059.roa (raw, json) Hash identifier: fXfCmvbk6sInQcyh7pnJ5MEhHCniu26cXChR+zMT4hk= Subject key identifier: ED:36:0B:2E:62:EA:05:9C:AC:8F:6C:E1:F5:35:FB:C7:3D:D7:B7:72 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBD94976FFEC9B94F32500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8b:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:d9:49:76:ff:ec:9b:94:f3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2aa51507-bb58-498b-b104-de79d5bebd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:11:c5:47:d1:f8:97:4a:bf:6a:1e:28:17: ce:a9:c5:83:a5:5b:88:23:5c:b2:6e:16:4d:90:f0: 16:1d:dd:80:7b:df:44:fa:86:1f:2e:ed:93:25:05: 35:91:6c:5d:04:31:be:5a:5b:5e:8d:95:eb:69:10: b0:46:d9:da:aa:9a:19:49:93:35:14:29:17:06:40: c5:b1:0f:68:fd:97:6a:8e:82:eb:de:87:d9:17:b9: 93:a1:b0:cd:26:cd:73:73:a0:71:51:30:7a:2f:e2: ef:ba:57:04:ff:4f:bc:3c:ed:a2:c5:5d:26:fd:7a: ac:22:a6:d2:e1:1d:a2:c9:f3:50:80:4d:d1:41:fa: 13:2c:55:73:4f:4d:81:0b:81:5d:96:48:b5:8c:08: ed:87:d3:34:ce:0f:2f:cd:5d:dc:69:8d:c8:0c:2d: 57:43:9d:5b:d4:44:36:3f:88:5d:e1:b4:48:f8:2d: 84:a9:53:70:f4:4a:4f:2a:0f:cf:25:98:24:1d:3c: b7:d1:87:42:20:a8:8c:a1:cc:1e:be:8d:d4:36:8e: 68:5f:e8:06:29:66:eb:34:93:52:f8:40:51:fd:7f: b4:97:4b:81:32:58:16:ba:9b:41:f7:c2:58:12:de: 3d:02:16:69:4e:a2:ed:2c:03:1d:7b:93:30:71:58: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:0B:2E:62:EA:05:9C:AC:8F:6C:E1:F5:35:FB:C7:3D:D7:B7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:cc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:64:fd:69:37:b9:0e:58:9b:8a:5f:91:e0:e2:9f:e2:cc:ba: a2:e0:7e:1d:9c:89:df:ed:57:2e:24:40:d9:45:66:5b:5d:e1: 17:51:f6:8c:92:52:d9:a2:6f:af:a7:1f:5c:0c:df:bb:58:73: 5d:eb:ba:d4:3e:1f:5a:41:bf:f4:78:1d:49:f8:61:ca:aa:a1: 17:c4:ac:99:03:93:91:b2:bf:88:41:f7:4d:2c:7f:79:8f:1f: fa:25:8e:7d:61:ce:8f:5f:d0:ea:7e:a4:2d:7c:ba:50:40:34: c0:77:ef:be:66:94:36:6f:a0:e4:dd:f4:3c:2d:df:2c:66:dd: dd:37:cd:ab:7a:40:8e:74:b3:f0:bd:06:53:5f:af:93:bc:75: 74:da:d5:29:b5:aa:7e:2d:15:f7:84:a2:2b:96:5e:2c:cf:5f: 86:ed:d1:b8:03:6c:6f:10:b6:ac:f6:c0:c4:87:90:a7:91:0b: c9:13:30:26:a1:e5:8f:17:55:d6:d7:48:96:9f:23:9b:ff:f0: 18:a1:01:13:69:c0:6c:07:33:d8:51:a6:52:96:fe:70:1b:e7: 92:06:07:d3:ba:09:29:5f:9d:68:09:a2:d0:79:56:a6:ea:14: 8b:0f:1a:f9:76:cc:03:b3:78:b8:b8:87:d3:87:73:a4:96:12: 06:d8:ee:d2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC29lJdv/sm5TzJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmFhNTE1MDctYmI1OC00OThiLWIxMDQtZGU3OWQ1YmViZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYoRxUfR+JdKv2oeKBfOqcWDpVuII1yybhZN kPAWHd2Ae99E+oYfLu2TJQU1kWxdBDG+WltejZXraRCwRtnaqpoZSZM1FCkXBkDF sQ9o/ZdqjoLr3ofZF7mTobDNJs1zc6BxUTB6L+LvulcE/0+8PO2ixV0m/XqsIqbS 4R2iyfNQgE3RQfoTLFVzT02BC4Fdlki1jAjth9M0zg8vzV3caY3IDC1XQ51b1EQ2 P4hd4bRI+C2EqVNw9EpPKg/PJZgkHTy30YdCIKiMocwevo3UNo5oX+gGKWbrNJNS +EBR/X+0l0uBMlgWuptB98JYEt49AhZpTqLtLAMde5MwcVipwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO02Cy5i6gWcrI9s4fU1+8c917dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjU0YzBmYjAtMDA4YS0z ODNhLWJkM2UtYzkxNTlhOGY2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApGT9aTe5Dlibil+R4OKf4sy6ouB+HZyJ3+1XLiRA2UVmW13hF1H2 jJJS2aJvr6cfXAzfu1hzXeu61D4fWkG/9HgdSfhhyqqhF8SsmQOTkbK/iEH3TSx/ eY8f+iWOfWHOj1/Q6n6kLXy6UEA0wHfvvmaUNm+g5N30PC3fLGbd3TfNq3pAjnSz 8L0GU1+vk7x1dNrVKbWqfi0V94SiK5ZeLM9fhu3RuANsbxC2rPbAxIeQp5ELyRMw JqHljxdV1tdIlp8jm//wGKEBE2nAbAcz2FGmUpb+cBvnkgYH07oJKV+daAmi0HlW puoUiw8a+XbMA7N4uLiH04dzpJYSBtju0g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:39 2025 by rpki-client