This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ecefe3-c0e0-3e95-97ab-4f7baa2eaa68.roa File: d6ecefe3-c0e0-3e95-97ab-4f7baa2eaa68.roa (raw, json) Hash identifier: 7OukXIYsnkNgGJH0NiTHL8yJCG5lFfjg3gPTUoEsqf4= Subject key identifier: E7:18:57:B9:6C:0D:8C:AF:C6:4C:8E:F5:19:75:8C:78:2A:08:73:0B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C285659664FF285C555ECAA00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ecefe3-c0e0-3e95-97ab-4f7baa2eaa68.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 30036 IP address blocks: 2604:2e8d:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:59:66:4f:f2:85:c5:55:ec:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=52fa0cd5-c72a-449a-985d-56ab241fdad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:69:ae:65:7c:19:ff:51:67:e2:10:1b:48: c7:11:05:09:45:54:91:2e:00:ca:1a:f7:84:b5:d8: 76:02:e5:32:df:d1:37:ef:ed:5c:a7:c9:c9:8d:44: 2e:52:b9:ad:c9:c8:e9:c6:58:9d:da:7b:58:0a:c9: 20:19:af:28:25:45:b7:6d:2e:30:f4:52:a3:1c:76: 9d:bd:dc:b8:8f:e8:ef:19:c7:6a:a4:9a:19:4e:5c: 0b:74:7a:54:b8:ee:74:b9:17:8f:bf:e0:de:c9:04: af:20:b7:a3:91:63:5f:36:fb:20:af:52:69:90:33: db:4f:16:5f:35:b8:09:e7:23:e5:91:cf:0c:a2:80: 5c:aa:11:cc:03:71:d3:57:9b:2b:87:c5:f6:d3:3e: b4:46:f2:34:31:f5:ce:d1:4d:63:9a:a3:88:16:47: 54:e1:59:ac:f5:05:89:d4:0b:7b:a9:9c:65:3e:f9: f8:40:e0:dc:5c:55:61:17:ab:9a:8f:ec:08:76:70: 83:9c:aa:be:83:d3:a4:ae:20:ab:8e:a7:88:5a:12: d7:1e:bb:c4:b1:56:41:a8:96:a3:33:f7:f6:7a:f5: 05:5c:fc:ef:46:af:28:86:4c:73:08:72:21:a6:2a: 0b:71:2a:4d:cf:82:75:05:ba:1e:fb:8c:3c:a5:c6: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:18:57:B9:6C:0D:8C:AF:C6:4C:8E:F5:19:75:8C:78:2A:08:73:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ecefe3-c0e0-3e95-97ab-4f7baa2eaa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c4:0e:3e:96:6c:f8:e5:b1:52:49:8d:35:f2:f4:d0:bf:b0: 94:b4:52:cf:55:a9:e2:e9:83:a6:53:2a:92:f2:26:29:9f:99: cd:f1:7e:69:10:2e:97:17:e6:c6:db:ca:b6:ba:9c:34:a9:cb: f3:66:f1:51:7a:c1:62:9e:ac:2d:e6:44:63:7b:3f:4f:e4:16: a3:83:fe:5b:bd:c2:d7:54:3c:d6:8d:5b:7d:69:cd:27:d2:92: af:45:44:a4:6c:94:8a:11:0c:8a:72:f4:bb:e2:39:27:70:a2: da:e5:29:92:5b:13:1b:62:97:43:46:62:8b:56:d2:76:4d:42: 2a:51:95:27:9a:6d:d6:5e:69:1b:f4:45:be:a9:49:98:ee:ab: 95:73:ae:d7:3c:95:5e:fb:a2:bc:1c:42:f4:29:61:fc:2c:83: 43:bf:c7:0b:d0:8f:9f:e7:b4:66:57:35:f6:31:e6:86:09:6c: 45:a3:52:c9:53:14:7a:18:2c:db:e9:c1:91:53:fa:50:91:fd: b9:04:d0:38:64:ff:0c:ab:ec:00:6d:35:39:a9:ad:d1:27:3b: e4:e0:97:36:fe:3d:b1:5b:58:e5:19:4b:92:4b:c8:75:29:73: 3d:d5:da:0b:66:00:6f:1d:11:8a:8b:7e:ea:5c:a4:10:ed:97: 0b:42:08:53 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwoVllmT/KFxVXsqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NTJmYTBjZDUtYzcyYS00NDlhLTk4NWQtNTZhYjI0MWZkYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cxprmV8Gf9RZ+IQG0jHEQUJRVSRLgDKGveE tdh2AuUy39E37+1cp8nJjUQuUrmtycjpxlid2ntYCskgGa8oJUW3bS4w9FKjHHad vdy4j+jvGcdqpJoZTlwLdHpUuO50uRePv+DeyQSvILejkWNfNvsgr1JpkDPbTxZf NbgJ5yPlkc8MooBcqhHMA3HTV5srh8X20z60RvI0MfXO0U1jmqOIFkdU4Vms9QWJ 1At7qZxlPvn4QODcXFVhF6uaj+wIdnCDnKq+g9OkriCrjqeIWhLXHrvEsVZBqJaj M/f2evUFXPzvRq8ohkxzCHIhpioLcSpNz4J1Bboe+4w8pcaJkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOcYV7lsDYyvxkyO9Rl1jHgqCHMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDZlY2VmZTMtYzBlMC0z ZTk1LTk3YWItNGY3YmFhMmVhYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujfww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmsQOPpZs+OWxUkmNNfL00L+wlLRSz1Wp4umDplMqkvImKZ+ZzfF+ aRAulxfmxtvKtrqcNKnL82bxUXrBYp6sLeZEY3s/T+QWo4P+W73C11Q81o1bfWnN J9KSr0VEpGyUihEMinL0u+I5J3Ci2uUpklsTG2KXQ0Zii1bSdk1CKlGVJ5pt1l5p G/RFvqlJmO6rlXOu1zyVXvuivBxC9Clh/CyDQ7/HC9CPn+e0Zlc19jHmhglsRaNS yVMUehgs2+nBkVP6UJH9uQTQOGT/DKvsAG01Oamt0Sc75OCXNv49sVtY5RlLkkvI dSlzPdXaC2YAbx0Riot+6lykEO2XC0IIUw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:06 2025 by rpki-client