This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa File: 28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa (raw, json) Hash identifier: rxe0jzW+QeDdqcKWnuurce6OpIVm0O1AEXcodxst+ck= Subject key identifier: 76:7C:84:45:D6:A0:42:CF:4D:D3:60:7A:56:BE:AF:7E:16:9B:47:CF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A68AFECECCF52409F742E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:8a:fe:ce:cc:f5:24:09:f7:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3fea675e-4465-4c36-a22e-e931f2c223ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:51:21:95:46:aa:d9:bb:b5:f1:2f:ca:07: 28:ec:02:0a:b2:fd:f5:94:aa:8d:d2:d4:c1:db:1a: 7b:a0:40:a4:0d:b3:9d:71:db:d4:17:17:c2:02:09: ae:70:07:ae:0d:9c:89:25:f2:08:3c:00:ad:e4:b1: fc:1b:68:71:1c:bb:22:39:dc:d2:f7:de:94:de:8a: 7b:13:52:52:ac:28:14:4a:79:b6:f4:70:ca:99:27: 28:ee:bf:2c:8e:47:be:c3:52:c0:61:26:56:81:a7: b7:70:7c:7a:6d:69:a8:3d:7d:28:86:cc:3a:7a:52: 98:57:05:5a:51:79:04:1f:9c:95:c8:3c:8b:a2:0b: 68:38:c2:5d:e7:dd:2e:08:c6:f5:e4:05:fe:51:60: 9a:4c:95:c8:95:1a:5c:11:93:bb:ce:92:74:33:cf: a6:84:a3:5b:44:35:56:75:af:86:d7:a6:91:17:b0: e3:37:fc:06:d7:bf:94:e8:df:fb:67:1a:53:3a:f1: 41:bb:61:52:b9:a0:31:e2:5a:6f:cf:c4:85:17:07: cf:d2:e5:3f:73:c5:8f:1f:b8:7c:6f:3f:95:7c:55: 64:7c:5c:92:f4:64:e1:13:a9:a9:09:ec:8a:32:25: 60:3f:a7:0c:76:9a:03:a7:a4:41:b4:c4:5f:66:b2: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:84:45:D6:A0:42:CF:4D:D3:60:7A:56:BE:AF:7E:16:9B:47:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1e:b9:b0:2e:4b:d0:c7:65:bd:65:53:22:fa:df:1d:30:eb: 27:b5:a0:9b:cc:20:0d:f1:98:0c:9f:83:20:94:43:cb:1a:5e: 3e:5e:f5:15:1b:a1:7f:61:8e:20:fa:07:61:1a:a7:e5:34:09: e1:e1:72:2e:5e:53:fb:91:75:18:8a:82:ce:96:a3:9c:5c:07: 53:24:89:09:7f:bb:5d:ce:14:b8:e1:40:f5:6a:24:2f:d3:df: 56:c0:9d:e5:52:84:9c:da:5d:37:b2:dd:3b:a7:82:e7:df:15: b3:c7:8b:1b:9e:72:b9:22:15:c4:ff:90:52:d0:d5:e8:dc:7a: 6a:d2:a3:7e:de:96:2f:9b:b0:e7:90:d4:dc:41:83:cb:35:44: 4b:2c:46:0c:7c:b5:0b:34:d2:59:fc:1f:5a:80:b7:8b:51:ab: 10:f8:da:b4:49:27:0e:41:51:d1:97:a1:ff:cc:6d:51:8b:5b: 98:a2:e7:b4:ee:fd:ab:e6:d5:fe:72:d9:fd:26:74:58:eb:72: cb:c1:98:3c:8e:2d:39:d1:64:f8:9a:e4:e0:52:e4:ac:43:23: 34:64:c6:d7:0a:10:ab:e3:9a:48:33:1c:90:96:71:1b:db:cd: 17:83:c5:e0:ff:7e:21:1f:7f:6a:64:ce:6f:80:4a:85:dd:7e: f6:a6:bf:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpor+zsz1JAn3QuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2ZlYTY3NWUtNDQ2NS00YzM2LWEyMmUtZTkzMWYyYzIyM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtRIZVGqtm7tfEvygco7AIKsv31lKqN0tTB 2xp7oECkDbOdcdvUFxfCAgmucAeuDZyJJfIIPACt5LH8G2hxHLsiOdzS996U3op7 E1JSrCgUSnm29HDKmSco7r8sjke+w1LAYSZWgae3cHx6bWmoPX0ohsw6elKYVwVa UXkEH5yVyDyLogtoOMJd590uCMb15AX+UWCaTJXIlRpcEZO7zpJ0M8+mhKNbRDVW da+G16aRF7DjN/wG17+U6N/7ZxpTOvFBu2FSuaAx4lpvz8SFFwfP0uU/c8WPH7h8 bz+VfFVkfFyS9GThE6mpCeyKMiVgP6cMdpoDp6RBtMRfZrJrVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHZ8hEXWoELPTdNgela+r34Wm0fPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhiZGMxYTMtNmVlNi0z ZDIzLWJiN2YtNjdlMmI4YTE3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuingw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZx65sC5L0MdlvWVTIvrfHTDrJ7Wgm8wgDfGYDJ+DIJRDyxpePl71 FRuhf2GOIPoHYRqn5TQJ4eFyLl5T+5F1GIqCzpajnFwHUySJCX+7Xc4UuOFA9Wok L9PfVsCd5VKEnNpdN7LdO6eC598Vs8eLG55yuSIVxP+QUtDV6Nx6atKjft6WL5uw 55DU3EGDyzVESyxGDHy1CzTSWfwfWoC3i1GrEPjatEknDkFR0Zeh/8xtUYtbmKLn tO79q+bV/nLZ/SZ0WOtyy8GYPI4tOdFk+Jrk4FLkrEMjNGTG1woQq+OaSDMckJZx G9vNF4PF4P9+IR9/amTOb4BKhd1+9qa/XA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:14 2025 by rpki-client