This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa File: 38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa (raw, json) Hash identifier: 6WxiwxyLqJu+7jF2Mbe7EexAAa6SVTDuQeDpXdCSxCQ= Subject key identifier: 9C:24:95:1D:CE:FC:F5:D3:C1:CB:46:BB:A5:5D:33:3D:AD:FF:C8:BD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A83B781BEB1B36105BABA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3b:78:1b:eb:1b:36:10:5b:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=dcd885c7-65aa-40cc-96cf-6ccbf798af1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:21:36:6e:42:54:b0:3c:75:c7:05:8a:f2: 5a:45:ae:e9:58:a5:e1:dc:f5:6b:12:24:b9:8b:1e: 58:0f:ba:6b:bd:41:32:cf:59:f9:52:7b:4f:ae:c9: 36:89:49:ae:31:32:a9:bd:5d:ab:1a:1e:02:8a:ca: cb:1a:3f:14:81:95:5c:f4:6b:91:73:66:26:b7:cb: e0:df:4e:c3:27:23:c6:52:62:e5:4b:f9:47:fe:b2: 7a:38:9f:ae:fa:e8:74:02:92:24:9f:88:aa:c3:72: 43:8b:f5:68:1e:14:6a:06:dc:8e:cb:37:12:be:47: 21:76:bb:f2:20:15:d9:d8:8d:7a:46:bb:c6:f6:16: 6f:b0:3f:3a:ed:66:65:53:84:7b:18:5b:12:9c:4a: 8e:0f:e8:66:95:29:4d:bd:03:9e:8b:7a:34:45:64: 26:da:83:63:9d:dc:ee:d8:36:73:6b:2f:fb:2b:73: 7d:fb:4a:1a:84:72:a9:bf:49:ca:ed:f5:eb:21:d3: ae:a7:02:b1:fa:2c:5f:10:46:c6:ee:49:0b:50:7d: 3a:31:e6:df:9d:16:ee:11:d6:4d:a4:83:63:d1:98: c2:0c:17:b0:fa:68:dd:1c:38:5e:ee:f9:fb:e0:3e: be:c2:6e:d7:66:45:fe:90:2c:b9:58:6f:b5:0a:71: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:24:95:1D:CE:FC:F5:D3:C1:CB:46:BB:A5:5D:33:3D:AD:FF:C8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a1:9d:4f:7a:01:62:20:20:9e:01:4d:9e:0b:88:dd:45:48: 76:db:06:ac:03:1c:0b:8e:19:71:1e:44:13:8a:76:88:a6:10: fb:8a:9c:f6:ea:9d:38:48:b7:1a:bd:68:dc:90:05:7d:d7:92: 57:bc:94:69:b2:2a:a7:39:38:3d:71:8f:a6:6f:79:2f:f9:39: e5:ac:13:24:e8:b1:eb:bc:51:c5:3a:7c:b1:91:4e:bd:3d:62: ab:b7:e9:e1:a0:97:80:55:e9:c3:ae:d2:64:b5:16:94:11:3c: ef:d0:3f:52:d1:4a:e4:12:b9:a4:54:9f:fc:3b:df:db:d5:5f: b5:79:2a:ab:1d:97:a9:eb:31:a8:e1:dc:b4:67:c6:cd:11:50: 34:10:b9:8a:c4:6f:09:49:5e:a1:a4:9b:f4:10:10:91:ea:1e: a2:15:12:a6:32:0a:33:02:aa:31:2c:6a:bb:04:e7:e2:99:11: 7a:9a:da:d1:d4:6b:96:43:0e:7a:81:2e:e7:e7:d5:4b:62:f4: 00:3f:b2:07:d0:9c:d6:b3:ed:2d:6d:ec:80:a7:d6:23:d6:7d: f0:04:13:9d:65:ac:e0:81:52:0d:3c:c7:5b:c7:fb:b9:ba:28: 56:4c:34:14:db:7d:b2:08:3f:90:c7:bf:11:1f:1c:43:01:69: 9e:cb:53:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDt4G+sbNhBbq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGNkODg1YzctNjVhYS00MGNjLTk2Y2YtNmNjYmY3OThhZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0hNm5CVLA8dccFivJaRa7pWKXh3PVrEiS5 ix5YD7prvUEyz1n5UntPrsk2iUmuMTKpvV2rGh4CisrLGj8UgZVc9GuRc2Ymt8vg 307DJyPGUmLlS/lH/rJ6OJ+u+uh0ApIkn4iqw3JDi/VoHhRqBtyOyzcSvkchdrvy IBXZ2I16RrvG9hZvsD867WZlU4R7GFsSnEqOD+hmlSlNvQOei3o0RWQm2oNjndzu 2DZzay/7K3N9+0oahHKpv0nK7fXrIdOupwKx+ixfEEbG7kkLUH06MebfnRbuEdZN pINj0ZjCDBew+mjdHDhe7vn74D6+wm7XZkX+kCy5WG+1CnH1IwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJwklR3O/PXTwctGu6VdMz2t/8i9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzhmZGNhM2MtYjhlOS0z MDMxLTk3NTctMTU0YzJiN2Q3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujgQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZaGdT3oBYiAgngFNnguI3UVIdtsGrAMcC44ZcR5EE4p2iKYQ+4qc 9uqdOEi3Gr1o3JAFfdeSV7yUabIqpzk4PXGPpm95L/k55awTJOix67xRxTp8sZFO vT1iq7fp4aCXgFXpw67SZLUWlBE879A/UtFK5BK5pFSf/Dvf29VftXkqqx2Xqesx qOHctGfGzRFQNBC5isRvCUleoaSb9BAQkeoeohUSpjIKMwKqMSxquwTn4pkRepra 0dRrlkMOeoEu5+fVS2L0AD+yB9Cc1rPtLW3sgKfWI9Z98AQTnWWs4IFSDTzHW8f7 ubooVkw0FNt9sgg/kMe/ER8cQwFpnstTIw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:56 2025 by rpki-client