This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/964465d9-047d-37cd-a2ca-9cbf880efd85.roa File: 964465d9-047d-37cd-a2ca-9cbf880efd85.roa (raw, json) Hash identifier: 9KwfhA7cPFXsyMBN1n0EEomU2/EKui/jIfN7wU9sD38= Subject key identifier: 43:67:58:8B:F0:B8:EB:87:60:F7:13:5D:EF:4D:E7:F3:86:A2:F3:51 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B125B6D73CFDBAEDCC9AD0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/964465d9-047d-37cd-a2ca-9cbf880efd85.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:d400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:25:b6:d7:3c:fd:ba:ed:cc:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=6d702582-c98a-4856-98a9-d86bdf3780f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:b7:38:35:49:79:87:b7:cc:6d:e0:c9:f5: 8c:3d:dd:0e:7a:f7:ab:f2:14:db:25:f0:8a:99:c9: 23:54:2d:a3:12:61:cf:6e:9f:9a:ee:f2:7c:4c:4c: 16:84:20:cd:ae:4b:e7:92:3a:d7:93:5c:71:ac:2f: 83:ae:6c:65:a9:56:ad:ab:89:61:38:4b:3c:e6:3c: aa:28:96:dd:04:45:11:0c:09:cb:95:75:0b:83:0a: c5:07:f3:8d:eb:56:bf:16:05:c2:9d:76:2a:6c:e3: a0:75:68:31:1d:59:2e:28:06:bf:16:5a:c3:32:68: 0d:e1:4f:6e:e7:d7:f4:6d:b6:55:12:94:aa:3e:90: ef:0d:98:e5:f2:1f:c0:b5:2c:14:23:21:26:20:97: 2c:63:96:53:f5:89:be:33:8e:5c:96:37:ee:dd:6e: e1:e6:d6:f4:ea:da:58:a4:aa:6b:33:da:e9:c3:9c: c3:ab:a8:7d:46:e0:2a:98:4f:c6:de:8c:c8:a0:c1: cc:dd:75:80:b2:f7:d3:28:58:79:f7:e9:f2:e4:99: 93:e9:96:11:c8:bb:f3:96:51:f1:ec:9d:a9:a3:89: b8:20:e6:50:d6:3e:41:95:4f:08:82:cf:78:de:e0: ee:52:b1:38:48:8d:bb:e4:01:e4:9b:d6:f5:76:c1: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:58:8B:F0:B8:EB:87:60:F7:13:5D:EF:4D:E7:F3:86:A2:F3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/964465d9-047d-37cd-a2ca-9cbf880efd85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:d400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c4:76:27:8e:7a:77:9c:1c:b6:ae:6f:25:e4:e7:90:bf:a4: 26:35:c8:6b:94:26:c7:80:dc:6b:2f:e4:2e:35:cd:6b:c4:be: f3:65:08:54:f1:12:97:79:da:73:ab:d7:95:54:be:56:a2:8f: 4d:e7:02:e5:f8:87:05:fe:b3:0d:96:34:16:7c:c6:fd:f8:6a: 9b:fe:fd:cb:7d:59:90:a5:e5:8d:a2:5a:20:fe:a7:b1:90:2e: 91:a4:2e:02:37:7c:f2:a4:d5:74:84:99:6e:16:a6:f2:c0:fd: 25:73:a4:31:a5:8c:a7:c9:d3:19:2b:ef:b9:33:a2:72:6e:e1: 51:53:98:d3:e8:04:a9:5a:8d:7d:3e:cf:73:9d:d3:60:c0:18: 00:2b:9c:56:b1:08:ec:b8:a4:c4:b9:61:63:79:30:fc:e4:ae: 20:3d:48:da:5f:85:5b:47:6a:5b:63:78:ce:23:2a:d1:02:89: ca:1c:7f:6e:c4:4d:6e:a8:f4:ec:3f:79:f6:e5:b7:5e:03:ed: 90:10:d4:8c:c6:ce:ff:b8:c3:e3:b3:d5:13:fc:d7:e1:ff:3f: f8:5f:45:1e:24:42:c5:a8:cd:42:9d:36:9c:43:04:8c:fb:ab: b7:fb:03:36:b4:4e:72:8f:ce:ad:97:15:51:8d:a7:6f:0f:a4: f8:38:ba:cf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sSW21zz9uu3MmtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk NmQ3MDI1ODItYzk4YS00ODU2LTk4YTktZDg2YmRmMzc4MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBS3ODVJeYe3zG3gyfWMPd0Oever8hTbJfCK mckjVC2jEmHPbp+a7vJ8TEwWhCDNrkvnkjrXk1xxrC+DrmxlqVatq4lhOEs85jyq KJbdBEURDAnLlXULgwrFB/ON61a/FgXCnXYqbOOgdWgxHVkuKAa/FlrDMmgN4U9u 59f0bbZVEpSqPpDvDZjl8h/AtSwUIyEmIJcsY5ZT9Ym+M45cljfu3W7h5tb06tpY pKprM9rpw5zDq6h9RuAqmE/G3ozIoMHM3XWAsvfTKFh59+ny5JmT6ZYRyLvzllHx 7J2po4m4IOZQ1j5BlU8Igs943uDuUrE4SI275AHkm9b1dsGpgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFENnWIvwuOuHYPcTXe9N5/OGovNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTY0NDY1ZDktMDQ3ZC0z N2NkLWEyY2EtOWNiZjg4MGVmZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujNQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATMR2J456d5wctq5vJeTnkL+kJjXIa5Qmx4Dcay/kLjXNa8S+82UI VPESl3nac6vXlVS+VqKPTecC5fiHBf6zDZY0FnzG/fhqm/79y31ZkKXljaJaIP6n sZAukaQuAjd88qTVdISZbham8sD9JXOkMaWMp8nTGSvvuTOicm7hUVOY0+gEqVqN fT7Pc53TYMAYACucVrEI7LikxLlhY3kw/OSuID1I2l+FW0dqW2N4ziMq0QKJyhx/ bsRNbqj07D959uW3XgPtkBDUjMbO/7jD47PVE/zX4f8/+F9FHiRCxajNQp02nEME jPurt/sDNrROco/OrZcVUY2nbw+k+Di6zw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:33:08 2025 by rpki-client