This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa File: a2f09972-83a4-3240-871a-2619e0b0b11e.roa (raw, json) Hash identifier: HtQT5LZx2TibbqfXTufWLfmI/E3JRsFIDjQmW9ZfHi0= Subject key identifier: 83:EF:25:1E:1E:14:48:4B:71:DC:5A:EF:88:79:FC:43:12:DD:8D:0C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871DFC7F17A609D9FB69560 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:df:c7:f1:7a:60:9d:9f:b6:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=046129f5-abb1-49c1-be96-f48061567f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:78:91:99:f8:a8:71:42:6e:16:0f:f3:11: 3e:82:bc:8f:38:d8:7a:1f:cd:15:2a:f7:c3:06:f5: 3b:20:21:b6:80:61:ac:18:f7:d7:5c:63:33:78:0f: a1:b6:4b:4e:0c:e9:e3:6a:e3:40:95:ad:a1:9a:48: 1a:fb:48:4c:51:3d:a3:d6:ab:31:8e:e4:0a:48:9f: 38:da:4d:da:d2:33:d7:85:58:5c:b3:aa:65:f8:d3: b2:1b:b6:a8:90:1a:79:2c:32:c1:c0:e4:a1:92:3b: a6:8c:8f:8e:df:f6:2b:c6:ed:3b:d4:9f:fb:48:2e: 6c:97:28:26:cd:c6:13:6e:e7:58:f9:83:4f:3b:b1: fa:91:55:f3:1d:6a:ff:e5:ae:32:92:1f:38:9c:06: 85:be:e2:17:7c:f5:1e:b6:5d:01:2a:b3:f9:88:a0: 4d:b2:1a:39:fc:43:ae:3b:6f:cb:31:cc:a5:a9:98: a5:64:6f:61:67:eb:97:fb:2c:37:f2:5d:04:5d:ab: 93:a6:0f:56:3d:2b:a1:9b:39:21:77:83:06:53:e9: 0a:a3:7b:25:cd:9f:83:05:44:4f:fe:01:cd:54:ed: d0:e4:a7:da:09:b9:92:4b:46:1f:d4:3a:71:b9:e7: 1a:e1:2a:c4:21:46:d3:1f:5a:33:90:4c:7b:4a:54: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:25:1E:1E:14:48:4B:71:DC:5A:EF:88:79:FC:43:12:DD:8D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:24:6a:4e:1b:5a:f2:c8:fc:32:22:57:fa:a9:e6:10:28:0d: 60:9b:86:a0:7e:a5:6a:cf:a4:5d:be:4e:0b:fa:6e:c4:f3:a3: b9:5f:fd:9a:b9:fd:00:e9:9d:0c:eb:3a:04:00:a5:a4:2b:67: f6:ff:c3:84:d5:24:f0:aa:05:d4:c8:88:ff:c9:f7:f0:e7:52: 44:1f:0b:7f:ea:f5:35:a1:d2:84:48:60:16:d8:34:d1:be:a0: 2d:b4:90:fa:ed:e4:e9:f9:d7:13:c7:9e:62:81:1f:4f:77:48: 99:99:51:29:1c:75:ef:91:04:34:93:90:72:96:95:0b:40:45: cc:4a:75:39:66:92:68:1f:db:dd:ee:f4:63:5b:26:6c:a4:cb: 33:85:0f:16:7c:ff:56:be:2b:db:40:03:ff:9d:6a:4e:c9:69: df:a2:af:54:bc:89:03:d0:5a:31:ed:21:bc:d4:28:61:13:c0: a6:9a:2e:87:97:f0:9b:2f:ca:68:c3:0e:12:f5:5f:67:28:59: 59:42:f8:b8:dc:4c:76:cb:de:c6:c6:e7:fe:78:3d:71:f5:cd: 4d:df:ec:91:c7:1c:1e:a7:62:ab:61:42:0d:b0:11:b7:ec:a4: cc:2d:44:ea:d9:92:8a:0c:b5:7d:f7:4a:05:f4:6c:d1:c7:a7: 7c:78:54:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcd/H8XpgnZ+2lWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MDQ2MTI5ZjUtYWJiMS00OWMxLWJlOTYtZjQ4MDYxNTY3ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGx4kZn4qHFCbhYP8xE+gryPONh6H80VKvfD BvU7ICG2gGGsGPfXXGMzeA+htktODOnjauNAla2hmkga+0hMUT2j1qsxjuQKSJ84 2k3a0jPXhVhcs6pl+NOyG7aokBp5LDLBwOShkjumjI+O3/Yrxu071J/7SC5slygm zcYTbudY+YNPO7H6kVXzHWr/5a4ykh84nAaFvuIXfPUetl0BKrP5iKBNsho5/EOu O2/LMcylqZilZG9hZ+uX+yw38l0EXauTpg9WPSuhmzkhd4MGU+kKo3slzZ+DBURP /gHNVO3Q5KfaCbmSS0Yf1Dpxueca4SrEIUbTH1ozkEx7SlTcEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIPvJR4eFEhLcdxa74h5/EMS3Y0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmMDk5NzItODNhNC0z MjQwLTg3MWEtMjYxOWUwYjBiMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujEQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhiRqThta8sj8MiJX+qnmECgNYJuGoH6las+kXb5OC/puxPOjuV/9 mrn9AOmdDOs6BAClpCtn9v/DhNUk8KoF1MiI/8n38OdSRB8Lf+r1NaHShEhgFtg0 0b6gLbSQ+u3k6fnXE8eeYoEfT3dImZlRKRx175EENJOQcpaVC0BFzEp1OWaSaB/b 3e70Y1smbKTLM4UPFnz/Vr4r20AD/51qTslp36KvVLyJA9BaMe0hvNQoYRPAppou h5fwmy/KaMMOEvVfZyhZWUL4uNxMdsvexsbn/ng9cfXNTd/skcccHqdiq2FCDbAR t+ykzC1E6tmSigy1ffdKBfRs0cenfHhUaQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:34 2025 by rpki-client