This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33a8e9d1-9df4-3499-b801-160c0352c577.roa File: 33a8e9d1-9df4-3499-b801-160c0352c577.roa (raw, json) Hash identifier: c8J8VsksA/tkGuOy0Kvn6lcd8+SNE0Y5jTRg0CGmWag= Subject key identifier: CA:9D:DA:6A:B2:E0:2E:7E:7F:AD:87:33:C5:95:67:56:9A:C5:F1:1C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A697BFE31B1105CE8FD420 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33a8e9d1-9df4-3499-b801-160c0352c577.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:97:bf:e3:1b:11:05:ce:8f:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3576b68b-1325-4aef-9313-a80f04806f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:d0:f4:82:58:ee:70:05:38:06:e0:97:0a: a4:75:af:6c:40:b9:f3:89:7d:02:de:ab:7f:a1:4d: 07:26:7b:f5:13:f7:65:28:c7:75:19:24:ed:2a:4e: cc:0a:0a:b6:85:cd:88:6d:8a:39:3f:3f:30:0e:e4: fb:86:68:53:b4:be:2f:8d:b6:fd:ac:1a:cc:6b:58: b2:16:fe:53:87:c6:de:b3:91:92:5c:59:17:f0:1e: 70:5c:3d:c6:24:12:0f:4e:b1:0b:f3:b6:05:85:12: ea:b3:54:fa:e1:d1:9f:c6:fd:ae:c9:31:ca:34:bd: c0:18:ce:16:0f:e9:df:a7:05:d9:51:84:bd:7d:6b: 14:ac:f8:77:49:68:e0:46:6d:1f:a2:96:cd:18:e3: c0:19:2d:a5:8e:42:1e:a4:c5:8d:67:71:59:1e:8b: 2a:0b:55:44:1c:a7:61:e0:45:94:3e:db:08:15:a7: c7:10:c0:a9:1a:a2:58:bf:da:b8:6b:4e:4b:13:c5: 19:31:75:73:3a:be:9d:a7:78:62:cb:eb:ae:c1:15: 79:5e:76:e6:af:ca:af:85:3f:b7:a5:23:29:99:43: e7:57:a8:d5:53:21:15:15:fe:ab:d0:35:d8:8e:25: 43:29:d5:c2:87:b3:97:9d:e0:bb:e0:99:55:c2:a3: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9D:DA:6A:B2:E0:2E:7E:7F:AD:87:33:C5:95:67:56:9A:C5:F1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33a8e9d1-9df4-3499-b801-160c0352c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:65:44:92:44:95:00:1b:76:90:58:aa:73:94:42:f4:00:88: a4:03:b4:ae:aa:8c:89:26:fa:2a:ae:2b:fe:40:2f:16:6d:16: b2:06:38:52:f8:b5:8a:01:c3:dc:59:f2:6b:a1:c5:93:9b:5b: 33:5a:86:8f:d9:36:a1:c5:06:82:de:45:9f:01:65:0a:87:4a: 57:b0:60:aa:3b:6e:32:99:b2:98:79:3c:f1:cf:89:39:e6:88: 0a:85:53:0e:72:ad:76:9a:34:af:0f:9b:05:8f:e2:42:0a:90: fe:31:d6:fe:4d:5a:cb:f1:9d:f9:31:4b:0a:54:43:af:8c:24: 6f:47:23:2b:69:1a:b2:9a:74:17:32:41:95:29:1f:2e:e9:2e: 5e:79:1b:82:40:d7:38:cb:f7:69:5b:10:c2:02:be:19:df:c0: 57:d3:ad:3a:fe:05:67:f6:08:9c:fb:c4:03:5e:e7:8d:ad:c9: 87:d2:53:fd:f7:7c:aa:79:1b:19:32:e5:e8:4a:9c:d8:d2:72: 2f:3a:ba:c5:07:ce:3e:9d:67:24:81:53:ed:02:43:3a:ac:37: 1b:b7:1f:36:76:81:be:0e:46:dc:ea:1c:fe:4a:dd:c2:96:b7: 7e:67:fe:cc:9b:37:7c:6b:8b:84:f9:46:1b:ad:01:16:e1:f3: 72:f7:19:fa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppe/4xsRBc6P1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzU3NmI2OGItMTMyNS00YWVmLTkzMTMtYTgwZjA0ODA2ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeTQ9IJY7nAFOAbglwqkda9sQLnziX0C3qt/ oU0HJnv1E/dlKMd1GSTtKk7MCgq2hc2IbYo5Pz8wDuT7hmhTtL4vjbb9rBrMa1iy Fv5Th8bes5GSXFkX8B5wXD3GJBIPTrEL87YFhRLqs1T64dGfxv2uyTHKNL3AGM4W D+nfpwXZUYS9fWsUrPh3SWjgRm0fopbNGOPAGS2ljkIepMWNZ3FZHosqC1VEHKdh 4EWUPtsIFafHEMCpGqJYv9q4a05LE8UZMXVzOr6dp3hiy+uuwRV5Xnbmr8qvhT+3 pSMpmUPnV6jVUyEVFf6r0DXYjiVDKdXCh7OXneC74JlVwqPhlwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMqd2mqy4C5+f62HM8WVZ1aaxfEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzNhOGU5ZDEtOWRmNC0z NDk5LWI4MDEtMTYwYzAzNTJjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfGVEkkSVABt2kFiqc5RC9ACIpAO0rqqMiSb6Kq4r/kAvFm0WsgY4 Uvi1igHD3Fnya6HFk5tbM1qGj9k2ocUGgt5FnwFlCodKV7BgqjtuMpmymHk88c+J OeaICoVTDnKtdpo0rw+bBY/iQgqQ/jHW/k1ay/Gd+TFLClRDr4wkb0cjK2kaspp0 FzJBlSkfLukuXnkbgkDXOMv3aVsQwgK+Gd/AV9OtOv4FZ/YInPvEA17nja3Jh9JT /fd8qnkbGTLl6Eqc2NJyLzq6xQfOPp1nJIFT7QJDOqw3G7cfNnaBvg5G3Ooc/krd wpa3fmf+zJs3fGuLhPlGG60BFuHzcvcZ+g== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:06 2025 by rpki-client