This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa File: c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa (raw, json) Hash identifier: k+YXlBemftqZBtrhFSHg8f0ohqRetBexdIWJayN5VVs= Subject key identifier: 8D:EC:70:9B:C5:E2:7D:59:B9:DF:79:07:DC:59:15:CF:07:48:DD:51 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B0FF0D2B172B923B79BA60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b0:ff:0d:2b:17:2b:92:3b:79:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=7091b7bc-a151-49c9-b983-55f73af4ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:ab:bb:53:32:c2:9f:86:74:7a:24:48:ff: 4f:f7:a2:8b:03:15:c3:5c:de:38:0b:81:eb:7d:86: 47:a5:1f:23:4d:ae:34:42:62:af:13:02:2d:97:98: 7f:b7:e0:7b:12:1b:2b:0a:e9:73:61:d0:d3:db:8e: 30:da:e4:3e:73:52:e4:7e:2e:78:66:95:60:a9:2d: 93:51:4e:94:53:c6:87:ee:7d:c5:67:d2:f3:f7:7a: cd:b7:c1:51:79:f4:8a:54:28:f4:7e:de:29:9e:51: 06:6b:6c:ab:53:8d:a8:48:e7:59:76:94:aa:31:db: 73:c1:71:ac:b8:36:ec:6e:2a:dd:da:a8:a6:77:94: 10:db:29:a7:43:73:67:f0:63:7f:ef:4c:51:89:79: 1b:44:6f:38:fc:cd:1e:8c:f3:30:50:e1:0f:e4:9e: a9:ed:78:74:e8:cb:e4:45:90:c3:28:ac:75:33:c7: 39:c5:38:92:e7:f4:8b:ef:57:2a:7a:1a:5f:29:0a: 40:ba:e0:48:37:54:73:c6:0f:c5:a1:6c:60:a9:30: 08:3c:22:08:4a:af:9f:85:3e:cd:7b:8b:e1:0e:db: a0:ad:44:75:1c:02:d3:74:17:b7:ad:8b:5e:52:80: 78:75:c3:dd:3c:14:70:72:70:30:be:98:5e:94:b6: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EC:70:9B:C5:E2:7D:59:B9:DF:79:07:DC:59:15:CF:07:48:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:89:e5:7f:db:55:14:c3:4b:88:5a:61:3e:de:fc:5a:de:89: db:15:cd:89:b7:94:46:b4:a8:f6:ff:43:57:10:ba:35:bc:e9: bb:1c:0b:2d:1a:7e:31:46:91:8b:3c:62:d0:b1:ee:45:e0:06: 9d:fb:17:d5:19:09:d4:2a:6a:bf:89:85:fe:ef:71:7f:4f:24: 3c:ce:e1:f2:91:56:cd:1e:78:29:26:df:41:6e:65:8c:9d:2e: 02:c4:b7:82:c2:de:33:fc:8c:44:e5:94:cd:95:a2:28:c3:3d: 3f:d0:52:ef:0f:38:45:e4:ca:60:16:db:38:69:74:5a:f7:97: 60:8a:0c:c3:73:06:28:db:37:21:c1:8b:47:d2:f6:96:ad:be: 63:4b:9d:da:bf:59:2d:45:2b:c8:52:ad:6a:94:f6:1e:18:c8: 0e:30:99:af:e3:cf:76:8b:7b:81:c0:35:45:46:2b:eb:be:8a: fe:fe:62:68:76:fc:fc:43:ff:a2:a3:4f:70:ba:30:be:37:0e: f6:76:1c:47:2c:00:f5:59:53:e4:c6:b8:2e:cd:20:9e:af:ef: 19:53:e0:a3:0c:dc:40:91:40:c5:85:20:44:52:9d:c1:8f:be: af:3e:26:d0:ab:a7:2d:1b:8d:c8:ed:42:5f:3c:09:c9:9b:08: 2e:16:83:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sP8NKxcrkjt5umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk NzA5MWI3YmMtYTE1MS00OWM5LWI5ODMtNTVmNzNhZjRlZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr2ru1Mywp+GdHokSP9P96KLAxXDXN44C4Hr fYZHpR8jTa40QmKvEwItl5h/t+B7EhsrCulzYdDT244w2uQ+c1Lkfi54ZpVgqS2T UU6UU8aH7n3FZ9Lz93rNt8FRefSKVCj0ft4pnlEGa2yrU42oSOdZdpSqMdtzwXGs uDbsbird2qimd5QQ2ymnQ3Nn8GN/70xRiXkbRG84/M0ejPMwUOEP5J6p7Xh06Mvk RZDDKKx1M8c5xTiS5/SL71cqehpfKQpAuuBIN1Rzxg/FoWxgqTAIPCIISq+fhT7N e4vhDtugrUR1HALTdBe3rYteUoB4dcPdPBRwcnAwvphelLYitQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI3scJvF4n1Zud95B9xZFc8HSN1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzJmMzVmNGEtMmExOC0z OGFkLTk5YTItYjIxYzRhNDUxZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujaQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAInlf9tVFMNLiFphPt78Wt6J2xXNibeURrSo9v9DVxC6NbzpuxwL LRp+MUaRizxi0LHuReAGnfsX1RkJ1Cpqv4mF/u9xf08kPM7h8pFWzR54KSbfQW5l jJ0uAsS3gsLeM/yMROWUzZWiKMM9P9BS7w84ReTKYBbbOGl0WveXYIoMw3MGKNs3 IcGLR9L2lq2+Y0ud2r9ZLUUryFKtapT2HhjIDjCZr+PPdot7gcA1RUYr676K/v5i aHb8/EP/oqNPcLowvjcO9nYcRywA9VlT5Ma4Ls0gnq/vGVPgowzcQJFAxYUgRFKd wY++rz4m0KunLRuNyO1CXzwJyZsILhaDHA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:17 2025 by rpki-client