This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa File: 496e57df-4052-3374-ae88-e803a24982b0.roa (raw, json) Hash identifier: Xbc3j3JBQr/vtoiAiJbT0S7VrLiMqXF0LVOBczNANEQ= Subject key identifier: C2:EB:62:EE:C2:DF:07:52:9F:F8:E8:C3:75:18:C3:43:22:1E:7B:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBFFA0BFF33F0B7A063000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ff:a0:bf:f3:3f:0b:7a:06:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=885c3e6b-0331-4e37-a4fa-286dfc9617cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:e2:18:2b:77:68:88:9e:a7:e3:a6:01:80: 70:b0:a3:06:65:c1:a1:2e:c9:dd:a3:41:f9:8c:a3: 52:50:ca:fc:b2:1c:cf:74:b6:b9:be:1e:0e:55:f9: f7:f0:1a:dc:dd:1a:a7:fc:90:d2:b8:10:e6:03:d1: ab:d0:a8:59:a2:8e:a9:68:c6:4c:b0:8e:e7:79:c8: c2:ac:6e:c4:68:f5:50:1c:2a:f8:f5:fe:6f:90:78: 0e:79:f0:42:6e:6c:1f:23:f9:55:a8:46:9f:65:23: 0f:8c:36:09:1e:4a:ea:3b:1c:e1:94:f9:32:9a:75: d6:5e:3f:2f:9c:04:0a:4a:55:44:57:e0:ec:b1:18: 56:07:c4:54:77:55:6b:d3:48:b5:fb:23:7c:18:de: 65:5a:ad:d6:05:9b:3d:53:2a:64:7a:11:27:9a:8f: 8e:3b:0d:ec:08:7f:f4:da:2f:0a:a0:10:40:5f:95: a5:51:90:80:83:8f:f4:ba:cd:2d:d6:54:33:62:1f: 80:20:e5:6e:9f:87:7b:46:66:f3:4a:2c:3d:fc:1b: e4:bd:a5:eb:92:62:4c:d3:33:9d:5d:ad:e5:c5:82: 61:5c:ba:a9:e4:73:3d:02:a1:98:06:71:ba:5d:f0: fe:9c:e9:54:9c:b2:98:19:bd:ff:7a:bb:be:7d:37: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:62:EE:C2:DF:07:52:9F:F8:E8:C3:75:18:C3:43:22:1E:7B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fc:be:61:71:d1:d7:b6:ae:88:b3:41:ed:f4:23:26:7a:1d: 4b:e9:b9:ae:6a:8f:14:db:fa:8f:b7:fa:fb:5b:36:55:79:15: e9:77:1e:75:49:69:3a:be:6a:26:9c:c3:d8:60:25:22:a3:e2: f5:a0:b6:ff:5b:87:e9:e7:9e:af:e9:f0:65:8c:3c:94:9a:c2: 5f:01:5b:e7:60:aa:0c:4c:54:61:32:bf:59:81:7d:b3:36:70: 1f:d2:fa:13:30:64:32:4f:f5:60:8c:01:fa:ce:32:ca:e5:38: 53:1a:d2:74:91:68:b7:5f:a0:df:92:34:a9:2a:06:15:5e:94: be:bc:ed:54:e6:18:20:37:93:8a:3d:e5:fa:34:55:81:b7:50: fa:cd:72:9e:d1:72:b3:99:55:d8:62:2b:5d:c8:98:a8:c6:38: ed:ff:ad:5f:a1:b3:f0:4f:b4:05:a6:5a:01:e5:ff:0d:69:43: 45:60:ab:25:af:92:39:c6:4c:1e:c7:e9:e0:d5:c6:51:b3:90: ef:fb:81:dc:f8:2a:1b:62:54:48:a2:07:3a:e9:ec:0d:f1:82: d6:da:6b:8c:57:44:e2:29:cd:54:01:68:6b:29:15:d7:d1:8c: d0:0f:87:bd:84:fb:87:09:69:87:4d:e4:4c:1e:9c:97:47:73: b7:da:a7:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2/+gv/M/C3oGMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODg1YzNlNmItMDMzMS00ZTM3LWE0ZmEtMjg2ZGZjOTYxN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4viGCt3aIiep+OmAYBwsKMGZcGhLsndo0H5 jKNSUMr8shzPdLa5vh4OVfn38Brc3Rqn/JDSuBDmA9Gr0KhZoo6paMZMsI7necjC rG7EaPVQHCr49f5vkHgOefBCbmwfI/lVqEafZSMPjDYJHkrqOxzhlPkymnXWXj8v nAQKSlVEV+DssRhWB8RUd1Vr00i1+yN8GN5lWq3WBZs9UypkehEnmo+OOw3sCH/0 2i8KoBBAX5WlUZCAg4/0us0t1lQzYh+AIOVun4d7RmbzSiw9/BvkvaXrkmJM0zOd Xa3lxYJhXLqp5HM9AqGYBnG6XfD+nOlUnLKYGb3/eru+fTe7yQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMLrYu7C3wdSn/jow3UYw0MiHnt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDk2ZTU3ZGYtNDA1Mi0z Mzc0LWFlODgtZTgwM2EyNDk4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujmAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAivy+YXHR17auiLNB7fQjJnodS+m5rmqPFNv6j7f6+1s2VXkV6Xce dUlpOr5qJpzD2GAlIqPi9aC2/1uH6eeer+nwZYw8lJrCXwFb52CqDExUYTK/WYF9 szZwH9L6EzBkMk/1YIwB+s4yyuU4UxrSdJFot1+g35I0qSoGFV6UvrztVOYYIDeT ij3l+jRVgbdQ+s1yntFys5lV2GIrXciYqMY47f+tX6Gz8E+0BaZaAeX/DWlDRWCr Ja+SOcZMHsfp4NXGUbOQ7/uB3PgqG2JUSKIHOunsDfGC1tprjFdE4inNVAFoaykV 19GM0A+HvYT7hwlph03kTB6cl0dzt9qn1A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:52 2025 by rpki-client