This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa
File: d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa (raw, json)
Hash identifier: 8oC5lIvwSeS3gBxuOTaTrnu05ZZi/Dzsy77hpQzNF6Q=
Subject key identifier: 57:2B:9E:7A:36:3A:0E:5A:15:CB:2E:62:5A:28:B5:3A:B8:5C:EE:85
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C41764F7AFFE251ACF01AC0C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 2604:2e87::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:4f:7a:ff:e2:51:ac:f0:1a:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=95daabb2-5b17-493d-8974-60bb2f9ec6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:87:82:23:e7:52:e7:6d:56:8c:16:59:af:
ec:30:10:4f:c2:96:6a:90:48:b1:ff:7e:29:68:f5:
4e:6b:2b:fb:2a:c1:27:61:9f:f2:81:81:6d:1e:ba:
59:6d:fe:0c:af:7d:8d:b5:06:63:41:49:44:3b:1b:
1c:ed:97:11:b3:e5:dc:b0:48:cd:f1:14:4e:e6:25:
9f:c8:80:97:c6:e1:9d:a4:6a:19:79:2b:56:fd:7e:
7b:62:e8:47:1a:b5:7b:6b:08:a9:75:03:2f:b7:a0:
6f:3e:28:b6:75:4f:aa:66:1b:61:95:0b:d7:c2:e3:
22:c0:41:6e:4e:b2:12:d8:3c:63:0a:e5:e7:c1:83:
5f:a2:72:33:b8:03:27:e9:04:ef:1c:de:f0:16:43:
31:a6:2d:95:b0:9d:44:62:87:58:80:75:21:3e:08:
80:53:63:3c:89:61:5b:f4:06:b3:3d:c3:3c:2c:8d:
07:57:e5:cb:b2:d4:70:35:56:6d:09:09:f4:3a:81:
a6:59:0f:2d:63:07:20:85:8f:46:e9:97:42:79:52:
88:7e:ed:7c:cf:94:58:4e:af:77:12:d0:5f:26:07:
24:6e:1d:18:e9:01:b5:b5:e8:46:3f:9f:89:58:be:
8c:46:41:e3:c7:64:02:30:53:18:3e:d1:55:66:4d:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:9E:7A:36:3A:0E:5A:15:CB:2E:62:5A:28:B5:3A:B8:5C:EE:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:9a:91:09:16:ad:3f:9a:66:b6:ff:6d:d2:6e:3d:ef:66:93:
91:fa:3b:a3:b1:c5:83:aa:80:ce:68:97:b0:d4:18:57:df:ac:
85:41:23:08:c6:76:b0:27:22:3d:bc:fe:6b:78:17:60:4a:c1:
c0:ae:f0:84:dd:07:e0:29:21:44:cf:a8:c9:fa:14:e6:21:3d:
cc:ea:f8:9f:0c:2e:1a:d3:2b:d6:2f:f9:cf:b5:98:9e:89:88:
05:44:27:e4:b8:b3:18:1b:a9:ec:92:2b:e4:a9:18:57:6a:ad:
b6:2d:b4:c8:71:86:8f:d6:e6:e8:2d:11:eb:42:8f:ee:af:fc:
2a:5d:5e:52:41:e8:ba:41:ff:85:5b:65:a4:9f:4f:2e:91:6b:
ae:7d:01:de:7a:34:bc:3d:7c:59:f4:c5:bb:d1:e2:52:48:7e:
82:f9:19:fa:2b:46:b7:93:97:bf:02:08:89:55:a3:4a:ae:9e:
e8:be:6b:5b:fa:51:f5:81:4d:3f:15:e9:1b:61:ad:97:7d:b0:
d8:84:a8:bb:be:67:da:78:6b:fc:06:96:05:45:9a:79:b0:cf:
ec:52:76:0a:30:50:2a:e7:5d:a6:06:84:f0:2a:05:7c:22:d3:
4a:fa:c8:6b:6e:3c:48:99:55:af:14:a7:1f:43:25:74:1b:b6:
b7:6d:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:32:48 2025 by rpki-client