This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa File: 4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa (raw, json) Hash identifier: Jc9tMwSNC9QruBUlfeoqnTdGzs83pqPqxqswRi80hP8= Subject key identifier: 32:3E:E9:F8:D3:91:F6:34:B8:FE:5A:AA:74:5C:FC:4F:59:46:63:12 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBF95140F1084B5EBA78C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e8e:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f9:51:40:f1:08:4b:5e:ba:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=a7f9ec28-94bc-4494-9d0a-f3cd26c016cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:aa:6a:d7:b6:cd:a2:13:01:58:3b:83:dd: 9d:35:dc:c9:63:3a:2f:3f:92:cc:f1:53:b8:69:52: 91:97:a1:8e:b9:e2:1c:f2:10:bf:fb:5b:f0:2c:f7: 57:d8:dc:b4:af:a3:5d:33:ce:ba:88:cc:bc:89:fb: 00:12:5b:7a:12:2e:3e:82:38:2e:1c:de:c7:6a:0e: 17:b4:8d:6c:97:94:64:5a:8f:47:c1:69:5d:3d:9e: 87:d0:2a:1d:dd:b0:da:33:d5:8d:56:91:36:21:af: 67:c7:16:c3:d8:a8:7d:a3:bc:57:46:47:b9:b2:61: f4:2d:db:98:56:15:63:78:db:08:8c:fe:c5:d4:12: 32:cc:21:5b:00:f6:de:1e:16:93:bd:b5:67:e8:a3: 76:04:ef:4f:f5:1f:26:18:b5:29:e5:7f:d7:43:20: 3f:5b:dd:84:c7:42:5d:85:db:38:89:0d:db:30:e9: 83:e7:9a:f2:26:5b:b2:46:45:e8:e3:5b:c5:14:ef: cc:25:9d:8b:e3:9b:dc:c5:af:92:ae:91:72:82:cc: af:52:db:73:12:99:79:63:bb:8c:a6:9b:4d:8e:2d: ba:2a:e5:14:7b:a1:48:be:09:3a:a6:ed:40:3c:bc: 66:83:5c:10:a2:8c:d6:41:70:30:fe:b3:a0:c3:12: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:E9:F8:D3:91:F6:34:B8:FE:5A:AA:74:5C:FC:4F:59:46:63:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:75:74:89:06:c0:dd:76:e6:fd:5f:d7:36:c5:b1:72:a3:00: ba:dd:ff:f4:f9:58:19:72:22:6d:e1:59:98:ed:dc:8a:41:d5: 80:b6:98:bb:31:29:8e:db:7f:3d:0e:f6:5c:34:a9:51:25:94: 26:20:d7:48:bc:06:3d:25:3d:22:55:d2:ae:2d:da:b8:9e:8c: 35:e8:9a:27:44:c0:8b:b4:af:54:3c:7e:87:00:84:64:6d:17: d3:2a:2b:93:09:a0:c4:c9:e7:8b:31:5b:0d:a0:d3:6b:73:ea: dd:85:ed:35:c2:15:dd:50:28:fb:c0:7c:d1:87:4e:2c:ee:1f: 79:c5:ef:95:00:f1:68:2d:39:0a:61:ca:a0:2d:ec:f5:8e:1a: 8a:c1:af:69:53:07:a1:78:da:dd:44:10:8f:4d:b4:96:87:66: 4b:e5:5c:9e:ce:da:8f:4e:c0:fc:43:aa:e2:a0:bb:b8:7b:45: 76:b9:ef:ec:72:57:8e:30:b8:80:94:ca:9c:07:3a:d4:45:8c: 0f:e3:0b:e1:12:48:04:0b:31:e9:e3:e9:d5:f1:2b:66:da:85: 25:af:b5:6f:f9:53:89:30:bb:31:06:6f:40:98:3d:37:d4:22: b9:8a:c9:40:82:ce:e8:6f:a6:90:07:9d:8a:6b:47:2d:fd:a3: 99:fa:b7:bd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2/lRQPEIS166eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YTdmOWVjMjgtOTRiYy00NDk0LTlkMGEtZjNjZDI2YzAxNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Taqate2zaITAVg7g92dNdzJYzovP5LM8VO4 aVKRl6GOueIc8hC/+1vwLPdX2Ny0r6NdM866iMy8ifsAElt6Ei4+gjguHN7Hag4X tI1sl5RkWo9HwWldPZ6H0Cod3bDaM9WNVpE2Ia9nxxbD2Kh9o7xXRke5smH0LduY VhVjeNsIjP7F1BIyzCFbAPbeHhaTvbVn6KN2BO9P9R8mGLUp5X/XQyA/W92Ex0Jd hds4iQ3bMOmD55ryJluyRkXo41vFFO/MJZ2L45vcxa+SrpFygsyvUttzEpl5Y7uM pptNji26KuUUe6FIvgk6pu1APLxmg1wQoozWQXAw/rOgwxKQYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDI+6fjTkfY0uP5aqnRc/E9ZRmMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDE1NjQzNWItYzViNi0z YmFlLWI1NmQtMzFlZWI2Y2EwYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujhgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADXV0iQbA3Xbm/V/XNsWxcqMAut3/9PlYGXIibeFZmO3cikHVgLaY uzEpjtt/PQ72XDSpUSWUJiDXSLwGPSU9IlXSri3auJ6MNeiaJ0TAi7SvVDx+hwCE ZG0X0yorkwmgxMnnizFbDaDTa3Pq3YXtNcIV3VAo+8B80YdOLO4fecXvlQDxaC05 CmHKoC3s9Y4aisGvaVMHoXja3UQQj020lodmS+Vcns7aj07A/EOq4qC7uHtFdrnv 7HJXjjC4gJTKnAc61EWMD+ML4RJIBAsx6ePp1fErZtqFJa+1b/lTiTC7MQZvQJg9 N9QiuYrJQILO6G+mkAedimtHLf2jmfq3vQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:54:46 2025 by rpki-client