This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b538ed99-7c8e-3a21-8dc4-b983379463d9.roa File: b538ed99-7c8e-3a21-8dc4-b983379463d9.roa (raw, json) Hash identifier: ecY2C6Ao3cmSi3eFbAeV42Z+kQZ78rxLSTxb9bTSDCg= Subject key identifier: 5F:A5:63:F8:F5:93:43:C3:EF:86:30:90:1D:91:42:C9:2A:52:56:34 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC13616EDF6C4526F3E780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b538ed99-7c8e-3a21-8dc4-b983379463d9.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:13:61:6e:df:6c:45:26:f3:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1816a2e4-3ac4-410a-9084-ec34ee76fecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:c3:c1:64:af:70:7f:f1:a0:3b:41:48:c7: 35:c0:39:06:ad:ac:01:40:a4:f1:cc:f1:56:39:3c: 03:eb:7c:24:62:98:70:28:89:bf:74:39:af:35:9a: ba:0a:a3:dd:41:e8:ea:0b:b3:9e:cf:d0:ca:4a:85: 93:33:c9:44:ce:e0:bc:1a:03:60:86:74:c2:18:af: 9d:2a:bf:3d:21:de:a8:14:64:1b:b4:16:d9:bd:66: e2:09:15:5a:21:a9:1a:ff:e0:09:e6:57:f2:3a:f4: 87:4a:85:3c:11:1e:04:19:1e:15:09:4c:e4:b2:b5: 66:f5:bb:cc:11:57:2c:8a:d0:4d:5f:06:80:a5:9c: 85:f9:d5:72:65:b5:20:c2:78:69:99:81:70:d6:e9: a3:a4:1a:e1:d9:60:6d:47:92:e9:6e:82:b8:f4:eb: c3:31:5f:fa:cd:7e:81:c8:e3:22:33:b0:b9:78:6c: 25:c4:f8:20:4f:94:23:e2:cd:96:3b:e5:13:26:34: 9f:a4:ac:52:20:4a:59:43:7b:9e:eb:d7:d1:2e:c0: ad:12:d1:4d:a0:48:a0:99:71:71:5f:b5:4a:8c:93: 76:c0:ca:7d:66:ef:8a:87:f5:45:2f:7d:9a:d2:32: 69:66:5c:2e:6f:a0:51:37:6d:fd:ac:31:a9:9f:ef: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:63:F8:F5:93:43:C3:EF:86:30:90:1D:91:42:C9:2A:52:56:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b538ed99-7c8e-3a21-8dc4-b983379463d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:a0:26:4b:ef:be:fb:ed:9a:8a:42:61:b2:5d:78:9f:0e: 52:3f:d8:f0:99:15:bb:25:c7:b3:51:d5:a4:42:b8:08:c9:89: 76:db:bf:3f:1b:b6:f9:be:48:7f:82:20:20:2f:81:c3:c8:e6: 37:90:b3:da:93:c1:eb:52:55:93:94:15:a9:41:6a:f4:68:a3: f8:7f:2d:5e:c6:c1:aa:4e:83:00:0c:ec:ae:01:7f:35:5d:a3: 3f:5e:39:d0:e4:a5:9f:03:b7:2c:89:27:7f:8e:72:6f:80:12: 66:26:8d:56:5e:41:df:25:1d:a5:3d:4d:4c:75:fb:7e:a8:72: 5e:f7:a6:33:86:5a:4d:85:29:26:cf:a6:da:4a:b3:5d:3f:15: a2:ed:f2:34:38:2a:ed:6e:ad:f3:3b:1d:ce:1d:46:5a:4f:e4: 58:5b:07:6b:a1:fd:f5:c2:40:69:35:07:5a:ee:2b:c0:55:66: 10:83:d3:db:9b:6e:6a:f6:7a:75:6c:e0:2d:32:30:d2:63:65: b3:35:63:fa:16:56:f9:e1:d9:0f:c7:55:f9:59:6d:7d:fe:5d: bc:53:47:3c:29:86:5e:c5:6b:0d:cc:50:0f:70:13:31:0b:ff: 7c:4f:98:b7:fc:65:f5:06:40:54:69:20:b0:1a:7a:74:83:f8: 23:0e:7d:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BNhbt9sRSbz54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MTgxNmEyZTQtM2FjNC00MTBhLTkwODQtZWMzNGVlNzZmZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfnDwWSvcH/xoDtBSMc1wDkGrawBQKTxzPFW OTwD63wkYphwKIm/dDmvNZq6CqPdQejqC7Oez9DKSoWTM8lEzuC8GgNghnTCGK+d Kr89Id6oFGQbtBbZvWbiCRVaIaka/+AJ5lfyOvSHSoU8ER4EGR4VCUzksrVm9bvM EVcsitBNXwaApZyF+dVyZbUgwnhpmYFw1umjpBrh2WBtR5LpboK49OvDMV/6zX6B yOMiM7C5eGwlxPggT5Qj4s2WO+UTJjSfpKxSIEpZQ3ue69fRLsCtEtFNoEigmXFx X7VKjJN2wMp9Zu+Kh/VFL32a0jJpZlwub6BRN239rDGpn+9E/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF+lY/j1k0PD74YwkB2RQskqUlY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjUzOGVkOTktN2M4ZS0z YTIxLThkYzQtYjk4MzM3OTQ2M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhUygJkvvvvvtmopCYbJdeJ8OUj/Y8JkVuyXHs1HVpEK4CMmJdtu/ Pxu2+b5If4IgIC+Bw8jmN5Cz2pPB61JVk5QVqUFq9Gij+H8tXsbBqk6DAAzsrgF/ NV2jP1450OSlnwO3LIknf45yb4ASZiaNVl5B3yUdpT1NTHX7fqhyXvemM4ZaTYUp Js+m2kqzXT8Vou3yNDgq7W6t8zsdzh1GWk/kWFsHa6H99cJAaTUHWu4rwFVmEIPT 25tuavZ6dWzgLTIw0mNlszVj+hZW+eHZD8dV+Vltff5dvFNHPCmGXsVrDcxQD3AT MQv/fE+Yt/xl9QZAVGkgsBp6dIP4Iw59jQ== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:33 2025 by rpki-client