This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa File: 4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa (raw, json) Hash identifier: n9hCAI5Ql9SVvgMirrPEA+5NWQ6btTvtwQZ8Feyhn7k= Subject key identifier: F5:30:E1:B8:F9:96:62:DF:53:CC:BA:31:97:55:DE:3B:78:84:79:62 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6646080BF9F8A4EB04054 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:64:60:80:bf:9f:8a:4e:b0:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=be8fdfcb-6d3f-4a5f-b538-23f22cc54961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:6a:6b:cb:3d:76:7e:b2:2e:09:63:4e:49: 01:7f:a1:88:e4:fb:56:18:ae:09:69:d3:28:4c:d6: 66:07:f7:53:86:cf:f0:c5:08:0a:d2:e9:75:2a:2d: 2b:23:b0:13:5c:22:f7:c1:1c:77:39:12:87:86:82: 1b:24:64:31:ac:f2:61:f9:3b:80:d9:ca:57:19:eb: 2d:3e:d5:db:f5:47:8c:c3:7c:76:d6:26:07:30:3a: be:59:53:12:0e:d6:da:c0:08:3e:bd:65:7f:11:6f: 39:63:a2:b4:3d:a2:25:6a:2f:ab:23:af:c9:cb:29: a1:bd:fb:03:21:19:c0:f0:b5:5d:37:49:c2:60:8b: 05:54:e0:e6:a9:a1:7b:27:20:1f:14:9d:40:b8:48: e2:8b:11:1f:89:92:3a:86:83:41:f7:91:a0:e6:25: 70:d7:ec:77:82:0a:63:d6:93:1e:4b:6d:66:c3:40: a3:21:21:6c:cb:c8:52:2f:d8:c3:88:22:6b:7d:e6: fd:46:53:f1:f2:a1:b8:0c:b1:16:6e:f4:6c:bc:8f: 0d:b4:be:c2:4d:71:39:08:47:4d:f3:b5:74:83:46: fd:ff:af:b9:60:c2:88:26:30:6e:c6:aa:a3:11:69: 27:3c:4b:f0:ca:98:01:17:45:11:68:ec:56:a1:4f: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:30:E1:B8:F9:96:62:DF:53:CC:BA:31:97:55:DE:3B:78:84:79:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:11:07:00:af:84:15:8e:75:3f:59:16:61:9b:ac:13:1b:c6: 8d:2b:89:eb:2e:06:eb:14:ca:fb:21:63:fc:e8:57:20:a2:5d: 2a:8d:de:9f:0d:47:47:60:2a:32:70:4d:52:31:5f:32:ec:7c: ff:c4:4a:47:e7:96:53:d3:92:6c:58:13:8c:04:11:95:43:56: cc:a7:51:15:7e:5c:83:33:c2:1c:59:61:41:0b:7f:23:08:c0: f9:de:6f:a8:09:d8:05:60:7a:51:ae:83:73:7c:c0:3b:64:89: a9:4e:ca:17:cb:2b:6f:5a:74:2a:8e:cd:4c:88:3f:15:11:5a: 6e:a3:61:02:f4:94:c8:11:b7:ac:aa:46:aa:28:ab:87:e0:cd: 4c:79:33:19:b4:03:04:7c:a4:0b:05:b0:94:60:50:c0:8d:4e: 44:c1:5f:48:43:88:27:8f:d6:09:c7:ab:b9:58:4a:a2:3e:0a: ea:07:49:eb:7c:f5:b8:5c:3c:53:68:e5:75:23:32:cd:13:bf: 42:31:5f:79:c5:c4:ba:9b:9a:ac:02:92:f9:ab:39:39:68:19: af:a9:0e:c5:c5:93:cc:31:fc:07:eb:41:84:c5:9b:9f:68:ef: f8:ee:8c:53:11:4d:2f:cd:13:29:b1:13:07:a2:42:68:00:a7: 75:24:94:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpmRggL+fik6wQFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmU4ZmRmY2ItNmQzZi00YTVmLWI1MzgtMjNmMjJjYzU0OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYlqa8s9dn6yLgljTkkBf6GI5PtWGK4JadMo TNZmB/dThs/wxQgK0ul1Ki0rI7ATXCL3wRx3ORKHhoIbJGQxrPJh+TuA2cpXGest PtXb9UeMw3x21iYHMDq+WVMSDtbawAg+vWV/EW85Y6K0PaIlai+rI6/JyymhvfsD IRnA8LVdN0nCYIsFVODmqaF7JyAfFJ1AuEjiixEfiZI6hoNB95Gg5iVw1+x3ggpj 1pMeS21mw0CjISFsy8hSL9jDiCJrfeb9RlPx8qG4DLEWbvRsvI8NtL7CTXE5CEdN 87V0g0b9/6+5YMKIJjBuxqqjEWknPEvwypgBF0URaOxWoU8BRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPUw4bj5lmLfU8y6MZdV3jt4hHliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YzNhYWUtN2U0ZC0z YjY4LWFiYmUtZTEyZmQyYzJmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFxEHAK+EFY51P1kWYZusExvGjSuJ6y4G6xTK+yFj/OhXIKJdKo3e nw1HR2AqMnBNUjFfMux8/8RKR+eWU9OSbFgTjAQRlUNWzKdRFX5cgzPCHFlhQQt/ IwjA+d5vqAnYBWB6Ua6Dc3zAO2SJqU7KF8srb1p0Ko7NTIg/FRFabqNhAvSUyBG3 rKpGqiirh+DNTHkzGbQDBHykCwWwlGBQwI1ORMFfSEOIJ4/WCceruVhKoj4K6gdJ 63z1uFw8U2jldSMyzRO/QjFfecXEupuarAKS+as5OWgZr6kOxcWTzDH8B+tBhMWb n2jv+O6MUxFNL80TKbETB6JCaACndSSU8Q== -----END CERTIFICATE-----Generated at Wed Dec 24 12:28:57 2025 by rpki-client