This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa File: 5af117be-6302-321b-9b42-6f7e31c1219f.roa (raw, json) Hash identifier: GETO6pGIeZqOZ09z5bQ0f0HLdUenzxiqT7dEiFRJBZo= Subject key identifier: 5A:23:EC:D6:A0:A6:AC:70:31:75:FA:28:61:C7:25:57:42:13:60:C3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B127831F81AB344DE94500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:27:83:1f:81:ab:34:4d:e9:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=0614e694-1eb6-4e4d-b928-33268a1261bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:3e:d4:8a:5d:94:6c:9f:9a:0f:c0:9a:07: a3:74:5b:a8:70:da:17:6a:b9:7f:13:8e:da:ed:de: d3:7d:0c:87:18:be:63:79:db:1e:1f:9e:9b:ef:aa: 39:cf:ee:42:de:96:6c:8d:28:21:eb:35:37:d5:a5: 41:99:d0:4e:a6:e0:c6:c2:9b:48:3f:6d:40:e9:6f: 76:8f:0b:09:69:a6:75:c5:37:e7:c5:a7:8f:41:30: c5:c7:4a:bd:57:f3:fa:68:3c:c9:96:6e:9e:3e:2c: d2:b1:ab:9d:a2:bd:c5:97:16:97:24:d0:83:39:14: 5b:04:4e:cc:c6:9d:06:0b:04:6c:5f:a4:bb:8c:dd: e9:34:90:97:75:82:56:0f:94:c1:13:ca:4e:b4:dc: fc:9c:a9:28:d4:da:1a:e1:9f:3a:a7:72:fc:2a:df: 38:0c:ab:18:bc:a2:14:fc:7d:75:fe:6d:1c:bb:da: 6f:91:66:94:23:56:b5:10:99:2e:34:60:34:ff:96: dc:4b:7f:28:32:40:39:8a:fa:87:2a:9d:29:f3:76: ad:56:96:eb:5b:2a:4a:21:5a:fd:6c:d7:d8:6b:4e: c7:4b:ed:85:08:49:99:2d:44:34:24:97:30:d1:0f: 81:dd:ef:e6:1a:49:f3:97:ef:64:5b:20:36:e4:ba: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:EC:D6:A0:A6:AC:70:31:75:FA:28:61:C7:25:57:42:13:60:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2c:e4:20:02:04:5c:11:5d:99:c1:96:c5:31:0f:c0:fa:ba: fa:7a:df:32:d2:b3:36:16:fd:6f:88:a0:22:72:c9:6a:04:06: 7d:2a:fc:c5:0d:23:4f:b7:82:97:99:a2:8f:f9:1a:0d:66:9a: 0f:de:1b:21:b6:ce:40:cb:16:d5:39:a7:d1:5b:0f:49:94:4c: 65:6a:a3:3d:4d:7d:ca:4d:77:df:8f:81:ea:21:b1:7b:d2:14: c5:a1:5a:d6:10:03:0a:c2:c9:f8:c2:92:29:f3:85:d3:1e:7f: 1d:e6:47:ae:fd:08:63:74:a9:82:8a:ec:88:07:ed:3e:db:ae: c6:98:00:5c:8a:92:eb:33:3c:34:94:86:a7:d9:db:9a:01:6d: 0c:2a:c9:30:0e:e1:00:94:fd:90:f6:9a:a5:df:08:c9:7e:23: 4b:69:55:7b:b7:46:11:ab:ef:36:57:2e:e7:08:48:a4:21:c6: 81:59:62:9d:01:ee:9d:0b:d4:38:f1:ff:a5:87:01:7b:56:39: 45:1b:0e:8a:3d:1c:4b:41:d1:6a:0c:68:a7:70:c9:36:1b:ab: be:d7:a0:44:31:b1:a8:81:f1:ed:b5:2e:65:4c:f1:52:6c:3c: 06:ca:3d:74:28:ab:f0:00:06:48:b0:ef:a0:51:26:01:13:3a: 5d:85:e5:73 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sSeDH4GrNE3pRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MDYxNGU2OTQtMWViNi00ZTRkLWI5MjgtMzMyNjhhMTI2MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8A+1IpdlGyfmg/AmgejdFuocNoXarl/E47a 7d7TfQyHGL5jedseH56b76o5z+5C3pZsjSgh6zU31aVBmdBOpuDGwptIP21A6W92 jwsJaaZ1xTfnxaePQTDFx0q9V/P6aDzJlm6ePizSsaudor3FlxaXJNCDORRbBE7M xp0GCwRsX6S7jN3pNJCXdYJWD5TBE8pOtNz8nKko1Noa4Z86p3L8Kt84DKsYvKIU /H11/m0cu9pvkWaUI1a1EJkuNGA0/5bcS38oMkA5ivqHKp0p83atVpbrWypKIVr9 bNfYa07HS+2FCEmZLUQ0JJcw0Q+B3e/mGknzl+9kWyA25Lqn3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFoj7NagpqxwMXX6KGHHJVdCE2DDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFmMTE3YmUtNjMwMi0z MjFiLTliNDItNmY3ZTMxYzEyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARizkIAIEXBFdmcGWxTEPwPq6+nrfMtKzNhb9b4igInLJagQGfSr8 xQ0jT7eCl5mij/kaDWaaD94bIbbOQMsW1Tmn0VsPSZRMZWqjPU19yk1334+B6iGx e9IUxaFa1hADCsLJ+MKSKfOF0x5/HeZHrv0IY3SpgorsiAftPtuuxpgAXIqS6zM8 NJSGp9nbmgFtDCrJMA7hAJT9kPaapd8IyX4jS2lVe7dGEavvNlcu5whIpCHGgVli nQHunQvUOPH/pYcBe1Y5RRsOij0cS0HRagxop3DJNhurvtegRDGxqIHx7bUuZUzx Umw8Bso9dCir8AAGSLDvoFEmARM6XYXlcw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:38 2025 by rpki-client