This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa File: 5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa (raw, json) Hash identifier: JCX1N363O4Oj0oRa+nhYsIHu0vhAW0sonSfJxYMnGok= Subject key identifier: 18:4E:2D:F4:BD:C6:86:75:F4:2A:FA:47:16:53:1E:E1:E3:CA:C7:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6997A4378EF06FCA91200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:99:7a:43:78:ef:06:fc:a9:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d1576c3e-a0ed-4d2d-a6da-45fbf606ba59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a5:b4:69:00:f5:48:c4:c4:7a:fe:cf:6b:87: 37:81:ae:d7:19:4f:2d:9b:9f:eb:42:73:0f:c1:44: 9c:5d:c3:65:72:4c:fd:01:80:1b:fb:77:b5:fb:18: ef:ef:87:ec:48:1f:2f:8b:fc:f7:ff:28:cb:67:79: 41:23:00:7d:bf:76:fe:15:85:ec:2f:d7:68:75:da: 91:b4:34:3d:75:cf:06:49:8f:b8:76:93:3e:2c:78: 29:51:e9:c8:90:34:87:be:ff:52:f5:cd:57:c6:de: 8e:4b:68:b1:77:7c:ce:db:40:1c:bf:03:ac:1f:c5: c8:0d:f3:4a:f7:43:59:e8:17:bc:d1:65:70:1e:68: 4a:76:bc:59:87:79:04:4e:b8:fe:cf:ac:fa:3c:50: 6a:36:89:2b:27:54:0d:28:07:7b:38:d4:cd:32:57: 45:29:dc:5d:15:d5:d8:82:03:60:b0:a1:59:fa:98: e7:b7:fd:c9:d2:70:4b:47:c2:93:d7:65:84:c1:0b: 0d:c3:11:63:de:b3:8d:61:49:c9:40:ef:6c:b6:d2: a4:c6:83:b2:d1:0d:4b:19:a3:b6:9d:83:24:86:b4: e9:fd:67:08:a9:39:85:20:30:86:58:22:9f:14:f4: 3b:af:50:7e:1d:68:2a:19:8b:9e:4b:2d:16:68:5a: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:2D:F4:BD:C6:86:75:F4:2A:FA:47:16:53:1E:E1:E3:CA:C7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3b:53:e0:7e:a7:8a:2e:19:bb:c8:10:a1:7a:2d:04:7b:09: dd:d9:7c:6b:a6:58:0d:d4:65:db:28:0b:89:04:15:33:61:d9: 97:5b:57:76:39:ea:06:77:54:61:e3:6c:53:d9:be:7e:ca:f8: 31:c4:49:ca:42:b0:7d:1e:a9:b0:f9:46:32:74:d7:5b:9e:77: ad:53:1c:25:63:7a:f7:b7:dc:84:ad:b7:b4:46:24:82:ef:f0: 58:f0:fc:e1:69:3f:64:15:9b:e4:a9:5b:95:c4:87:74:c3:29: 36:e7:c7:3d:d6:40:22:be:59:f7:cb:0e:08:8a:ff:68:1f:61: d0:15:89:67:c4:64:13:9e:17:ff:f6:b3:2e:9f:4a:6f:e8:d2: 20:28:a9:c9:17:40:d7:40:3a:b5:21:18:52:dc:27:09:46:ad: 01:95:01:21:29:77:6f:f1:fe:4e:ce:4a:54:35:45:8e:ef:c6: 36:b4:7b:5f:d5:bc:f4:1d:7b:a3:bf:ed:3d:ec:ee:e7:91:42: f8:9e:75:4a:9b:88:cd:40:91:6c:a6:8b:45:27:11:1f:31:9a: 24:d1:9b:4e:d2:f1:e7:c2:f0:5f:00:8b:41:20:51:6f:ca:11: de:a2:ed:2e:16:51:21:ff:f6:60:24:b7:fb:44:5d:5e:f5:80: cc:56:a8:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppl6Q3jvBvypEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDE1NzZjM2UtYTBlZC00ZDJkLWE2ZGEtNDVmYmY2MDZiYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6W0aQD1SMTEev7Pa4c3ga7XGU8tm5/rQnMP wUScXcNlckz9AYAb+3e1+xjv74fsSB8vi/z3/yjLZ3lBIwB9v3b+FYXsL9doddqR tDQ9dc8GSY+4dpM+LHgpUenIkDSHvv9S9c1Xxt6OS2ixd3zO20AcvwOsH8XIDfNK 90NZ6Be80WVwHmhKdrxZh3kETrj+z6z6PFBqNokrJ1QNKAd7ONTNMldFKdxdFdXY ggNgsKFZ+pjnt/3J0nBLR8KT12WEwQsNwxFj3rONYUnJQO9sttKkxoOy0Q1LGaO2 nYMkhrTp/WcIqTmFIDCGWCKfFPQ7r1B+HWgqGYueSy0WaFpE4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBhOLfS9xoZ19Cr6RxZTHuHjyse2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWQwMjgzZTMtOWUyOC0z ZmY0LWEwMjctZWJjZmIxOTE3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuisgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAODtT4H6nii4Zu8gQoXotBHsJ3dl8a6ZYDdRl2ygLiQQVM2HZl1tX djnqBndUYeNsU9m+fsr4McRJykKwfR6psPlGMnTXW553rVMcJWN697fchK23tEYk gu/wWPD84Wk/ZBWb5KlblcSHdMMpNufHPdZAIr5Z98sOCIr/aB9h0BWJZ8RkE54X //azLp9Kb+jSICipyRdA10A6tSEYUtwnCUatAZUBISl3b/H+Ts5KVDVFju/GNrR7 X9W89B17o7/tPezu55FC+J51SpuIzUCRbKaLRScRHzGaJNGbTtLx58LwXwCLQSBR b8oR3qLtLhZRIf/2YCS3+0RdXvWAzFaoyA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:17 2025 by rpki-client