This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/499ed6c1-bd4e-3a5d-b0a0-5ee1c1b9138c.roa File: 499ed6c1-bd4e-3a5d-b0a0-5ee1c1b9138c.roa (raw, json) Hash identifier: i4UHQPfWtYPpJ3YWqQibKFDB4Ild7liHbzOhi1cQaVA= Subject key identifier: B5:62:02:E3:45:4A:E8:06:2E:2F:02:FD:05:92:43:56:FB:1D:7A:9A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A83ED132CFDE925963A600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/499ed6c1-bd4e-3a5d-b0a0-5ee1c1b9138c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3e:d1:32:cf:de:92:59:63:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=311a026f-37f4-47d0-a344-95dcd28f2650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:49:a5:af:b6:2c:d7:89:91:9b:af:f0:69: 2f:df:18:6e:68:ff:67:8a:ae:79:ef:05:62:59:af: 7d:7e:18:8e:c7:12:11:5a:66:ba:49:ea:5b:40:12: eb:dc:98:71:5e:79:64:03:d4:2a:dd:d9:1a:d6:9b: a0:71:f2:45:5a:d9:7e:2a:e1:32:d6:10:c2:89:67: 81:05:7b:21:49:bb:e0:4d:31:d1:1f:03:f8:57:12: 89:bb:a5:94:e5:22:4c:f8:b1:ff:61:1f:20:07:d1: 6f:7b:76:da:14:e4:0e:6a:03:a1:87:41:69:97:ac: 26:7a:c2:06:64:32:80:f6:07:ac:b4:93:73:f7:b8: 34:bd:ae:b3:a4:ba:4d:ad:7c:e7:68:43:c1:7b:1b: b4:5a:6d:5c:d6:06:82:60:f4:58:29:1a:30:5a:46: cd:40:d3:11:91:14:b3:b5:7d:77:02:bc:a7:d1:d2: 8f:ce:ca:f4:9d:5a:3c:89:34:39:1e:ef:b8:c5:cc: 30:c9:d6:68:94:3f:2d:05:49:b8:c8:10:c4:09:ab: 6d:58:be:4a:7c:9c:79:54:3b:51:11:85:1b:47:38: 73:b0:15:9c:99:11:a5:7c:b0:8e:b8:8d:d6:5b:60: 01:a6:aa:0b:ce:8f:5d:88:a0:38:9c:24:a8:6a:82: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:02:E3:45:4A:E8:06:2E:2F:02:FD:05:92:43:56:FB:1D:7A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/499ed6c1-bd4e-3a5d-b0a0-5ee1c1b9138c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:53:83:46:e5:48:34:df:2a:09:04:69:3d:de:d2:80:ec:32: 76:59:7a:23:33:88:bf:28:fd:96:5b:56:f1:c9:04:b3:0a:16: df:1f:89:94:a4:a6:a2:04:a2:74:82:79:40:8d:f1:23:88:ae: 03:f3:25:97:a2:39:a6:ca:b2:65:a9:67:eb:fe:3b:a9:00:00: 69:7e:8d:5f:30:ff:05:cc:69:58:dd:89:56:57:bc:d8:71:1a: a6:4d:b5:a8:18:5e:dd:db:a7:ae:f5:0a:c6:b9:ee:52:55:b0: 6a:b0:57:32:57:46:05:35:f5:56:1b:93:d2:e7:6c:b8:a2:a2: 47:34:9b:a4:b9:3a:20:85:48:61:e0:a7:21:4a:41:7a:ab:62: f3:d2:f6:1a:62:44:df:67:43:95:87:bd:64:7b:0a:ec:2c:7c: f3:da:e9:d7:64:89:e1:52:74:de:0b:ef:1f:a4:e8:72:23:43: 65:a0:49:da:ea:05:b4:0b:04:3c:43:f2:46:96:98:15:7d:46: 88:41:f3:6d:e0:86:98:f4:88:3d:4c:07:b4:65:7e:1a:ab:1c: 37:9f:e1:b0:4e:07:f6:76:5d:98:cb:ab:4e:e5:52:20:1e:a1: 18:ad:48:bf:71:5a:c8:93:b1:de:f6:ce:36:cb:dd:f5:b8:48: e7:06:d3:0f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqD7RMs/eklljpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzExYTAyNmYtMzdmNC00N2QwLWEzNDQtOTVkY2QyOGYyNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BJpa+2LNeJkZuv8Gkv3xhuaP9niq557wVi Wa99fhiOxxIRWma6SepbQBLr3JhxXnlkA9Qq3dka1pugcfJFWtl+KuEy1hDCiWeB BXshSbvgTTHRHwP4VxKJu6WU5SJM+LH/YR8gB9Fve3baFOQOagOhh0Fpl6wmesIG ZDKA9gestJNz97g0va6zpLpNrXznaEPBexu0Wm1c1gaCYPRYKRowWkbNQNMRkRSz tX13Aryn0dKPzsr0nVo8iTQ5Hu+4xcwwydZolD8tBUm4yBDECattWL5KfJx5VDtR EYUbRzhzsBWcmRGlfLCOuI3WW2ABpqoLzo9diKA4nCSoaoLwsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLViAuNFSugGLi8C/QWSQ1b7HXqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDk5ZWQ2YzEtYmQ0ZS0z YTVkLWIwYTAtNWVlMWMxYjkxMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujLQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPFODRuVINN8qCQRpPd7SgOwydll6IzOIvyj9lltW8ckEswoW3x+J lKSmogSidIJ5QI3xI4iuA/Mll6I5psqyZaln6/47qQAAaX6NXzD/BcxpWN2JVle8 2HEapk21qBhe3dunrvUKxrnuUlWwarBXMldGBTX1VhuT0udsuKKiRzSbpLk6IIVI YeCnIUpBeqti89L2GmJE32dDlYe9ZHsK7Cx889rp12SJ4VJ03gvvH6TociNDZaBJ 2uoFtAsEPEPyRpaYFX1GiEHzbeCGmPSIPUwHtGV+GqscN5/hsE4H9nZdmMurTuVS IB6hGK1Iv3FayJOx3vbONsvd9bhI5wbTDw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:19:23 2025 by rpki-client