This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa File: 653596ff-f00e-342f-88fc-09d456825ec7.roa (raw, json) Hash identifier: z+PrISOGIT03nwhD9iulsPRbTvLQtPHPCsTcxiNhEWk= Subject key identifier: F2:98:0F:1B:45:74:AF:AD:71:77:4A:C8:34:6E:D1:04:D0:A0:ED:FC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBDBC2A094CC7D77EBD100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:db:c2:a0:94:cc:7d:77:eb:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=20d79c05-2f1a-4ecf-8649-a0a3e016dc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:09:f2:9a:89:ed:1f:e7:f0:44:cc:7b:f6: c9:27:81:45:37:30:b5:58:0f:73:d3:d1:47:d6:6f: 49:5f:42:37:f2:e9:a6:99:5b:5b:1e:9f:fa:23:46: 2d:55:7e:af:35:23:2b:63:86:9c:88:58:d4:39:3d: 62:2f:d0:9e:af:82:e8:b0:be:7b:97:02:e2:04:30: ac:5c:fb:01:50:7b:2d:f2:0c:62:bd:02:6c:0f:ca: 7b:b4:a0:de:39:1b:7c:04:ac:1c:af:dc:85:a0:1e: 94:ab:98:b1:ca:5e:0c:05:a8:85:47:5a:58:65:aa: 89:f1:0d:85:f0:42:af:85:a9:77:81:f2:b2:b3:46: 81:7c:e0:f2:9b:7e:47:12:38:a0:11:28:ec:52:e3: d2:c8:9f:18:76:ff:e1:50:5f:b2:15:ba:1d:13:2d: 67:07:c4:f5:8b:2b:4e:ba:9c:aa:a1:ec:09:92:a2: 50:83:eb:08:84:da:3d:04:fc:aa:0e:fa:4f:3f:05: d5:5e:7b:db:6b:1e:51:8d:1f:0e:36:86:30:35:c8: 09:e8:5a:91:48:94:17:5c:b4:53:66:f6:a9:67:5a: 76:83:f8:1b:db:65:2b:8c:45:57:25:4b:6b:df:b8: 0f:39:b0:bf:56:2b:31:3c:38:51:38:52:89:a1:0c: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:98:0F:1B:45:74:AF:AD:71:77:4A:C8:34:6E:D1:04:D0:A0:ED:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:87:89:2f:13:2e:65:64:91:d1:dd:de:4c:03:36:9f:04:45: 24:0c:43:d5:88:2b:58:f8:26:ee:98:42:09:b6:1f:9a:67:3d: 50:dd:53:f5:15:f9:8b:64:c5:70:5a:9e:c4:f9:e5:14:64:fb: 23:ad:df:95:b9:eb:1a:97:16:ee:a9:3d:8b:d9:3f:37:9d:b1: 1e:77:cf:cc:e8:e3:76:dc:20:ae:a1:db:8e:7c:34:de:14:ce: 9d:3c:0f:7a:b0:e4:68:44:48:0f:64:db:8a:38:d1:00:22:bd: 2e:05:e8:a3:2d:11:00:93:3c:bf:10:93:b8:ed:17:b9:7c:cb: b8:c1:2a:e3:b7:a4:eb:8a:30:cd:5e:2a:6f:56:4d:86:51:85: ef:9d:b2:18:ca:85:26:f5:1e:49:8f:bd:b2:25:02:6d:c3:58: f8:72:e4:e8:b2:f7:02:76:c3:36:e2:d7:a5:3e:8b:2f:ea:31: a9:c7:59:f2:01:4d:b1:77:d0:39:d2:19:ec:70:e9:5d:2e:67: b2:7e:8b:af:be:c2:0e:8e:8f:06:0b:3e:8f:f9:88:d3:ae:de: c3:f5:29:73:45:b5:9a:b1:17:20:a7:da:6c:8f:39:44:e9:41: 2b:75:51:37:a4:e7:c9:35:a7:3c:d7:21:2a:77:f3:e4:5e:6a: 45:d3:89:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC29vCoJTMfXfr0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MjBkNzljMDUtMmYxYS00ZWNmLTg2NDktYTBhM2UwMTZkYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7gJ8pqJ7R/n8ETMe/bJJ4FFNzC1WA9z09FH 1m9JX0I38ummmVtbHp/6I0YtVX6vNSMrY4aciFjUOT1iL9Cer4LosL57lwLiBDCs XPsBUHst8gxivQJsD8p7tKDeORt8BKwcr9yFoB6Uq5ixyl4MBaiFR1pYZaqJ8Q2F 8EKvhal3gfKys0aBfODym35HEjigESjsUuPSyJ8Ydv/hUF+yFbodEy1nB8T1iytO upyqoewJkqJQg+sIhNo9BPyqDvpPPwXVXnvbax5RjR8ONoYwNcgJ6FqRSJQXXLRT ZvapZ1p2g/gb22UrjEVXJUtr37gPObC/VisxPDhROFKJoQwtTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPKYDxtFdK+tcXdKyDRu0QTQoO38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjUzNTk2ZmYtZjAwZS0z NDJmLTg4ZmMtMDlkNDU2ODI1ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiIeJLxMuZWSR0d3eTAM2nwRFJAxD1YgrWPgm7phCCbYfmmc9UN1T 9RX5i2TFcFqexPnlFGT7I63flbnrGpcW7qk9i9k/N52xHnfPzOjjdtwgrqHbjnw0 3hTOnTwPerDkaERID2TbijjRACK9LgXooy0RAJM8vxCTuO0XuXzLuMEq47ek64ow zV4qb1ZNhlGF752yGMqFJvUeSY+9siUCbcNY+HLk6LL3AnbDNuLXpT6LL+oxqcdZ 8gFNsXfQOdIZ7HDpXS5nsn6Lr77CDo6PBgs+j/mI067ew/Upc0W1mrEXIKfabI85 ROlBK3VRN6TnyTWnPNchKnfz5F5qRdOJtw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:13 2025 by rpki-client