This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa
File: 8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa (raw, json)
Hash identifier: 8zkZQUZhVgba8v/Uo0tbbFs1DbAIukb+wnV0Xx2qzwM=
Subject key identifier: F3:FC:EE:93:5C:62:23:E9:A0:C2:53:9E:73:F5:18:87:58:E0:5C:B0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C45A827391B269A1A35A47D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8a:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:27:39:1b:26:9a:1a:35:a4:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=8fd3cb61-ea57-4fa2-af55-3e74deb4a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:a2:4a:3e:95:45:91:64:e8:d7:c1:e6:17:
66:bb:cf:31:46:73:15:c9:2b:bb:97:e2:0a:06:c8:
50:c2:c6:4c:01:f1:ce:8c:c8:3d:db:97:60:96:2e:
79:7c:68:fc:0d:a0:39:f0:fa:25:1b:ba:f9:a9:7a:
f8:26:48:6b:23:2e:e3:dc:83:e5:23:93:29:8a:39:
d2:9a:b1:0e:d1:e9:76:82:d6:42:9d:b7:ab:34:63:
78:35:f4:19:11:db:8f:c6:d8:08:5f:38:07:de:bb:
e1:e3:7b:9d:e9:1e:3c:5c:f5:35:6e:cf:1c:b4:23:
9d:7f:28:f0:7b:92:64:96:5c:16:85:f0:7d:15:70:
da:75:a4:25:47:9d:57:e6:6b:99:45:ce:7f:40:7e:
70:38:22:ee:31:73:ff:23:55:c1:99:1a:cb:81:26:
04:b7:a4:d2:c2:b8:a2:23:39:e9:b6:1b:a2:e2:54:
a8:08:ce:5a:95:ae:12:c8:5c:37:95:85:06:d5:97:
ce:ef:a5:35:4d:38:71:dc:67:3a:89:84:7c:d2:5e:
00:fb:cd:6f:e9:af:9a:6a:61:a4:7f:10:29:f7:de:
d6:e4:e4:e6:d3:c8:7f:7e:c0:1d:af:e4:64:df:17:
9f:9e:67:3f:de:04:fb:4d:02:4d:12:f6:68:ea:c3:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:EE:93:5C:62:23:E9:A0:C2:53:9E:73:F5:18:87:58:E0:5C:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:1000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:18:40:b5:d4:80:74:12:fb:40:80:dc:50:a5:30:6c:bd:df:
59:59:eb:74:11:78:e9:55:d5:e2:0e:d9:55:5e:ff:df:0e:a8:
5e:39:98:f6:13:29:d6:cd:50:d5:d3:21:ec:4d:49:b7:89:c8:
94:4c:d3:61:fd:4a:ad:e4:01:2d:b4:72:7b:b6:97:61:3e:de:
91:3e:b4:1f:c1:66:c7:c2:82:dc:d1:59:52:b5:c6:43:dc:32:
76:b5:0e:31:7f:88:da:40:95:ee:0c:60:ba:be:9f:9c:16:34:
68:80:ba:fb:c8:ad:05:22:73:2f:d9:91:81:89:d9:b2:bd:3a:
10:59:91:9e:68:26:26:29:c2:b3:0e:d1:38:ff:ee:f7:29:86:
8c:1a:d1:aa:e8:2e:9c:81:99:ce:49:1d:d4:96:8e:a1:9e:f1:
fd:38:d5:ca:0c:4d:d7:46:bf:27:be:8e:0e:31:b8:b9:78:e1:
2e:37:2f:34:45:f0:37:02:88:a0:d9:bd:b8:67:3e:58:98:b2:
4b:88:fa:98:f7:2d:f2:92:05:01:d2:4e:a2:54:6e:f3:72:8b:
81:2f:7d:5c:b1:70:ee:3f:29:95:ae:f4:ff:a9:ee:68:a9:e2:
dd:ce:1d:21:38:97:0d:80:80:d6:ed:a7:5c:f9:f5:ae:78:39:
fe:ab:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:56:44 2025 by rpki-client