This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7299049-b367-3edf-af1e-9b05988ea1a0.roa File: c7299049-b367-3edf-af1e-9b05988ea1a0.roa (raw, json) Hash identifier: FN//sjqJo7a4EdMjFY66Zxzxy6sqCV3rA7u0Fb8C3uA= Subject key identifier: 9A:46:06:31:17:D6:DF:E9:90:BB:E3:AA:6E:0B:EB:C5:6E:95:54:A6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6A6BCE99775CFFE551200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7299049-b367-3edf-af1e-9b05988ea1a0.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:a6:bc:e9:97:75:cf:fe:55:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=238ad910-9f37-46fa-be71-e718df9ed107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:d2:6e:81:c8:63:fa:3f:90:9b:07:74:23: b5:bf:8d:18:77:51:3f:d0:0e:3e:0c:f4:5e:25:e7: f3:e4:f9:f4:30:71:62:c1:7e:3c:ba:c1:e0:fc:e5: 6e:8e:f5:6c:9f:bf:19:46:d1:80:a0:30:ef:71:08: 33:34:74:ea:c2:97:93:9b:2b:c1:80:70:18:41:54: 96:48:8b:7c:c0:30:02:45:c5:08:3f:3e:cc:de:2b: bd:c1:7d:50:f6:e4:9d:bc:fc:c5:a5:56:5b:fc:99: f7:9f:76:ef:94:38:9b:e7:b6:7d:be:28:de:9d:d3: 8e:15:d3:0d:f7:8e:51:46:07:3c:15:25:35:05:6d: a9:91:09:46:f9:73:18:8e:61:24:67:af:49:a5:6c: c7:a8:01:22:bc:e1:42:e6:c7:b3:c6:95:70:42:43: 14:db:a8:c2:11:c9:d4:3a:b9:ca:4d:5e:42:2e:28: d8:ed:1c:24:c0:cc:51:40:01:d8:3f:b7:e7:01:b9: c7:a1:48:88:b3:c7:6e:93:17:e2:ae:1e:74:4b:e0: 30:cd:15:f5:dc:37:19:a1:5a:f2:db:10:5d:1a:f6: 1c:b4:3d:da:ed:6d:38:9d:3b:38:99:71:11:18:e5: 62:b3:1e:75:59:be:30:51:93:21:94:0c:e3:08:85: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:46:06:31:17:D6:DF:E9:90:BB:E3:AA:6E:0B:EB:C5:6E:95:54:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7299049-b367-3edf-af1e-9b05988ea1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f6:b2:f7:8c:95:e8:c8:f8:17:b7:e3:85:17:34:b2:9e:d0: 20:37:51:6b:e6:19:2a:8e:8b:f9:67:2e:ea:4f:0f:04:48:6e: 68:58:dd:26:42:b0:96:4d:59:99:98:d4:99:83:30:3d:5b:51: 06:e5:5c:8e:28:b7:3d:87:99:f5:25:9c:40:c5:e5:a5:99:fb: 9f:33:a2:55:bd:3b:92:6a:2d:66:da:7c:93:a4:88:e9:3b:21: 5b:9a:6d:08:e2:d2:5d:7e:df:fd:49:8f:bb:2a:c0:2e:2e:cd: fe:d4:20:2f:12:fb:54:4b:a7:de:b6:ba:9b:26:ea:3d:d7:da: 60:a6:c0:33:ac:38:a3:18:d2:e9:0d:77:51:98:d6:b6:ff:63: 5b:98:53:89:0d:37:89:8a:11:f5:b9:1d:14:39:f3:28:b1:8b: 50:fd:96:0c:67:9e:76:65:f2:81:73:0c:40:7e:69:96:2d:f6: b8:00:a9:f3:61:c8:39:22:bb:9a:4c:3f:77:42:5b:2c:78:79: 72:94:5b:51:06:ef:bd:65:d3:12:9d:99:36:e4:20:2f:36:4e: a3:61:77:82:39:6b:0f:30:af:11:3c:66:ee:43:1b:57:41:f9: 17:a8:20:87:3b:84:f0:93:f6:d5:71:66:53:bc:53:1f:4b:bc: ae:2a:9e:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpqa86Zd1z/5VEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjM4YWQ5MTAtOWYzNy00NmZhLWJlNzEtZTcxOGRmOWVkMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPLSboHIY/o/kJsHdCO1v40Yd1E/0A4+DPRe Jefz5Pn0MHFiwX48usHg/OVujvVsn78ZRtGAoDDvcQgzNHTqwpeTmyvBgHAYQVSW SIt8wDACRcUIPz7M3iu9wX1Q9uSdvPzFpVZb/Jn3n3bvlDib57Z9vijendOOFdMN 945RRgc8FSU1BW2pkQlG+XMYjmEkZ69JpWzHqAEivOFC5sezxpVwQkMU26jCEcnU OrnKTV5CLijY7RwkwMxRQAHYP7fnAbnHoUiIs8dukxfirh50S+AwzRX13DcZoVry 2xBdGvYctD3a7W04nTs4mXERGOVisx51Wb4wUZMhlAzjCIWDxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJpGBjEX1t/pkLvjqm4L68VulVSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzcyOTkwNDktYjM2Ny0z ZWRmLWFmMWUtOWIwNTk4OGVhMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYPay94yV6Mj4F7fjhRc0sp7QIDdRa+YZKo6L+Wcu6k8PBEhuaFjd JkKwlk1ZmZjUmYMwPVtRBuVcjii3PYeZ9SWcQMXlpZn7nzOiVb07kmotZtp8k6SI 6TshW5ptCOLSXX7f/UmPuyrALi7N/tQgLxL7VEun3ra6mybqPdfaYKbAM6w4oxjS 6Q13UZjWtv9jW5hTiQ03iYoR9bkdFDnzKLGLUP2WDGeedmXygXMMQH5pli32uACp 82HIOSK7mkw/d0JbLHh5cpRbUQbvvWXTEp2ZNuQgLzZOo2F3gjlrDzCvETxm7kMb V0H5F6gghzuE8JP21XFmU7xTH0u8riqesw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:49:36 2025 by rpki-client