This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
File: d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa (raw, json)
Hash identifier: 5a8IXI8qxUzTn7QjaBAffjRSxB5gh7egx7qlXlU6PZk=
Subject key identifier: F5:79:25:18:DF:56:0D:49:4F:A1:28:76:6A:8C:40:F3:E4:73:69:0B
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C45A846E9A1F2BF872033D9C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8e:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:46:e9:a1:f2:bf:87:20:33:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=ca8a2faf-c43c-45af-a02d-a2292c2d4450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:3b:54:8e:e2:54:f6:15:0d:29:57:59:e3:
bc:bf:60:d0:0f:35:f2:60:18:c9:56:92:00:f9:37:
9e:d0:89:f1:bb:59:06:c9:c7:5a:0f:31:0b:0d:71:
ab:c7:80:38:99:b2:7b:73:7c:42:d4:c9:b0:12:61:
99:b8:dc:02:0b:a1:74:56:e7:38:72:41:a4:8c:64:
24:27:6e:1f:cf:bc:37:16:7d:74:f1:93:b5:ac:23:
7e:d4:99:80:7e:80:0e:16:14:e2:bc:92:4b:8b:4a:
47:ec:20:40:5a:01:c2:3e:14:e7:ee:29:73:34:aa:
01:33:2a:4a:e2:f6:aa:ea:8b:72:8e:08:eb:88:1a:
ff:93:0d:f1:94:97:57:07:35:fd:21:24:49:c3:1e:
3d:a4:a1:f9:58:db:b9:70:51:6a:6b:d5:d1:5d:9a:
a3:2d:da:93:f3:8e:34:d8:31:27:ea:41:76:de:33:
a2:8a:74:19:90:91:d1:e1:4e:11:73:12:6e:72:93:
cf:ce:6b:6a:cb:d0:a5:b8:91:e1:fc:86:c9:56:2b:
30:84:71:46:45:84:9e:c8:17:19:be:42:f1:56:ce:
18:19:8c:08:43:e1:b8:15:4f:2e:d5:b0:88:bf:51:
05:f1:d3:a1:55:62:0d:6b:d0:22:83:bf:53:d1:c9:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:25:18:DF:56:0D:49:4F:A1:28:76:6A:8C:40:F3:E4:73:69:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:1800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:c1:7b:f2:d2:28:da:6c:bd:82:f9:1e:9b:e9:4c:f7:2b:fb:
35:6e:83:f9:92:b8:f1:08:0b:70:55:17:6b:34:bb:92:a1:e9:
3d:09:9b:96:ed:14:35:df:4c:f3:07:3a:3f:e1:39:43:ca:f6:
3e:e7:cb:d0:af:cf:11:eb:d4:3e:5b:41:27:4c:dc:79:49:64:
8b:74:55:9f:73:26:27:96:0e:8a:3f:fe:df:d0:87:de:84:aa:
1d:b3:dc:c3:1a:1c:7d:5c:10:bb:9c:da:d3:73:5b:75:30:ef:
98:df:a1:81:46:d0:a3:a4:c2:9b:66:20:e1:1b:64:d7:2e:92:
2e:be:cf:e3:d5:36:81:6e:98:55:2e:73:9f:c5:5d:d3:2c:fa:
e9:ff:f2:a9:0f:9e:ab:ef:7f:ad:1a:2c:0c:5b:f4:80:61:85:
45:33:1b:a7:7b:cb:a4:7b:66:54:7e:9c:21:4d:e8:af:c6:ec:
d5:6d:cb:11:5b:00:ba:9b:ad:7d:51:ad:7d:2e:10:92:c3:e7:
de:33:1e:9d:e9:59:d7:d4:61:1e:0f:24:04:73:fb:57:6b:9c:
d9:02:90:f2:18:02:bd:4a:0d:a4:6d:2b:63:60:3f:1b:b9:55:
61:59:18:31:59:a5:1c:37:bd:23:40:9b:fe:96:6f:c5:66:d6:
f2:53:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:32:49 2025 by rpki-client