This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa File: a8d358ea-3a34-332d-8ea9-0d891492c16a.roa (raw, json) Hash identifier: aR9G/e0fn12OFxhabgmfx46btb0ehKoNZZpfsiq/VuI= Subject key identifier: 28:A6:27:C9:3F:70:92:01:5E:40:94:7A:C8:A5:E5:43:F2:E9:6A:58 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C1FF63338A1FC4EB6F1CF4780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2e88:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:33:38:a1:fc:4e:b6:f1:cf:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=92e6020a-e041-4ed3-aa3f-e24a329ca9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:4a:96:b2:aa:68:98:7f:f2:ad:3d:ee:73: 4e:f9:09:f9:a7:1e:dc:a5:c0:78:fc:db:46:78:f7: ff:bc:48:9c:da:0a:42:fa:f2:78:bc:1d:3e:97:71: 1f:9c:4f:a2:ed:3b:76:03:d9:9a:b2:7c:32:0c:96: b0:59:9a:f9:72:df:de:ff:a3:40:4c:f7:dc:be:b0: 02:84:fe:3b:66:0f:8f:d0:f0:0c:5d:aa:23:10:c3: 24:5f:1e:ef:77:80:50:d2:60:78:c2:f4:00:c8:cb: f4:a4:98:28:20:b0:78:33:3d:c5:d1:a2:9d:48:a1: fc:d7:7f:85:6a:57:03:b3:4d:6c:9e:1b:63:1c:5b: 8e:2a:11:a5:64:76:ac:86:7c:61:40:e7:ee:01:28: da:c7:fa:b0:00:53:c6:93:93:be:39:80:a4:3c:3c: 42:02:23:72:b5:52:36:8f:fe:e8:a8:f8:c7:73:45: 8b:b1:da:d3:f2:97:19:f4:81:82:1a:c7:d6:7d:32: ce:2e:f8:01:82:5f:ef:28:b9:d3:35:2f:88:04:e9: c7:45:2d:4b:58:0d:33:78:a5:74:1a:34:1f:04:59: 9b:64:31:f8:ff:b5:b5:86:c9:97:37:d5:fd:62:f9: 94:39:0c:7d:c9:d4:32:b1:78:e6:27:92:b4:87:5a: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A6:27:C9:3F:70:92:01:5E:40:94:7A:C8:A5:E5:43:F2:E9:6A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3c:7d:f7:66:3d:42:88:7b:57:46:ef:44:77:36:89:bc:38: a6:52:63:77:7e:20:bf:25:18:11:a3:7c:c8:c5:37:a0:42:92: 01:2c:49:da:2e:6d:0f:dc:95:3e:dd:bf:27:8a:85:15:a9:15: a4:ff:92:1d:22:ca:93:3b:67:5a:67:1a:06:7a:b5:b4:98:08: ee:93:bd:7d:01:cd:f8:58:99:60:72:7f:29:13:17:e3:03:20: 75:b1:05:4e:1b:bb:ad:2a:06:4a:16:41:08:61:91:3e:02:6c: fb:66:27:15:b6:1f:db:83:6c:37:c9:a6:73:a4:2b:ee:40:3d: 19:7f:1d:9d:cf:55:6c:d8:8c:84:80:c8:37:cf:f2:ae:37:90: 63:b3:a0:a4:59:ef:e9:fd:68:04:df:3c:ef:e5:fb:4e:ec:a5: 0d:0d:20:d7:f3:5c:64:29:f3:38:9d:85:04:79:4a:a4:bd:b3: b2:a4:8d:c9:02:b4:b3:c3:f3:15:ef:f7:0d:0c:fb:02:85:2c: c2:0e:5f:b0:a8:0d:44:50:b3:da:bb:18:d6:e4:ac:a8:a8:34: 1c:ff:87:7a:c7:8a:cb:1e:56:82:7d:4e:a3:37:89:a3:bf:8c: bf:58:b1:db:f4:d2:9b:9e:11:2f:7c:09:6b:7c:f5:78:1f:3a: d4:fe:6e:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwf9jM4ofxOtvHPR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk OTJlNjAyMGEtZTA0MS00ZWQzLWFhM2YtZTI0YTMyOWNhOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjexKlrKqaJh/8q097nNO+Qn5px7cpcB4/NtG ePf/vEic2gpC+vJ4vB0+l3EfnE+i7Tt2A9masnwyDJawWZr5ct/e/6NATPfcvrAC hP47Zg+P0PAMXaojEMMkXx7vd4BQ0mB4wvQAyMv0pJgoILB4Mz3F0aKdSKH813+F alcDs01snhtjHFuOKhGlZHashnxhQOfuASjax/qwAFPGk5O+OYCkPDxCAiNytVI2 j/7oqPjHc0WLsdrT8pcZ9IGCGsfWfTLOLvgBgl/vKLnTNS+IBOnHRS1LWA0zeKV0 GjQfBFmbZDH4/7W1hsmXN9X9YvmUOQx9ydQysXjmJ5K0h1rIGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCimJ8k/cJIBXkCUesil5UPy6WpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYThkMzU4ZWEtM2EzNC0z MzJkLThlYTktMGQ4OTE0OTJjMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYzx992Y9Qoh7V0bvRHc2ibw4plJjd34gvyUYEaN8yMU3oEKSASxJ 2i5tD9yVPt2/J4qFFakVpP+SHSLKkztnWmcaBnq1tJgI7pO9fQHN+FiZYHJ/KRMX 4wMgdbEFThu7rSoGShZBCGGRPgJs+2YnFbYf24NsN8mmc6Qr7kA9GX8dnc9VbNiM hIDIN8/yrjeQY7OgpFnv6f1oBN887+X7TuylDQ0g1/NcZCnzOJ2FBHlKpL2zsqSN yQK0s8PzFe/3DQz7AoUswg5fsKgNRFCz2rsY1uSsqKg0HP+HeseKyx5Wgn1OozeJ o7+Mv1ix2/TSm54RL3wJa3z1eB861P5urQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:31:04 2025 by rpki-client