This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa File: 8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa (raw, json) Hash identifier: bnxYsoH/NQ1TBESP4Yvfo7A22o7zHYAwNKHaMQUCndc= Subject key identifier: 53:9E:63:1A:36:B4:C7:09:C2:A6:C6:34:11:53:5E:5A:CD:71:25:57 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A690F7041EE94BB641F580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:90:f7:04:1e:e9:4b:b6:41:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e2c30f03-6de9-4cbc-865a-79a0deae8b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:04:b4:13:de:d6:a9:4c:af:53:d3:34:bb: a5:0c:9e:94:df:62:85:42:51:37:4b:9d:d8:4e:e4: ae:55:49:86:c0:25:3f:12:08:b3:49:a6:1e:57:82: cf:98:17:12:f8:1c:7c:c0:ba:0d:92:c6:f1:df:35: 74:6d:c9:da:85:77:fc:3d:9b:44:10:6d:66:23:6f: a1:c3:1e:d1:38:66:55:95:12:16:2e:c1:51:9f:b4: 95:97:c0:d7:1f:d2:ec:f2:13:72:c0:4e:dd:06:e9: e9:85:0b:64:f4:3a:3e:cc:b2:bd:0c:5e:c8:19:0f: 97:f1:69:07:bc:0e:4b:7c:38:c5:92:f2:8f:7c:2a: 97:57:5c:97:fc:51:90:39:19:47:ee:18:54:7f:1f: 1f:09:3b:de:f8:1c:7b:2e:8a:2a:97:ce:41:4a:66: 60:36:ff:79:df:5a:fe:e6:fb:8b:65:66:fb:58:3b: b5:55:43:7e:fc:11:c9:c2:31:80:b6:e1:b1:6f:53: 14:db:d2:36:9f:8e:a3:33:90:bb:11:f6:f8:1d:1b: 3b:98:85:75:e5:e1:43:d1:64:47:e8:d3:a2:71:ca: 77:bb:40:e1:9a:56:4b:f9:6c:b8:a1:a1:f0:db:bb: 0c:39:48:b1:21:ee:fd:8e:ea:0a:f0:b9:41:ff:f2: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:63:1A:36:B4:C7:09:C2:A6:C6:34:11:53:5E:5A:CD:71:25:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:33:b2:7f:38:06:92:dd:0c:0c:17:9b:82:5e:cb:cb:f8:dd: 8f:9f:93:54:f1:2a:4e:7d:28:47:bd:9e:61:6d:62:50:15:76: 32:f2:2b:e4:86:67:42:d6:d9:a1:62:2d:89:3d:7f:ad:05:39: 92:a5:4a:32:b0:a9:15:ee:1b:7a:bf:fc:dc:1b:d7:b3:78:5b: 56:b9:5c:88:a0:a3:57:02:53:d9:78:25:e9:96:7a:46:e5:7e: 5b:8c:a2:dd:cc:8a:f2:df:69:86:21:99:ec:67:78:a2:f4:a0: 92:d6:db:b5:8d:88:65:62:f2:d4:71:82:68:0e:68:f8:d9:22: bf:61:cd:ee:9c:e6:ab:af:0c:4c:ad:f8:c4:70:1b:93:c1:f6: bd:bc:77:91:fd:52:08:d4:0b:62:ef:44:e3:4e:22:f3:b5:ba: 69:49:fe:51:73:83:6c:40:05:44:d1:59:b1:ef:d7:da:ab:33: f0:f3:dc:59:17:2e:ec:ce:2e:6e:4a:d5:d0:95:6d:81:9c:90: 16:73:24:08:76:e5:dd:ea:ff:45:32:55:b4:d2:e6:c8:be:c4: d9:ff:6c:0a:75:f8:c5:35:18:d4:3c:f2:4c:fc:89:02:ae:3c: d0:6d:5c:8b:95:85:ba:66:11:3a:95:e6:8b:75:44:ab:c6:b7: 91:02:d9:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppD3BB7pS7ZB9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTJjMzBmMDMtNmRlOS00Y2JjLTg2NWEtNzlhMGRlYWU4YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnQEtBPe1qlMr1PTNLulDJ6U32KFQlE3S53Y TuSuVUmGwCU/EgizSaYeV4LPmBcS+Bx8wLoNksbx3zV0bcnahXf8PZtEEG1mI2+h wx7ROGZVlRIWLsFRn7SVl8DXH9Ls8hNywE7dBunphQtk9Do+zLK9DF7IGQ+X8WkH vA5LfDjFkvKPfCqXV1yX/FGQORlH7hhUfx8fCTve+Bx7Looql85BSmZgNv9531r+ 5vuLZWb7WDu1VUN+/BHJwjGAtuGxb1MU29I2n46jM5C7Efb4HRs7mIV15eFD0WRH 6NOiccp3u0DhmlZL+Wy4oaHw27sMOUixIe79juoK8LlB//KYTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFOeYxo2tMcJwqbGNBFTXlrNcSVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI4MDNjMmItZTAzZC0z YzU3LWFkNzYtNWI2YjljYTIxODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujtAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcTOyfzgGkt0MDBebgl7Ly/jdj5+TVPEqTn0oR72eYW1iUBV2MvIr 5IZnQtbZoWItiT1/rQU5kqVKMrCpFe4ber/83BvXs3hbVrlciKCjVwJT2Xgl6ZZ6 RuV+W4yi3cyK8t9phiGZ7Gd4ovSgktbbtY2IZWLy1HGCaA5o+Nkiv2HN7pzmq68M TK34xHAbk8H2vbx3kf1SCNQLYu9E404i87W6aUn+UXODbEAFRNFZse/X2qsz8PPc WRcu7M4ubkrV0JVtgZyQFnMkCHbl3er/RTJVtNLmyL7E2f9sCnX4xTUY1DzyTPyJ Aq480G1ci5WFumYROpXmi3VEq8a3kQLZoA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:52 2025 by rpki-client