This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c6afc654-c14a-32a2-a970-bffba74f9868.roa File: c6afc654-c14a-32a2-a970-bffba74f9868.roa (raw, json) Hash identifier: wvzvRHGeBIL6qSf9ldE/BI0o9QMM8niJdu7aVtCYr+Y= Subject key identifier: 4D:D3:BE:19:65:CD:AB:FA:74:B9:7B:EE:F2:E8:BC:3F:B6:C6:92:5D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C3BE1314533DE0516E389CB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c6afc654-c14a-32a2-a970-bffba74f9868.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2e8b:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:31:45:33:de:05:16:e3:89:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=91980f7c-3989-4b92-adde-7d96620740bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:11:ae:db:f9:fc:d7:51:b5:38:08:3c:18: 4f:00:8c:cb:23:2f:e3:55:33:36:10:ff:61:39:ff: a6:82:ed:f8:26:d7:d3:39:93:ca:81:1b:37:10:00: 10:be:44:0a:d2:d9:ff:97:0e:c8:44:fe:83:80:6b: ae:e9:3d:11:72:8d:2c:1d:40:fc:91:f7:a6:91:f9: 38:cc:95:11:b0:a2:8b:eb:7a:b3:dd:c9:40:2d:bf: 32:af:3b:bd:3d:fd:7b:9d:a6:3e:0e:e9:ce:be:4b: 61:d3:1c:d9:be:16:f2:d2:b7:5a:0a:bd:73:bd:76: 2c:fc:0a:3f:ee:41:65:6b:46:01:b8:1b:9c:2d:da: bf:59:76:5e:de:e9:a9:1a:9f:8b:91:a4:14:61:2a: 9e:8a:a8:76:46:05:93:26:70:31:9e:d4:ef:be:9d: 69:99:e4:4b:4d:9e:3d:22:35:7f:1d:5e:a0:eb:85: 2f:a1:f0:9c:42:a5:f7:eb:e0:af:d0:d5:d4:fc:b6: 16:b9:67:32:b7:13:29:eb:0c:40:89:ab:3b:39:c3: 82:ae:3e:21:fd:41:eb:ea:a8:ed:cd:6d:54:b0:b3: 7a:45:e9:8d:5a:3c:6b:3f:09:c1:1b:ce:92:56:1e: 2d:6a:0b:d6:43:2d:35:ef:4e:09:08:ee:2c:87:64: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:BE:19:65:CD:AB:FA:74:B9:7B:EE:F2:E8:BC:3F:B6:C6:92:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c6afc654-c14a-32a2-a970-bffba74f9868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e8:ce:20:0c:3f:e8:12:d5:c5:fa:64:96:84:d4:f5:6f:23: cf:1c:f9:89:65:bf:52:7f:7b:fe:de:2e:62:bc:9e:7c:e2:5d: be:ae:2f:92:43:d0:cd:84:89:49:d7:36:15:de:83:c3:1a:54: f6:2a:a4:5f:e3:e9:45:f7:f3:26:18:c5:5f:a7:bf:56:12:d4: 7c:d6:7b:23:8c:47:29:bb:ac:db:4f:d6:91:ee:83:18:4c:e8: 2d:f3:7b:69:ba:24:fe:5e:8e:d3:8f:a3:34:2f:ab:ab:19:ea: 81:d2:cf:52:18:60:5d:80:35:bb:af:50:e4:c0:97:68:84:7d: bc:aa:9f:cb:d0:1a:bc:36:0d:da:26:0a:4c:ca:70:a0:d0:9a: 18:97:3b:73:f1:8c:32:b7:29:ee:b0:41:ae:4f:a2:75:1d:ca: cf:f8:b7:a6:19:88:70:f8:99:27:86:2f:87:b7:29:3c:26:ab: 22:7f:1d:2c:d0:ed:41:a5:b1:12:4d:36:ea:1c:24:38:87:b6: a7:3e:0f:d1:25:29:3f:7f:df:54:a8:0c:91:82:ea:74:35:6f: 67:9f:9d:66:f8:bb:e6:08:aa:e2:3f:3c:f1:89:88:c0:47:0f: a0:51:75:c3:08:08:6a:9d:5c:ff:c1:9c:20:ff:06:23:5d:d6: e6:e0:ac:3a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw74TFFM94FFuOJy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk OTE5ODBmN2MtMzk4OS00YjkyLWFkZGUtN2Q5NjYyMDc0MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTsRrtv5/NdRtTgIPBhPAIzLIy/jVTM2EP9h Of+mgu34JtfTOZPKgRs3EAAQvkQK0tn/lw7IRP6DgGuu6T0Rco0sHUD8kfemkfk4 zJURsKKL63qz3clALb8yrzu9Pf17naY+DunOvkth0xzZvhby0rdaCr1zvXYs/Ao/ 7kFla0YBuBucLdq/WXZe3umpGp+LkaQUYSqeiqh2RgWTJnAxntTvvp1pmeRLTZ49 IjV/HV6g64UvofCcQqX36+Cv0NXU/LYWuWcytxMp6wxAias7OcOCrj4h/UHr6qjt zW1UsLN6RemNWjxrPwnBG86SVh4tagvWQy01704JCO4sh2SDvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE3Tvhllzav6dLl77vLovD+2xpJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzZhZmM2NTQtYzE0YS0z MmEyLWE5NzAtYmZmYmE3NGY5ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR+jOIAw/6BLVxfpkloTU9W8jzxz5iWW/Un97/t4uYryefOJdvq4v kkPQzYSJSdc2Fd6DwxpU9iqkX+PpRffzJhjFX6e/VhLUfNZ7I4xHKbus20/Wke6D GEzoLfN7abok/l6O04+jNC+rqxnqgdLPUhhgXYA1u69Q5MCXaIR9vKqfy9AavDYN 2iYKTMpwoNCaGJc7c/GMMrcp7rBBrk+idR3Kz/i3phmIcPiZJ4Yvh7cpPCarIn8d LNDtQaWxEk026hwkOIe2pz4P0SUpP3/fVKgMkYLqdDVvZ5+dZvi75giq4j888YmI wEcPoFF1wwgIap1c/8GcIP8GI13W5uCsOg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:31:05 2025 by rpki-client