This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa File: 4769b6e9-42cc-3038-805b-31f7c57b0263.roa (raw, json) Hash identifier: ecKSXrKJlTjeZsJWEO3s8WnOh4SKFkZH0kM50jeRj4g= Subject key identifier: 9B:C8:41:4F:D3:5B:F6:FA:66:DB:1A:1B:F1:10:8F:07:9E:DA:42:3E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C48711F058DF8DEB1DBC5C980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:1f:05:8d:f8:de:b1:db:c5:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=9549ab62-ed1c-41f9-ae5a-f4a649517140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ab:ae:8f:fe:f8:8c:32:26:5a:f4:4a:96:a2: 17:07:dc:14:a7:71:11:e2:0a:a1:66:48:44:1c:8a: 02:24:c1:32:30:f6:c8:4f:47:62:bd:2d:99:57:57: 73:29:53:92:8f:85:a9:43:65:ea:2c:4e:f7:6a:fc: 7f:0f:42:67:f2:ea:84:09:56:54:aa:01:df:31:38: fd:0d:f3:98:93:32:ac:77:ca:a5:58:d5:31:26:f1: b8:0b:7b:16:16:dc:51:3f:60:f8:68:48:db:6e:58: 7f:e6:1e:18:60:3c:e2:3c:30:77:a2:cb:ff:18:7d: ea:38:d4:1d:c6:7e:2e:3b:72:33:0d:29:9b:9f:51: 77:4c:bb:db:18:75:d0:48:d3:5f:e7:44:f6:0a:e9: 8f:50:fe:ad:3b:7c:7c:e7:23:00:92:d0:40:b3:cc: 19:df:d9:59:3e:35:1c:e4:4e:99:0e:01:e6:b4:c7: 8e:3e:23:72:6e:fb:12:46:16:5a:a6:67:35:85:64: aa:d5:34:60:86:e5:c4:bf:89:fb:a2:17:86:b6:db: b8:35:94:6d:91:59:66:d2:8e:fc:15:3e:80:23:71: 6a:27:61:ed:e3:c9:e2:31:03:87:96:ec:fd:17:f5: 90:13:10:46:64:26:8c:32:68:ed:5a:38:4b:28:91: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:41:4F:D3:5B:F6:FA:66:DB:1A:1B:F1:10:8F:07:9E:DA:42:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:eb:8f:45:75:a9:56:dc:6a:0d:20:fc:fe:c3:74:ce:d0:0e: 27:7f:09:f4:fd:3b:d1:24:96:83:0c:7a:d8:07:78:cc:39:53: 36:0c:67:29:76:01:50:b7:b9:e6:dc:dd:fb:1c:03:94:64:1f: 8c:0f:61:05:c2:f7:ed:19:c5:56:aa:31:0e:b9:b8:81:fa:62: 05:01:af:a6:c7:65:62:85:04:cd:f9:6d:2e:04:0f:dd:90:03: 68:28:05:93:cc:e9:22:5f:1e:ee:5a:41:30:f2:0c:9a:7d:4f: 9a:46:ca:f9:d1:0f:3a:6a:ac:80:e3:b5:aa:80:40:c7:46:aa: cb:0f:26:9c:18:62:19:4a:bc:3b:0f:95:80:fb:b6:12:e3:b0: 3c:3d:27:61:1d:a1:8b:01:d8:31:f7:f1:8f:06:69:d0:a4:bf: bc:7e:24:17:7d:42:50:b8:ec:99:b9:3d:98:3c:12:45:39:38: cc:cb:07:d8:54:f9:60:03:68:6b:d0:34:48:37:11:8c:cb:9b: 7c:1c:37:82:d6:cc:c9:c6:28:9b:54:72:45:62:a8:46:21:59: 8b:c2:b3:cd:c9:70:f9:21:bf:da:cf:c9:50:e4:61:d2:5c:cf: bd:b0:81:60:74:fa:b7:6d:b9:e7:a5:bb:9b:a7:f5:97:5c:3b: 5d:9f:12:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcR8FjfjesdvFyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk OTU0OWFiNjItZWQxYy00MWY5LWFlNWEtZjRhNjQ5NTE3MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9quuj/74jDImWvRKlqIXB9wUp3ER4gqhZkhE HIoCJMEyMPbIT0divS2ZV1dzKVOSj4WpQ2XqLE73avx/D0Jn8uqECVZUqgHfMTj9 DfOYkzKsd8qlWNUxJvG4C3sWFtxRP2D4aEjbblh/5h4YYDziPDB3osv/GH3qONQd xn4uO3IzDSmbn1F3TLvbGHXQSNNf50T2CumPUP6tO3x85yMAktBAs8wZ39lZPjUc 5E6ZDgHmtMeOPiNybvsSRhZapmc1hWSq1TRghuXEv4n7oheGttu4NZRtkVlm0o78 FT6AI3FqJ2Ht48niMQOHluz9F/WQExBGZCaMMmjtWjhLKJFfnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJvIQU/TW/b6ZtsaG/EQjwee2kI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDc2OWI2ZTktNDJjYy0z MDM4LTgwNWItMzFmN2M1N2IwMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVeuPRXWpVtxqDSD8/sN0ztAOJ38J9P070SSWgwx62Ad4zDlTNgxn KXYBULe55tzd+xwDlGQfjA9hBcL37RnFVqoxDrm4gfpiBQGvpsdlYoUEzfltLgQP 3ZADaCgFk8zpIl8e7lpBMPIMmn1PmkbK+dEPOmqsgOO1qoBAx0aqyw8mnBhiGUq8 Ow+VgPu2EuOwPD0nYR2hiwHYMffxjwZp0KS/vH4kF31CULjsmbk9mDwSRTk4zMsH 2FT5YANoa9A0SDcRjMubfBw3gtbMycYom1RyRWKoRiFZi8Kzzclw+SG/2s/JUORh 0lzPvbCBYHT6t22556W7m6f1l1w7XZ8SVg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:45 2025 by rpki-client