This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa File: 3b98607c-312f-3adf-a754-290a30263a4d.roa (raw, json) Hash identifier: AT2qiIeG+k2TZVDEO8HixF9Cu+Q2TXxr/+kH15xI96I= Subject key identifier: AA:43:76:2D:B3:42:36:12:79:C7:2D:12:C1:76:7A:8F:0E:78:38:CD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B1071E1104447F9DF6AD80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:07:1e:11:04:44:7f:9d:f6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=154a94d5-c00d-4e0f-9c50-14e2a3cea688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:23:56:90:07:99:a4:b3:34:85:a8:96:36: 42:d7:43:9e:df:b5:41:4e:f1:3c:ac:0b:c1:88:b4: e4:c0:5c:44:eb:cc:61:67:d3:c4:60:2d:a1:ed:26: 30:32:f8:0b:89:25:5b:cc:5f:65:13:35:95:31:bb: 31:2d:16:95:5f:db:5d:04:1c:14:71:ee:37:b8:88: 15:d1:4a:0e:f2:f7:b9:ee:29:3f:44:84:a1:cb:d0: 1f:13:68:db:f2:ea:41:dd:7a:25:f4:a7:8c:20:d0: 38:27:39:2f:1f:28:0f:3a:7f:9c:40:79:31:82:47: 18:ca:c9:58:04:6a:0b:85:94:5f:89:d7:3c:04:0c: c0:a3:4f:23:dd:c7:d2:3c:e7:fc:41:7f:24:9e:6f: ee:e8:b7:fd:08:a0:a7:f1:6f:c7:49:17:7a:4b:9f: 95:5d:65:d2:cf:73:0f:31:5d:3c:c5:65:b3:79:ec: f5:2c:c8:62:6d:b5:30:1b:c6:a8:5b:c5:1e:03:ef: 38:7d:a9:44:0a:05:5e:de:c8:7f:dc:17:85:ba:00: 02:83:e4:c9:55:3e:82:c3:60:00:ff:28:d2:13:38: 06:e7:12:81:b3:ce:f1:d4:6e:bb:37:80:05:52:8f: 29:fa:d8:76:df:5c:71:1c:b8:ce:d5:9b:0b:b3:89: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:76:2D:B3:42:36:12:79:C7:2D:12:C1:76:7A:8F:0E:78:38:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1a:39:5b:57:db:ae:fa:a2:60:e4:64:c0:ea:a5:69:fa:cd: a8:92:90:c1:9e:b8:01:0d:c6:fc:9a:d9:f1:3a:b0:f7:8c:c5: 11:7f:04:4c:07:4f:d6:a4:a4:9a:9b:4d:2d:8d:9e:4a:8a:fb: 7f:9f:5f:19:f6:85:0b:ec:e1:ad:66:d4:c8:23:55:c4:63:19: 27:de:ae:48:9f:ce:77:e1:89:f8:ca:78:5f:18:a3:9b:f3:bc: ea:1f:24:6f:ac:92:fb:8a:4b:4a:0e:c1:d7:6e:f0:19:f8:83: 04:cd:a5:4b:ed:96:92:6b:4b:7c:2b:e9:9e:26:64:2b:f0:e8: c9:5a:c5:c4:61:45:a2:2d:15:16:d9:0b:ee:8c:f0:9f:83:87: b9:7e:03:2f:f2:07:b2:8e:3a:fa:12:b5:12:1d:96:4f:89:b8: d2:43:85:4f:c1:81:b0:0d:8d:f7:d0:ab:4e:a7:d2:02:3f:04: 5b:66:99:24:16:7b:1a:7b:78:2a:42:b7:bb:a2:cd:62:82:db: 48:1a:bc:86:41:d7:67:9b:48:28:02:05:07:43:c3:9c:b7:27: f6:ce:b8:00:f4:68:a7:63:cd:2b:55:da:c2:a3:09:3c:56:6a: f8:c7:1c:e7:e8:3e:66:79:b4:57:77:06:97:66:97:12:ee:33: eb:f5:be:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sQceEQREf532rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MTU0YTk0ZDUtYzAwZC00ZTBmLTljNTAtMTRlMmEzY2VhNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSkjVpAHmaSzNIWoljZC10Oe37VBTvE8rAvB iLTkwFxE68xhZ9PEYC2h7SYwMvgLiSVbzF9lEzWVMbsxLRaVX9tdBBwUce43uIgV 0UoO8ve57ik/RIShy9AfE2jb8upB3Xol9KeMINA4JzkvHygPOn+cQHkxgkcYyslY BGoLhZRfidc8BAzAo08j3cfSPOf8QX8knm/u6Lf9CKCn8W/HSRd6S5+VXWXSz3MP MV08xWWzeez1LMhibbUwG8aoW8UeA+84falECgVe3sh/3BeFugACg+TJVT6Cw2AA /yjSEzgG5xKBs87x1G67N4AFUo8p+th231xxHLjO1ZsLs4mBcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKpDdi2zQjYSecctEsF2eo8OeDjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2I5ODYwN2MtMzEyZi0z YWRmLWE3NTQtMjkwYTMwMjYzYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkRo5W1fbrvqiYORkwOqlafrNqJKQwZ64AQ3G/JrZ8Tqw94zFEX8E TAdP1qSkmptNLY2eSor7f59fGfaFC+zhrWbUyCNVxGMZJ96uSJ/Od+GJ+Mp4Xxij m/O86h8kb6yS+4pLSg7B127wGfiDBM2lS+2WkmtLfCvpniZkK/DoyVrFxGFFoi0V FtkL7ozwn4OHuX4DL/IHso46+hK1Eh2WT4m40kOFT8GBsA2N99CrTqfSAj8EW2aZ JBZ7Gnt4KkK3u6LNYoLbSBq8hkHXZ5tIKAIFB0PDnLcn9s64APRop2PNK1XawqMJ PFZq+Mcc5+g+Znm0V3cGl2aXEu4z6/W+3A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:34 2025 by rpki-client