This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa File: b668ad56-855d-3d8d-9d31-8f7298d49e29.roa (raw, json) Hash identifier: 300omHu+biR3U+aJQwnEaC/fO8JRT+XZ3hTIT5tII/w= Subject key identifier: 29:47:42:46:71:0F:A3:5A:82:36:B5:D7:2D:DA:2F:C2:37:B1:80:7C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6A0E6D775B0B97A61EEA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:a0:e6:d7:75:b0:b9:7a:61:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=95db44d3-bb35-41f2-be61-83606dcd098d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:e4:2a:e8:6d:49:b4:8a:80:b7:3f:19:b2: 45:5d:d6:73:48:9f:aa:fa:8d:44:f5:7d:30:42:11: 6f:14:c2:b6:25:73:34:eb:8f:19:44:e1:aa:29:86: ec:50:ae:86:2a:cd:e1:d2:54:db:64:9f:d5:bb:5a: ef:80:70:a7:66:02:9d:2e:0f:d3:3e:a5:51:23:87: 54:8d:7f:e4:99:6d:f6:ee:b7:52:e5:75:6f:45:98: 73:7a:87:ea:d1:4e:44:7a:80:d3:39:df:82:8a:28: 64:9b:51:63:16:0a:a5:1a:15:4e:c2:a4:94:90:e6: c4:3c:70:9b:0e:91:12:e8:37:65:40:4b:4d:34:c1: 31:40:31:14:92:bc:66:d5:9d:fd:a2:f0:30:f1:fe: 20:26:9c:19:f8:ab:1c:21:fa:03:a8:b0:dd:11:e6: ec:79:b1:96:3f:ec:d9:34:06:84:e1:39:79:32:62: 92:fb:6c:a9:21:ad:05:47:0f:4a:97:8d:5b:b8:f6: 95:bf:23:c5:ce:2f:4e:1d:3f:e0:d3:cc:30:16:c7: bc:d7:88:05:aa:88:16:d8:e2:24:dd:a0:31:2e:00: b1:c7:72:bf:26:33:6c:cc:83:71:cf:f2:51:cd:73: 71:d5:cf:4f:2b:23:c2:77:f2:ce:f0:a1:62:ba:9e: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:42:46:71:0F:A3:5A:82:36:B5:D7:2D:DA:2F:C2:37:B1:80:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:57:f1:2b:38:78:fc:13:6c:c6:1c:ff:c4:48:b2:7f:91:f8: bf:7b:ea:10:01:7e:88:f7:d3:87:4a:e6:39:54:fd:30:1d:99: 41:82:e4:f1:d2:7f:97:f7:a8:4c:7d:86:38:06:86:9b:00:0f: 11:c1:7a:f3:56:6e:b5:6b:61:54:32:60:18:56:5c:25:3e:86: a6:4b:9f:92:f3:4a:12:09:f3:0b:4e:20:b3:85:0e:f5:57:39: d4:7a:73:e6:ee:6f:59:62:78:69:fd:d4:26:c3:31:82:ad:60: 05:a6:70:03:08:81:22:3e:9b:4c:45:6d:5f:d8:00:62:24:0e: 17:09:ca:84:2c:f4:d8:c8:f5:7c:ce:37:66:95:b3:15:22:73: 12:6e:50:ef:9b:08:c9:66:e7:d6:64:34:58:f5:10:2d:5a:ff: 9d:18:2a:2e:c8:fc:f6:a8:ea:b0:bf:ac:42:94:86:95:8d:bc: 51:73:95:95:3a:27:3e:d1:64:3d:66:73:83:68:96:ed:69:a3: a5:93:45:33:06:5a:51:86:84:c9:34:28:c6:6d:1c:41:54:17: 49:55:10:84:ae:f9:79:31:6c:3f:7f:1b:12:3e:f3:0c:fd:31: e8:f0:6a:10:8f:4c:72:85:6c:6d:d7:dd:5b:26:72:4b:3c:9f: a9:8b:7f:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpqDm13WwuXph7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTVkYjQ0ZDMtYmIzNS00MWYyLWJlNjEtODM2MDZkY2QwOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSrkKuhtSbSKgLc/GbJFXdZzSJ+q+o1E9X0w QhFvFMK2JXM0648ZROGqKYbsUK6GKs3h0lTbZJ/Vu1rvgHCnZgKdLg/TPqVRI4dU jX/kmW327rdS5XVvRZhzeofq0U5EeoDTOd+Ciihkm1FjFgqlGhVOwqSUkObEPHCb DpES6DdlQEtNNMExQDEUkrxm1Z39ovAw8f4gJpwZ+KscIfoDqLDdEebsebGWP+zZ NAaE4Tl5MmKS+2ypIa0FRw9Kl41buPaVvyPFzi9OHT/g08wwFse814gFqogW2OIk 3aAxLgCxx3K/JjNszINxz/JRzXNx1c9PKyPCd/LO8KFiup7xZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFClHQkZxD6Nagja11y3aL8I3sYB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjY2OGFkNTYtODU1ZC0z ZDhkLTlkMzEtOGY3Mjk4ZDQ5ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk1fxKzh4/BNsxhz/xEiyf5H4v3vqEAF+iPfTh0rmOVT9MB2ZQYLk 8dJ/l/eoTH2GOAaGmwAPEcF681ZutWthVDJgGFZcJT6GpkufkvNKEgnzC04gs4UO 9Vc51Hpz5u5vWWJ4af3UJsMxgq1gBaZwAwiBIj6bTEVtX9gAYiQOFwnKhCz02Mj1 fM43ZpWzFSJzEm5Q75sIyWbn1mQ0WPUQLVr/nRgqLsj89qjqsL+sQpSGlY28UXOV lTonPtFkPWZzg2iW7WmjpZNFMwZaUYaEyTQoxm0cQVQXSVUQhK75eTFsP38bEj7z DP0x6PBqEI9McoVsbdfdWyZySzyfqYt/CA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:33 2025 by rpki-client