This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/897c6f2f-49ce-3095-b8e1-b71589725ccb.roa File: 897c6f2f-49ce-3095-b8e1-b71589725ccb.roa (raw, json) Hash identifier: pIJH4Vu0pxEIyOcxpsOxvIAfAIEU3brdDIki1rVuwTM= Subject key identifier: 8C:E8:56:B3:A8:F8:72:F2:C1:C4:F4:9D:83:DE:63:80:03:CA:F2:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C26F0F24436D6BF26F1FE3640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/897c6f2f-49ce-3095-b8e1-b71589725ccb.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e8b:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f2:44:36:d6:bf:26:f1:fe:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=df6985b5-278c-4ee3-b297-e32c3a9a0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:c4:d6:fa:99:bb:41:30:42:64:ed:1d:40: 17:57:69:42:81:93:e6:c3:f8:7b:fe:4f:7e:27:3d: 4a:c8:75:41:2c:76:64:b5:60:49:da:43:aa:d9:ef: 84:1d:c5:f9:f6:dc:d5:2b:92:61:c1:98:f7:3e:83: 1c:61:fb:45:93:24:dd:4c:96:4f:a3:68:b5:ce:d3: 57:7c:36:3c:6d:0a:fd:78:0a:ec:45:fa:be:63:6a: 2f:04:7f:1c:7d:01:54:0d:29:70:de:86:7f:da:74: 74:5d:d7:ba:68:3e:93:8e:71:3f:08:3c:81:7c:32: b3:a8:6c:c5:82:99:55:6d:cd:d4:81:bb:27:e2:67: 39:d4:32:3e:83:d3:e0:19:25:f2:fc:18:20:1b:43: 48:6b:82:bf:0e:34:63:2d:fa:08:95:64:8a:38:7c: 2a:0f:96:4d:de:c5:b4:1a:31:61:fb:f2:10:9c:f9: 8d:ee:dd:51:02:bd:fd:71:b5:cc:e5:ed:80:f2:fa: 6f:09:5c:ae:fe:d7:7d:22:eb:af:83:84:84:0b:07: 33:ca:af:9f:eb:b5:51:cf:92:b1:ab:0e:2c:20:5b: 8a:18:d0:92:5c:0f:b6:32:5b:8b:f3:a4:c7:42:57: 3c:9c:0c:84:7f:d8:2d:49:95:0f:9e:27:73:22:a2: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:56:B3:A8:F8:72:F2:C1:C4:F4:9D:83:DE:63:80:03:CA:F2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/897c6f2f-49ce-3095-b8e1-b71589725ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c8:ed:a3:5c:14:f5:04:71:18:b6:f2:e1:b2:67:29:bd:b9: 5a:37:18:32:2d:23:a0:eb:1f:5d:82:76:e0:63:7d:54:3c:7a: 93:ff:8d:ef:1c:e8:be:7c:0f:ff:fa:ab:03:58:35:e6:f3:55: 40:45:91:2a:66:2d:25:2d:8e:8f:b6:11:09:a3:2f:bb:92:92: b4:f6:4a:2b:54:01:b1:72:f8:56:db:c9:36:4b:ca:9c:ae:71: 27:f3:a9:31:4b:45:bb:42:8f:b8:15:cf:f2:0f:8b:64:b3:90: 6a:d7:23:bb:c2:a2:7f:07:63:eb:a1:03:5e:9c:d2:db:64:0c: a6:62:c5:fd:07:70:49:5c:6c:56:6a:43:4a:01:d4:9c:c3:57: 1e:ed:94:96:27:7e:a4:86:e2:bb:f9:65:98:6a:0b:07:e8:32: 51:77:50:91:a5:d8:29:32:7e:f3:88:ca:2f:f3:06:b8:70:29: 8a:a2:de:75:02:7a:1d:41:f8:bb:84:fe:fe:ee:7e:14:48:1b: e9:f3:a8:8e:2f:5a:d2:b6:8a:67:84:cc:9a:7f:82:bf:e3:bf: cc:e1:87:4e:d3:69:4b:25:cb:78:17:e4:62:ec:74:95:b4:9d: 2d:08:d9:31:1a:9a:aa:64:29:34:df:5d:3d:a1:04:ca:25:ea: 88:db:b7:31 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwm8PJENta/JvH+NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZGY2OTg1YjUtMjc4Yy00ZWUzLWIyOTctZTMyYzNhOWEwNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgujE1vqZu0EwQmTtHUAXV2lCgZPmw/h7/k9+ Jz1KyHVBLHZktWBJ2kOq2e+EHcX59tzVK5JhwZj3PoMcYftFkyTdTJZPo2i1ztNX fDY8bQr9eArsRfq+Y2ovBH8cfQFUDSlw3oZ/2nR0Xde6aD6TjnE/CDyBfDKzqGzF gplVbc3Ugbsn4mc51DI+g9PgGSXy/BggG0NIa4K/DjRjLfoIlWSKOHwqD5ZN3sW0 GjFh+/IQnPmN7t1RAr39cbXM5e2A8vpvCVyu/td9Iuuvg4SECwczyq+f67VRz5Kx qw4sIFuKGNCSXA+2MluL86THQlc8nAyEf9gtSZUPnidzIqIqHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIzoVrOo+HLywcT0nYPeY4ADyvL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODk3YzZmMmYtNDljZS0z MDk1LWI4ZTEtYjcxNTg5NzI1Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAc8jto1wU9QRxGLby4bJnKb25WjcYMi0joOsfXYJ24GN9VDx6k/+N 7xzovnwP//qrA1g15vNVQEWRKmYtJS2Oj7YRCaMvu5KStPZKK1QBsXL4VtvJNkvK nK5xJ/OpMUtFu0KPuBXP8g+LZLOQatcju8Kifwdj66EDXpzS22QMpmLF/QdwSVxs VmpDSgHUnMNXHu2Ulid+pIbiu/llmGoLB+gyUXdQkaXYKTJ+84jKL/MGuHApiqLe dQJ6HUH4u4T+/u5+FEgb6fOoji9a0raKZ4TMmn+Cv+O/zOGHTtNpSyXLeBfkYux0 lbSdLQjZMRqaqmQpNN9dPaEEyiXqiNu3MQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:34 2025 by rpki-client