This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa File: 847045ff-3181-3e08-878d-a4ff98da9a42.roa (raw, json) Hash identifier: GYeLd+tVFjuF8HHPe2ko1+1cIEcl1q2+gmTdKN/3KO0= Subject key identifier: 0A:F4:E8:A5:DC:52:82:A3:BE:20:85:86:2F:BF:97:15:CD:DF:1F:82 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBBDD7D039C69705B13800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e88::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:bd:d7:d0:39:c6:97:05:b1:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=dccb7e22-5983-421b-95e6-8a2ac1d4c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:23:82:10:a6:32:28:2d:b1:32:5d:4e:61: f5:a5:19:06:85:fe:60:66:01:70:c3:15:08:72:f5: 0f:e0:6d:88:12:20:e4:d1:7a:d4:08:8d:31:72:e0: f4:0f:4b:26:22:96:17:83:69:ef:71:c8:ba:6d:fc: 35:e5:bf:17:a8:18:75:79:12:39:68:11:21:dd:78: 48:0f:a6:3e:00:ae:b7:17:89:c6:fb:59:3b:ce:a4: a0:58:b7:aa:35:d2:23:15:61:ba:8c:45:e5:83:ec: 40:71:ae:3a:4b:07:1e:10:15:29:eb:ad:c9:a9:6e: 73:42:7f:d8:29:3f:f5:d7:83:e2:5c:66:21:bc:f2: d5:38:66:15:89:59:d0:c8:07:4d:45:d0:f4:8e:6e: 33:20:5b:b3:2b:8d:b6:6b:a6:99:4f:6d:28:8d:e8: 39:4a:5b:d9:a7:01:74:91:6c:62:ac:c0:39:76:d3: a7:8a:18:32:cd:05:78:1e:60:96:7a:62:89:c4:43: 70:40:57:b9:15:7e:bf:81:7d:6e:79:7d:3a:86:bc: 8b:96:22:4a:cb:59:72:99:8f:1b:c2:9a:7d:3e:3e: e5:41:5d:60:06:ee:d3:28:8b:59:7e:20:ec:28:c1: ab:71:8d:50:e0:54:77:f8:76:5f:a9:5d:e3:a3:74: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:E8:A5:DC:52:82:A3:BE:20:85:86:2F:BF:97:15:CD:DF:1F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2b:e5:9f:ea:91:2c:a5:65:d0:50:7f:17:fa:89:e2:fe:5f: 13:bf:94:8e:20:27:53:3c:1e:87:ce:45:f8:47:9f:e6:0c:c2: 43:2f:a5:08:d2:0b:fc:2b:27:bd:38:cd:83:cc:f3:1f:5d:6c: b8:6b:9e:71:f9:5c:2f:3e:15:8d:d0:87:40:9b:a0:4a:40:be: 25:5e:f7:9c:6c:77:58:c0:42:3f:b8:f9:11:e4:5b:59:f8:26: 59:85:9f:85:1e:37:5c:0f:36:36:ec:bb:84:8c:1a:18:d8:19: b0:fe:85:17:a1:59:3a:1a:78:e2:5c:c7:95:56:5a:79:7b:cf: 05:ce:34:be:c9:ba:25:ce:69:a8:b1:69:80:ad:01:12:9e:f5: 01:83:0b:fc:ae:af:e1:14:7e:5a:22:ea:49:ee:de:b5:9d:72: 8a:d3:f6:ec:1e:b2:ec:9f:97:06:78:1c:df:bc:ac:b9:02:2e: 84:bd:42:5a:53:a9:94:14:c5:31:3b:a7:92:cf:b9:b8:39:71: 64:e0:5b:48:46:3f:0e:74:d2:0e:78:9e:81:c9:c9:f8:33:75: a4:81:62:0a:74:b2:ee:15:7a:8a:b2:e1:d4:ed:d0:ef:5b:4f: 8c:d4:9b:f2:04:f2:50:02:4a:e6:3a:04:43:fa:7e:46:9e:78: b6:79:bb:6f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC273X0DnGlwWxOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGNjYjdlMjItNTk4My00MjFiLTk1ZTYtOGEyYWMxZDRjMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvwjghCmMigtsTJdTmH1pRkGhf5gZgFwwxUI cvUP4G2IEiDk0XrUCI0xcuD0D0smIpYXg2nvcci6bfw15b8XqBh1eRI5aBEh3XhI D6Y+AK63F4nG+1k7zqSgWLeqNdIjFWG6jEXlg+xAca46SwceEBUp663JqW5zQn/Y KT/114PiXGYhvPLVOGYViVnQyAdNRdD0jm4zIFuzK422a6aZT20ojeg5SlvZpwF0 kWxirMA5dtOnihgyzQV4HmCWemKJxENwQFe5FX6/gX1ueX06hryLliJKy1lymY8b wpp9Pj7lQV1gBu7TKItZfiDsKMGrcY1Q4FR3+HZfqV3jo3RPAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAr06KXcUoKjviCFhi+/lxXN3x+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQ3MDQ1ZmYtMzE4MS0z ZTA4LTg3OGQtYTRmZjk4ZGE5YTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPivln+qRLKVl0FB/F/qJ4v5fE7+UjiAnUzweh85F+Eef5gzCQy+l CNIL/CsnvTjNg8zzH11suGuecflcLz4VjdCHQJugSkC+JV73nGx3WMBCP7j5EeRb WfgmWYWfhR43XA82Nuy7hIwaGNgZsP6FF6FZOhp44lzHlVZaeXvPBc40vsm6Jc5p qLFpgK0BEp71AYML/K6v4RR+WiLqSe7etZ1yitP27B6y7J+XBngc37ysuQIuhL1C WlOplBTFMTunks+5uDlxZOBbSEY/DnTSDniegcnJ+DN1pIFiCnSy7hV6irLh1O3Q 71tPjNSb8gTyUAJK5joEQ/p+Rp54tnm7bw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:42 2025 by rpki-client