This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abf5d09a-95c1-3709-b943-13c5c70af519.roa File: abf5d09a-95c1-3709-b943-13c5c70af519.roa (raw, json) Hash identifier: XlVDJffUJ1I/3e7GgqGEPW8X5xKbj/kyw2sXef/CI6E= Subject key identifier: 1A:9A:A0:4D:6C:3D:43:17:C4:22:F2:22:C6:E2:C2:01:2B:2E:59:48 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBC407D2F8DCE6B092C680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abf5d09a-95c1-3709-b943-13c5c70af519.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e8a:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c4:07:d2:f8:dc:e6:b0:92:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=436a5b8f-614b-4ad9-9514-d324eaad6c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:29:48:b6:3b:2f:a1:78:bf:d2:4d:c3:4d: 07:00:92:b4:3f:9e:44:24:38:b3:bb:27:56:d3:ea: aa:69:c6:79:3f:6f:af:74:d2:61:cf:3a:87:0d:35: 7e:9c:18:08:21:a5:f7:7f:92:a5:aa:15:e4:98:7d: 30:a1:2a:37:e9:64:40:7f:8d:e2:17:de:1b:d1:26: 77:f0:d2:e6:91:de:e6:18:61:ac:69:bc:78:d0:50: e6:a7:3f:4c:9e:a7:48:c8:63:f1:88:78:68:3d:a3: 70:a4:5d:10:39:e2:a6:f2:40:99:40:d1:8e:41:22: 6e:f0:1c:21:e6:e6:3e:90:19:29:5a:40:74:1e:c3: 56:69:a1:b0:95:b4:30:59:51:72:9d:55:3d:2a:a7: a4:11:42:2a:a2:b5:bb:ea:c1:5f:92:6a:2b:77:cd: 1d:f7:15:2a:1e:9a:49:ea:ac:e9:cc:30:44:4b:87: f1:7e:4c:d6:67:66:31:d8:df:84:1d:ef:34:86:20: 24:cc:73:96:88:f2:03:4f:0c:4f:1f:92:5b:f1:d6: aa:5b:e4:c4:ae:85:54:0a:86:51:e5:ae:67:45:2d: d1:7d:2a:87:dd:0b:00:98:25:ed:52:5a:c8:bd:3d: 64:f2:8d:fe:87:23:99:c7:2e:0e:98:34:23:31:79: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:A0:4D:6C:3D:43:17:C4:22:F2:22:C6:E2:C2:01:2B:2E:59:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abf5d09a-95c1-3709-b943-13c5c70af519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:35:30:02:34:ad:ae:78:9a:0d:49:bf:ec:d3:1c:56:58:cf: 8a:5f:e5:c9:c1:c4:60:44:26:59:60:e6:19:eb:d4:77:a0:eb: e6:de:2f:2d:74:dd:e2:0b:55:b9:bd:42:09:08:81:2f:c7:03: eb:de:20:f8:3c:2b:f8:c0:dd:c2:09:d1:83:2a:8e:bf:31:a5: 9c:eb:f2:c2:c6:69:31:7a:4d:d1:83:40:c5:1d:5f:a7:f0:d2: 61:f2:0f:d9:94:d8:6c:67:77:90:25:81:d3:0d:6e:e3:d6:8b: 15:ac:01:14:0b:e9:db:3a:66:5c:4b:16:c9:51:a5:38:bf:ec: 9a:79:5c:05:db:62:51:83:bf:d5:e0:e4:1b:1a:e7:fc:a0:31: 92:64:15:87:3a:c9:87:cd:fe:be:04:01:ef:91:13:48:12:3f: 3f:a9:20:ae:d8:b0:77:1b:ea:14:2f:da:3e:ff:fa:ca:d4:4c: e9:65:9e:b2:8a:36:0e:e0:05:de:1c:a5:7f:ca:ab:6e:62:1d: 8a:26:27:84:4d:c4:b6:aa:89:92:b8:8e:37:5c:3b:a7:9b:84: a9:66:1f:aa:df:85:d2:51:f2:5c:5f:fe:39:46:15:0a:02:88: 2a:0c:6e:37:31:15:b9:2b:2b:58:84:42:d5:84:3d:b9:60:0c: c2:22:42:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC28QH0vjc5rCSxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NDM2YTViOGYtNjE0Yi00YWQ5LTk1MTQtZDMyNGVhYWQ2YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CApSLY7L6F4v9JNw00HAJK0P55EJDizuydW 0+qqacZ5P2+vdNJhzzqHDTV+nBgIIaX3f5KlqhXkmH0woSo36WRAf43iF94b0SZ3 8NLmkd7mGGGsabx40FDmpz9MnqdIyGPxiHhoPaNwpF0QOeKm8kCZQNGOQSJu8Bwh 5uY+kBkpWkB0HsNWaaGwlbQwWVFynVU9KqekEUIqorW76sFfkmord80d9xUqHppJ 6qzpzDBES4fxfkzWZ2Yx2N+EHe80hiAkzHOWiPIDTwxPH5Jb8daqW+TEroVUCoZR 5a5nRS3RfSqH3QsAmCXtUlrIvT1k8o3+hyOZxy4OmDQjMXmfawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBqaoE1sPUMXxCLyIsbiwgErLllIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWJmNWQwOWEtOTVjMS0z NzA5LWI5NDMtMTNjNWM3MGFmNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAADUwAjStrniaDUm/7NMcVljPil/lycHEYEQmWWDmGevUd6Dr5t4v LXTd4gtVub1CCQiBL8cD694g+Dwr+MDdwgnRgyqOvzGlnOvywsZpMXpN0YNAxR1f p/DSYfIP2ZTYbGd3kCWB0w1u49aLFawBFAvp2zpmXEsWyVGlOL/smnlcBdtiUYO/ 1eDkGxrn/KAxkmQVhzrJh83+vgQB75ETSBI/P6kgrtiwdxvqFC/aPv/6ytRM6WWe soo2DuAF3hylf8qrbmIdiiYnhE3EtqqJkriON1w7p5uEqWYfqt+F0lHyXF/+OUYV CgKIKgxuNzEVuSsrWIRC1YQ9uWAMwiJC/Q== -----END CERTIFICATE-----Generated at Tue Dec 30 07:09:17 2025 by rpki-client