This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa File: cd4bfe42-e547-395e-a177-c3a90f9b7116.roa (raw, json) Hash identifier: YLHzcleYGqJ12S8rjprtVWBDby1twFZ/I8P6R8MSLaQ= Subject key identifier: 69:B6:19:DF:1E:F4:ED:0B:0A:DC:E0:9E:28:6E:4E:B0:0E:53:D0:92 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBE2E608395FA96F734400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8b:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e2:e6:08:39:5f:a9:6f:73:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=0da40405-081d-49e6-a240-ea61d7c3ca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:84:56:42:f4:6b:8c:1b:ec:d2:70:09:94: fa:c8:24:a4:ed:05:da:4f:5f:31:dc:52:ae:14:56: 31:29:64:12:11:1d:2f:31:fb:4e:f9:34:fa:0a:96: 3d:52:87:85:5a:7c:12:ad:28:fa:bc:19:ca:0d:ee: 58:4c:5d:c0:e4:69:55:74:1e:a1:56:4b:a9:bf:46: 3e:5d:65:e9:2e:67:54:a6:a1:ee:c4:c0:d4:c5:ce: 7f:77:0d:c1:64:72:d2:d3:ae:ba:9e:b8:bf:c4:43: 91:b1:27:81:f0:67:f5:a4:ab:fd:11:04:82:65:f6: 77:1c:03:7d:2a:91:55:8e:68:0b:ff:0c:7f:fb:63: 0d:98:fd:a0:45:f2:3b:89:6b:9e:21:11:6b:5f:a5: 47:5e:14:c7:d7:33:09:60:aa:db:d6:bd:4c:eb:36: 01:c3:8f:0b:31:7d:97:29:4c:4e:df:bd:54:5e:59: e8:b9:c3:b6:d8:da:84:31:28:4a:53:ce:be:33:46: 38:bd:dd:d2:aa:c1:73:12:21:54:bb:45:71:39:6a: db:2e:0d:4f:08:88:97:7c:c2:d9:f0:90:46:2a:99: 73:c1:d8:84:f2:e5:ad:28:c4:84:99:a4:f9:ea:bb: 47:00:46:7c:66:5d:da:ed:8a:02:f4:53:cf:12:30: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:19:DF:1E:F4:ED:0B:0A:DC:E0:9E:28:6E:4E:B0:0E:53:D0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ca:6d:86:9e:4f:06:6b:91:a6:ad:f9:2d:6f:f5:25:e7:39: 98:76:8b:03:48:6d:44:b8:de:6d:dc:b2:0d:88:b9:0e:bf:8c: 3f:5d:ef:f5:e5:c0:87:49:f1:7d:10:e4:61:71:9a:ce:38:08: 18:cb:7f:91:7c:0a:64:76:7b:51:ba:4e:71:eb:81:a4:6e:da: 56:b9:4b:15:8c:24:05:c7:76:6c:90:b5:62:db:40:4c:25:c9: 52:0a:26:e0:23:69:66:4a:58:e7:ed:04:4f:8e:a0:cb:e1:97: 60:b5:23:fd:e2:4a:a6:8c:c3:e5:5e:da:78:0f:73:04:9c:43: c5:ec:1f:8e:43:76:55:58:3f:c3:87:19:a5:36:df:4b:74:cf: 76:b3:93:e2:94:77:9c:37:84:99:1d:f2:5b:bb:f4:3b:05:db: 5e:da:10:4f:a2:4d:15:44:6d:8c:fa:4a:1c:43:0b:f2:7f:22: 22:c4:c2:f6:e6:ab:38:df:92:9f:75:6c:a1:13:3f:77:8a:3b: b1:86:9a:19:30:9e:1e:09:7b:75:66:76:60:bd:60:af:cc:90: 47:fc:a5:05:0f:50:1d:e9:38:99:9b:1f:57:4f:95:32:57:8e: e4:d5:88:ba:ec:0a:54:59:62:39:e4:8d:64:bc:9f:fc:40:36: c4:38:f3:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2+LmCDlfqW9zRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MGRhNDA0MDUtMDgxZC00OWU2LWEyNDAtZWE2MWQ3YzNjYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWWEVkL0a4wb7NJwCZT6yCSk7QXaT18x3FKu FFYxKWQSER0vMftO+TT6CpY9UoeFWnwSrSj6vBnKDe5YTF3A5GlVdB6hVkupv0Y+ XWXpLmdUpqHuxMDUxc5/dw3BZHLS0666nri/xEORsSeB8Gf1pKv9EQSCZfZ3HAN9 KpFVjmgL/wx/+2MNmP2gRfI7iWueIRFrX6VHXhTH1zMJYKrb1r1M6zYBw48LMX2X KUxO371UXlnoucO22NqEMShKU86+M0Y4vd3SqsFzEiFUu0VxOWrbLg1PCIiXfMLZ 8JBGKplzwdiE8uWtKMSEmaT56rtHAEZ8Zl3a7YoC9FPPEjCQJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGm2Gd8e9O0LCtzgnihuTrAOU9CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Q0YmZlNDItZTU0Ny0z OTVlLWExNzctYzNhOTBmOWI3MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui/Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcMpthp5PBmuRpq35LW/1Jec5mHaLA0htRLjebdyyDYi5Dr+MP13v 9eXAh0nxfRDkYXGazjgIGMt/kXwKZHZ7UbpOceuBpG7aVrlLFYwkBcd2bJC1YttA TCXJUgom4CNpZkpY5+0ET46gy+GXYLUj/eJKpozD5V7aeA9zBJxDxewfjkN2VVg/ w4cZpTbfS3TPdrOT4pR3nDeEmR3yW7v0OwXbXtoQT6JNFURtjPpKHEML8n8iIsTC 9uarON+Sn3VsoRM/d4o7sYaaGTCeHgl7dWZ2YL1gr8yQR/ylBQ9QHek4mZsfV0+V MleO5NWIuuwKVFliOeSNZLyf/EA2xDjzIQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:53 2025 by rpki-client