This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa File: 5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa (raw, json) Hash identifier: QltxKdrPz3bBwf53Uv0fmETjV6ntTeK4k9d/8nLjIE8= Subject key identifier: 95:AD:ED:E7:10:0C:99:EA:1A:69:DE:AF:0B:E7:4A:5F:0D:9C:E6:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC12A77BDD6F278E283BF0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:12:a7:7b:dd:6f:27:8e:28:3b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=3785c8ac-0a96-4489-9295-dab91332428f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:ab:0a:8c:8f:97:d9:99:28:6b:06:b5:36: a6:b4:73:ff:c2:25:a2:bb:5e:a4:f2:8e:b5:f8:53: d7:1c:e1:9f:18:60:7f:a4:12:57:ca:11:e9:92:27: d2:2e:10:7f:f8:2f:e4:e2:b0:10:72:0a:63:ca:91: bd:f9:bd:9d:46:ff:7d:e7:48:9c:35:ec:64:d9:b3: 62:69:9c:e7:c5:cd:8b:94:53:7b:24:44:23:62:57: c3:09:a1:03:3e:68:d1:49:88:f8:71:da:5a:95:33: a2:75:d0:8c:b9:9e:f1:94:6a:ab:d5:e1:d8:1e:07: c5:3d:be:e7:99:7c:86:df:a9:8e:75:98:24:59:41: c3:a7:56:16:66:00:46:8f:aa:3d:c3:7c:6d:97:8b: bc:aa:7b:00:13:af:95:65:2c:f2:99:bb:6f:f9:09: 9d:45:52:e2:98:df:77:44:3a:c1:39:f8:b0:18:55: f1:38:d0:11:35:96:5a:e7:a1:96:2a:00:64:a2:1e: 56:cf:fd:6b:18:3c:66:7e:9d:a0:50:d3:80:3d:ef: 83:50:e9:2f:67:5b:d1:c3:f1:da:59:58:28:11:70: 8c:df:3d:5f:de:57:05:3d:bd:d8:c6:8d:77:f2:c5: 4f:78:3e:16:07:88:ef:d0:be:1f:b4:06:7a:a9:8c: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:ED:E7:10:0C:99:EA:1A:69:DE:AF:0B:E7:4A:5F:0D:9C:E6:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ca:cf:42:a1:cc:dd:a1:15:47:4d:30:0b:52:29:bc:35:d4: f2:80:e8:d9:95:54:2e:69:19:32:e1:89:f1:37:47:a3:8c:0b: 69:2f:fd:ef:e0:d7:6d:a9:47:7f:ad:d9:c3:0d:6f:73:f0:50: 66:0c:0a:02:01:50:96:a1:b3:c2:44:1f:ea:d4:87:cc:20:32: 1c:50:16:a7:61:92:15:6a:e7:6c:05:26:bf:78:ee:86:ed:93: 86:63:6c:72:4d:50:69:bc:05:8a:dd:a9:fc:b2:f8:c8:bd:0a: 16:80:e1:b0:df:33:a5:e3:a5:02:16:61:5e:29:01:9e:7f:97: 21:ca:28:28:05:ca:47:0a:f2:0e:7b:4b:cd:fa:77:ef:e5:e4: 7d:9a:83:12:b0:e4:44:bd:27:61:b1:a0:de:da:68:df:4e:f4: ef:05:e9:a2:fd:fa:2c:99:2c:ef:af:cc:a5:40:0a:c0:d0:3a: 1c:99:2d:ae:1f:61:df:9b:83:3e:4a:73:3e:b3:ec:f6:da:44: 6b:78:b9:af:69:f1:92:79:e2:77:fb:82:64:5b:31:1f:20:98: 45:88:54:08:fb:04:71:25:2b:4f:38:03:b8:ef:24:d3:8a:e8: 01:85:54:fb:a1:a5:19:40:47:a0:44:a1:78:95:60:2a:80:73: 72:2e:f0:77 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BKne91vJ44oO/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk Mzc4NWM4YWMtMGE5Ni00NDg5LTkyOTUtZGFiOTEzMzI0MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayrCoyPl9mZKGsGtTamtHP/wiWiu16k8o61 +FPXHOGfGGB/pBJXyhHpkifSLhB/+C/k4rAQcgpjypG9+b2dRv9950icNexk2bNi aZznxc2LlFN7JEQjYlfDCaEDPmjRSYj4cdpalTOiddCMuZ7xlGqr1eHYHgfFPb7n mXyG36mOdZgkWUHDp1YWZgBGj6o9w3xtl4u8qnsAE6+VZSzymbtv+QmdRVLimN93 RDrBOfiwGFXxONARNZZa56GWKgBkoh5Wz/1rGDxmfp2gUNOAPe+DUOkvZ1vRw/Ha WVgoEXCM3z1f3lcFPb3Yxo138sVPeD4WB4jv0L4ftAZ6qYzbvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJWt7ecQDJnqGmnerwvnSl8NnOatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTM0M2NiY2MtMGYwZC0z OTg4LWE2ZDUtZjY4NGJmNjkyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAicrPQqHM3aEVR00wC1IpvDXU8oDo2ZVULmkZMuGJ8TdHo4wLaS/9 7+DXbalHf63Zww1vc/BQZgwKAgFQlqGzwkQf6tSHzCAyHFAWp2GSFWrnbAUmv3ju hu2ThmNsck1QabwFit2p/LL4yL0KFoDhsN8zpeOlAhZhXikBnn+XIcooKAXKRwry DntLzfp37+XkfZqDErDkRL0nYbGg3tpo30707wXpov36LJks76/MpUAKwNA6HJkt rh9h35uDPkpzPrPs9tpEa3i5r2nxknnid/uCZFsxHyCYRYhUCPsEcSUrTzgDuO8k 04roAYVU+6GlGUBHoESheJVgKoBzci7wdw== -----END CERTIFICATE-----Generated at Sat Dec 27 04:07:22 2025 by rpki-client