This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/925cc77d-90e0-35ce-a6a6-eb01a8cb2b2a.roa
File: 925cc77d-90e0-35ce-a6a6-eb01a8cb2b2a.roa (raw, json)
Hash identifier: pprvL5MBmI7k2fusqM6MNrG9Dwvsa1L2gV7ScG3+Gbo=
Subject key identifier: FC:B8:61:14:D1:1C:63:2A:54:F2:F2:BA:F0:2E:2F:DD:5F:06:0D:FF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C42DC0E5E45B819E8EBDDB680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/925cc77d-90e0-35ce-a6a6-eb01a8cb2b2a.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e88:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:0e:5e:45:b8:19:e8:eb:dd:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=138c7ed8-2803-47a4-a13d-9f7020c767af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:d3:66:36:09:36:36:b7:f5:fe:7d:38:55:
8f:11:a2:21:57:48:03:ad:df:63:3f:bc:4d:cb:c6:
2f:62:b7:d2:6f:d4:09:31:44:bb:a5:cb:a7:0c:2d:
97:01:f1:1b:bd:11:ba:36:be:e7:96:d0:f9:ea:a2:
17:9f:98:c8:53:fd:dd:fb:9e:e4:94:5d:75:a7:9e:
c0:bd:71:f1:5c:d3:7c:57:e5:8b:22:17:05:12:75:
65:0e:91:a9:4f:5a:4d:ac:f3:63:46:43:e8:b8:f6:
ae:4d:96:b4:44:6b:f7:69:19:c9:a1:84:7a:f9:08:
d7:83:8b:0d:78:6f:7e:3c:39:93:57:0c:4e:99:c9:
c9:5e:dd:f5:ae:84:9c:50:26:69:5a:69:b3:df:88:
44:56:00:54:93:80:c3:9f:d9:7f:c4:73:4d:4d:b2:
c3:d6:3c:08:c2:3a:37:ab:d4:dd:84:a1:2e:76:43:
28:d6:96:d3:b8:89:b6:75:cd:6e:f8:c8:ba:3c:5a:
e8:c7:89:cf:cb:37:24:86:60:64:a3:4b:a1:6c:1a:
1c:bd:df:96:ec:55:1f:a7:ac:32:cd:86:53:55:b8:
e7:cc:28:be:73:f2:6c:05:57:86:4f:ee:62:24:0b:
b1:18:04:0e:2e:6c:28:99:1a:38:e8:66:46:82:f9:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:61:14:D1:1C:63:2A:54:F2:F2:BA:F0:2E:2F:DD:5F:06:0D:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/925cc77d-90e0-35ce-a6a6-eb01a8cb2b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c4:f9:f4:7a:1c:d1:1a:23:c5:38:14:ca:b8:89:5a:5f:29:
db:13:34:12:7a:24:34:6a:04:02:96:cd:a9:66:a6:39:60:fd:
4e:cc:8d:ec:ae:36:be:11:87:80:53:e2:bc:7c:2d:b4:90:d3:
58:94:13:e4:e5:f2:1b:4b:a5:7b:cf:83:85:c2:a9:db:f3:91:
fd:c6:1b:cb:3f:1d:f4:c8:d9:7c:26:ff:cb:22:ee:3d:80:1f:
4e:e7:dd:f0:a6:11:1c:ff:ef:75:72:5e:89:af:6c:c0:f1:97:
f7:e2:f4:c3:fa:12:2c:14:5c:e6:b2:a1:b4:da:22:09:09:8b:
ed:b4:cf:b6:20:b7:cc:15:67:ac:07:85:ab:91:3e:f1:0a:e6:
12:60:23:ad:3c:de:35:37:8f:6e:34:cc:fd:11:9d:b9:5f:65:
13:9d:ee:d7:d3:fc:64:07:6a:5e:bd:8a:30:9e:f8:3f:d7:c8:
50:3d:9b:72:ac:f1:a3:9b:58:61:e9:a1:36:e6:5c:9d:1f:6c:
a7:13:c8:df:58:2f:1c:f5:cc:35:4d:de:1e:32:47:f9:4d:2b:
05:e3:d9:f4:d6:3d:c6:b5:9f:39:a7:83:24:68:1f:17:4f:32:
22:3e:e3:10:df:aa:cd:39:78:59:7f:2f:0d:86:cc:3a:12:ed:
ec:d4:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:37:17 2025 by rpki-client