This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cef59ffa-da7b-3a8c-b974-f42d2649bdbe.roa File: cef59ffa-da7b-3a8c-b974-f42d2649bdbe.roa (raw, json) Hash identifier: qD/G6kzvFLy9vSR0IAR425Gfci0TiguPqjWxgsvq6+0= Subject key identifier: 8C:D0:B5:A8:91:35:C1:8D:79:D1:77:B4:E6:99:62:F1:9A:96:76:78 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C3BE127B2E8E7FDE764A1AB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cef59ffa-da7b-3a8c-b974-f42d2649bdbe.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8d:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:27:b2:e8:e7:fd:e7:64:a1:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=f5052dba-50c5-4b42-a44b-2e237e21ddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:fb:45:44:15:71:47:a1:8b:ff:9f:76:a9: 89:48:0a:26:fa:0b:36:3a:a2:4a:9e:94:39:5e:ec: 3d:58:66:ae:ed:ff:fb:34:d5:66:b2:46:53:48:1d: 5d:00:9f:9c:19:ba:28:c7:97:05:93:b5:5a:8f:26: 2d:5d:f1:77:4d:ea:58:7f:6f:34:14:a1:d5:66:73: 60:a0:3e:44:9b:af:cc:c2:33:6e:16:f7:42:12:f5: c5:84:d9:40:60:80:84:e1:96:9a:41:aa:b0:60:df: 64:1c:2f:f6:87:90:27:4e:24:7f:18:50:e7:93:dd: cc:f6:cf:cd:45:b2:23:9b:70:39:98:6d:0c:4a:3e: 09:14:83:44:af:1e:04:ea:89:33:04:f7:c8:42:9f: fa:3c:6c:cc:c9:75:28:31:84:b2:82:6d:4b:26:f5: 1a:72:bf:1d:3c:d9:58:0c:b8:d5:d6:75:96:9a:32: cc:ca:ae:8c:2e:56:3b:c4:90:86:9e:4d:43:52:c2: 70:c7:76:27:a0:dc:11:e2:d4:a8:91:ac:f8:d8:c0: 31:17:fd:b3:fb:ec:5f:76:92:76:b7:0b:5f:eb:ee: 44:7b:ea:bb:8f:68:17:9a:05:4c:ad:2a:2b:0e:7b: d3:60:b8:33:5a:51:f0:4e:44:aa:d4:c3:2c:5a:9e: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:B5:A8:91:35:C1:8D:79:D1:77:B4:E6:99:62:F1:9A:96:76:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cef59ffa-da7b-3a8c-b974-f42d2649bdbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b4:75:f2:88:f7:b7:30:42:71:ae:63:33:d4:a7:35:14:38: 3c:2d:38:ed:66:a9:d2:da:ac:06:03:73:fb:76:c1:5b:a8:ee: d9:55:37:05:e5:b8:fc:d7:44:1d:bc:46:66:d0:5e:09:c9:32: 53:d0:ba:33:76:c0:9b:19:86:b5:30:4d:1b:3f:47:4a:fb:74: 33:4c:e1:9e:c3:be:82:30:6e:be:51:e1:64:ee:6c:7d:57:83: c3:6a:83:ac:7e:fc:35:d6:39:f9:24:ab:2a:2f:de:67:44:98: a7:9f:10:6b:dd:c7:bd:39:06:e8:33:e8:b0:66:48:81:01:0d: dd:3b:19:b7:a4:d5:69:aa:31:0c:da:99:43:ec:dd:21:2c:c2: a9:70:fa:f1:89:5b:11:56:87:32:50:ae:04:07:ad:e0:3e:0e: dc:3f:d3:2e:ad:69:0c:3f:95:8b:3b:0b:56:ea:cd:b3:21:60: 2a:f1:8a:50:d4:dc:22:c1:01:83:d3:65:b3:0f:29:84:4e:7a: d1:32:cc:9a:a8:85:81:5b:c0:86:68:10:22:9f:ce:c9:cd:71: d4:14:53:e4:36:5f:3f:51:86:dd:37:a8:71:c3:40:22:ae:3b: 01:50:f1:ec:5d:ae:15:74:ba:8e:a5:78:a7:92:ba:67:b5:dd: 7b:9a:01:68 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw74Sey6Of952ShqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZjUwNTJkYmEtNTBjNS00YjQyLWE0NGItMmUyMzdlMjFkZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE/7RUQVcUehi/+fdqmJSAom+gs2OqJKnpQ5 Xuw9WGau7f/7NNVmskZTSB1dAJ+cGboox5cFk7VajyYtXfF3TepYf280FKHVZnNg oD5Em6/MwjNuFvdCEvXFhNlAYICE4ZaaQaqwYN9kHC/2h5AnTiR/GFDnk93M9s/N RbIjm3A5mG0MSj4JFINErx4E6okzBPfIQp/6PGzMyXUoMYSygm1LJvUacr8dPNlY DLjV1nWWmjLMyq6MLlY7xJCGnk1DUsJwx3YnoNwR4tSokaz42MAxF/2z++xfdpJ2 twtf6+5Ee+q7j2gXmgVMrSorDnvTYLgzWlHwTkSq1MMsWp41OwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIzQtaiRNcGNedF3tOaZYvGalnZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2VmNTlmZmEtZGE3Yi0z YThjLWI5NzQtZjQyZDI2NDliZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiLR18oj3tzBCca5jM9SnNRQ4PC047Wap0tqsBgNz+3bBW6ju2VU3 BeW4/NdEHbxGZtBeCckyU9C6M3bAmxmGtTBNGz9HSvt0M0zhnsO+gjBuvlHhZO5s fVeDw2qDrH78NdY5+SSrKi/eZ0SYp58Qa93HvTkG6DPosGZIgQEN3TsZt6TVaaox DNqZQ+zdISzCqXD68YlbEVaHMlCuBAet4D4O3D/TLq1pDD+VizsLVurNsyFgKvGK UNTcIsEBg9Nlsw8phE560TLMmqiFgVvAhmgQIp/Oyc1x1BRT5DZfP1GG3TeoccNA Iq47AVDx7F2uFXS6jqV4p5K6Z7Xde5oBaA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:32 2025 by rpki-client