This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa File: 9d508d26-8873-3b65-9bae-b4fed39f3880.roa (raw, json) Hash identifier: CzaFh+ygYiVyj0G8BIPyvUtaOju8YaXErf32OSg3wAI= Subject key identifier: 86:EB:D5:90:5C:D2:D3:41:57:3B:2B:CD:75:67:FF:88:C5:D1:F9:4A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871DFB7281DD4F890033780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:df:b7:28:1d:d4:f8:90:03:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=a917a247-c21d-4402-92c2-c3c7d8522c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:ab:50:dc:a7:1e:7e:79:9c:90:1f:f6:d0: 9b:97:86:6f:1e:fc:2b:3f:9b:76:48:7b:c7:02:dc: 78:c9:5f:d1:89:9a:c9:6d:8f:6f:15:21:24:34:32: 51:68:42:f9:41:e5:9f:72:9c:b1:97:ac:fe:d1:69: 1d:77:2b:3f:c9:95:c7:b6:69:a5:2c:95:8e:c5:03: 40:71:d4:f4:1a:9b:d1:f3:11:7d:65:5f:a2:72:2f: 4a:97:2d:73:5a:7a:b5:83:01:d5:80:5b:52:af:04: bb:cf:c8:7e:bf:92:fa:e8:b8:64:9b:69:0c:f5:b5: fb:28:d8:07:fc:04:e7:aa:3a:31:5d:a7:90:b2:d7: ee:70:42:6b:1a:16:61:93:fc:36:d8:f4:0b:4f:af: 1c:b9:10:d1:c2:35:ec:07:5b:03:b3:c9:8a:19:80: 77:5a:e0:45:16:57:8b:9c:c5:94:a6:e7:90:d0:58: 7c:5e:5a:49:bb:99:e2:16:79:a0:b6:bb:55:d0:54: e4:dc:a0:cf:36:76:87:7d:ea:a4:a1:ef:1d:01:4f: 4f:73:88:bf:67:e3:81:93:7a:17:e5:e4:31:23:f0: 4f:db:fa:55:9c:89:e8:e4:61:21:7c:f4:4f:3a:46: ac:9e:7a:53:4d:ad:6f:c8:33:6d:c2:76:d9:64:44: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EB:D5:90:5C:D2:D3:41:57:3B:2B:CD:75:67:FF:88:C5:D1:F9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:53:6e:e6:24:f2:54:04:ed:85:cf:9c:5d:c9:f4:ba:c7:c2: 74:6f:ec:14:d7:10:57:c4:6f:6e:bf:13:c6:32:1a:08:36:46: 7e:1f:97:83:ba:fd:77:d1:2f:4c:0a:e5:55:98:40:54:9b:ad: 3c:f9:67:c4:50:a1:08:6b:5e:9e:39:72:4a:96:8c:02:f1:ae: 5f:fc:d1:a5:9d:2e:26:5f:70:08:8a:f6:e7:eb:00:81:5f:81: f1:35:3c:ba:69:31:4b:4d:91:80:39:4d:e0:29:5a:95:07:1a: 6c:90:1e:72:e4:11:d5:ce:8a:cb:56:25:e8:bb:a9:85:64:28: 65:0c:50:8b:3e:1d:97:8e:12:56:a8:78:20:2d:12:17:ee:0c: 2e:aa:a8:1d:89:26:43:c7:68:aa:88:0c:b2:a1:89:8a:06:a2: a4:2e:31:cc:54:fb:7a:d3:52:44:fe:32:94:e0:07:0e:67:fd: 87:f0:60:cd:0c:0b:12:38:25:73:05:f1:71:1a:69:f5:ff:16: c3:c1:85:3d:49:16:a7:e9:b9:90:1d:05:b0:f5:64:e7:7b:b4: f4:cd:47:96:1d:a0:6c:fa:01:b0:8d:97:94:3d:50:4c:ed:97: ea:ed:14:12:41:08:b2:9b:86:4e:9e:e6:93:ab:56:67:f0:42: f2:c4:ce:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcd+3KB3U+JADN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YTkxN2EyNDctYzIxZC00NDAyLTkyYzItYzNjN2Q4NTIyYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03WrUNynHn55nJAf9tCbl4ZvHvwrP5t2SHvH Atx4yV/RiZrJbY9vFSEkNDJRaEL5QeWfcpyxl6z+0Wkddys/yZXHtmmlLJWOxQNA cdT0GpvR8xF9ZV+ici9Kly1zWnq1gwHVgFtSrwS7z8h+v5L66Lhkm2kM9bX7KNgH /ATnqjoxXaeQstfucEJrGhZhk/w22PQLT68cuRDRwjXsB1sDs8mKGYB3WuBFFleL nMWUpueQ0Fh8XlpJu5niFnmgtrtV0FTk3KDPNnaHfeqkoe8dAU9Pc4i/Z+OBk3oX 5eQxI/BP2/pVnIno5GEhfPRPOkasnnpTTa1vyDNtwnbZZETlewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIbr1ZBc0tNBVzsrzXVn/4jF0flKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQ1MDhkMjYtODg3My0z YjY1LTliYWUtYjRmZWQzOWYzODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAe1Nu5iTyVATthc+cXcn0usfCdG/sFNcQV8Rvbr8TxjIaCDZGfh+X g7r9d9EvTArlVZhAVJutPPlnxFChCGtenjlySpaMAvGuX/zRpZ0uJl9wCIr25+sA gV+B8TU8umkxS02RgDlN4ClalQcabJAecuQR1c6Ky1Yl6LuphWQoZQxQiz4dl44S Vqh4IC0SF+4MLqqoHYkmQ8doqogMsqGJigaipC4xzFT7etNSRP4ylOAHDmf9h/Bg zQwLEjglcwXxcRpp9f8Ww8GFPUkWp+m5kB0FsPVk53u09M1Hlh2gbPoBsI2XlD1Q TO2X6u0UEkEIspuGTp7mk6tWZ/BC8sTOcA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:00 2025 by rpki-client