This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa File: 8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa (raw, json) Hash identifier: PghrNvlmVzQQ9j+LtWIqCn9h+f+3JVFGL117FMJKqEc= Subject key identifier: A1:66:CB:EE:43:75:CC:72:35:05:14:F2:F3:C6:40:E0:99:5A:0E:E5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C3BE16BFFCA5D8E3B2AAE9DA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2e88:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:6b:ff:ca:5d:8e:3b:2a:ae:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=0d103c7e-36e9-41d5-9042-ab6398e021e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:cb:24:3e:84:9f:be:d4:82:aa:24:c0:91: c9:bc:de:25:b0:a7:fe:15:a9:7c:92:d3:56:b6:7a: 97:85:cf:e8:87:df:72:47:31:b0:6d:aa:c5:1f:9f: 41:d9:bf:99:cc:f8:2e:ff:74:94:d8:d3:67:35:07: 61:7a:24:b7:11:cb:81:af:dd:59:16:89:e6:51:da: 4a:89:a5:bf:f8:cd:79:6e:09:4b:4b:73:93:64:84: 39:f6:4c:3f:35:41:22:db:93:4c:4c:6c:e8:ab:2c: aa:e9:ca:58:1a:b2:a4:1c:8d:af:21:26:b7:f6:0c: 1e:0a:97:98:50:7d:64:6e:25:b4:05:82:11:03:e7: d6:7d:1d:5e:9f:11:f1:3c:c5:39:ae:e0:21:4a:a0: d7:ec:ff:ff:10:03:ac:32:aa:d4:b2:0f:54:12:5f: 35:4a:14:f3:fb:32:94:75:7e:0a:80:e5:94:be:23: 79:d6:40:ba:00:60:cc:4d:f6:9c:0a:86:03:0a:88: 56:45:bd:bf:a9:bd:4a:ea:4a:c9:0b:97:16:a8:32: dc:9e:ad:0d:c7:75:f0:6f:4b:d3:a0:22:29:58:90: a1:cb:59:59:25:c3:34:c6:26:fa:61:5b:27:a8:7a: 03:5e:6e:b3:dd:51:a7:92:ae:40:bf:ed:c1:2f:01: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:CB:EE:43:75:CC:72:35:05:14:F2:F3:C6:40:E0:99:5A:0E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:c6:a2:27:09:a2:d6:aa:85:5b:39:cd:96:91:37:f3:63: 0d:21:1e:e5:17:df:4c:ee:4e:4d:ba:98:7d:2e:55:7f:31:0a: 36:cc:25:3c:9f:3a:55:fc:1e:6a:f2:1c:0c:c0:a3:b4:c7:b7: c7:4c:13:06:6d:c1:86:bf:ef:8a:02:ca:d5:31:91:fd:1b:c3: 1b:f7:64:8b:e4:ef:3e:c1:8d:61:3b:6c:a6:78:85:6c:0e:48: 66:3a:22:d6:fc:28:a8:a5:33:2c:48:df:a6:cd:61:40:ee:85: fb:dc:0f:d7:83:93:3b:c1:b2:94:98:35:b5:6b:4a:7f:d3:59: 2f:4b:69:9c:06:e0:38:a8:25:9d:f3:96:2b:11:8f:33:b8:69: 6c:72:bf:8a:5b:dc:ec:56:d7:18:c4:50:d9:d7:57:58:76:68: ed:2f:5e:b0:25:15:3f:17:a4:3c:ec:39:9a:2d:48:d5:ac:05: 8b:99:5e:81:a7:82:ed:3b:9d:16:bc:59:f0:d5:b7:68:82:c8: 56:a3:10:db:77:04:74:43:90:2d:9d:0b:64:2e:f3:6d:f9:23: 61:ca:2d:f2:db:a9:97:cd:a3:1e:1b:d8:51:9a:a4:08:be:0c: f7:04:cb:bd:80:d3:34:14:d1:1d:ea:95:2f:e0:83:fb:b7:c3: ca:09:38:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw74Wv/yl2OOyqunaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MGQxMDNjN2UtMzZlOS00MWQ1LTkwNDItYWI2Mzk4ZTAyMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZXLJD6En77UgqokwJHJvN4lsKf+Fal8ktNW tnqXhc/oh99yRzGwbarFH59B2b+ZzPgu/3SU2NNnNQdheiS3EcuBr91ZFonmUdpK iaW/+M15bglLS3OTZIQ59kw/NUEi25NMTGzoqyyq6cpYGrKkHI2vISa39gweCpeY UH1kbiW0BYIRA+fWfR1enxHxPMU5ruAhSqDX7P//EAOsMqrUsg9UEl81ShTz+zKU dX4KgOWUviN51kC6AGDMTfacCoYDCohWRb2/qb1K6krJC5cWqDLcnq0Nx3Xwb0vT oCIpWJChy1lZJcM0xib6YVsnqHoDXm6z3VGnkq5Av+3BLwGFpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKFmy+5DdcxyNQUU8vPGQOCZWg7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZkNzhlMDYtZDNmNi0z YzY4LWI4ZjMtYWNlMTQ2YTJhZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiPQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATqnGoicJotaqhVs5zZaRN/NjDSEe5RffTO5OTbqYfS5VfzEKNswl PJ86VfweavIcDMCjtMe3x0wTBm3Bhr/vigLK1TGR/RvDG/dki+TvPsGNYTtspniF bA5IZjoi1vwoqKUzLEjfps1hQO6F+9wP14OTO8GylJg1tWtKf9NZL0tpnAbgOKgl nfOWKxGPM7hpbHK/ilvc7FbXGMRQ2ddXWHZo7S9esCUVPxekPOw5mi1I1awFi5le gaeC7TudFrxZ8NW3aILIVqMQ23cEdEOQLZ0LZC7zbfkjYcot8tupl82jHhvYUZqk CL4M9wTLvYDTNBTRHeqVL+CD+7fDygk45Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:39 2025 by rpki-client