This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d41a7b-c30a-3be0-b4a9-44d4f3aedb84.roa File: d9d41a7b-c30a-3be0-b4a9-44d4f3aedb84.roa (raw, json) Hash identifier: d4VzwXy/tWzqSRDGXNK6zLXT97Q+5GzAioz8cAS5GLM= Subject key identifier: 0B:78:BB:B4:8D:CA:15:A8:9A:81:B1:31:86:1C:AC:79:EF:41:F5:08 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC1034DA6100346681A200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d41a7b-c30a-3be0-b4a9-44d4f3aedb84.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:9800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:10:34:da:61:00:34:66:81:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=4b489ec5-4770-4aac-839e-cc1c964a53db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:51:c3:0b:06:9b:55:e4:a8:d0:61:b6:1a: cf:85:ec:b7:fe:e1:de:2f:6d:a0:37:3c:18:de:c2: 4e:05:c1:1e:06:99:9d:5f:07:fe:06:ef:fb:2d:ed: f6:a0:38:3a:10:fa:11:ab:0a:26:84:1b:2f:5d:7e: 6c:b2:64:dd:e8:d5:bc:7c:69:f4:bd:13:f8:0e:fc: 6b:a2:7d:98:d9:85:2e:31:28:5c:74:af:f0:26:f8: da:37:1f:a4:a4:19:81:5d:63:dd:72:25:6f:a5:46: 6f:2f:c9:66:15:f9:7e:fe:af:fd:27:7d:c6:6b:52: b7:78:da:cd:b1:ba:08:34:21:ca:34:ea:52:15:66: f8:70:be:ce:fc:ea:ec:4d:17:00:68:42:bc:fe:61: 2f:f7:92:eb:8e:58:71:55:a7:28:a0:fb:c7:4d:8c: af:6b:25:72:fa:15:47:82:ef:84:57:d9:f2:c0:6b: e2:48:86:45:b9:99:c6:5e:20:be:34:61:e3:01:a6: ed:c7:b2:15:50:31:4a:ff:12:14:1e:ea:4b:9f:55: ee:4f:f1:f1:76:53:25:91:5b:c2:7e:82:11:23:ee: 7a:ef:de:6f:1a:8e:5d:13:aa:ac:ec:14:c7:73:d7: 1c:8b:60:1c:0d:02:a3:51:95:02:3f:8f:d2:cd:b8: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:78:BB:B4:8D:CA:15:A8:9A:81:B1:31:86:1C:AC:79:EF:41:F5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d41a7b-c30a-3be0-b4a9-44d4f3aedb84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:9800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bf:e3:f0:a0:e7:c1:d6:52:a1:28:05:a5:27:62:60:fd:69: 8d:73:53:9b:c4:67:ac:5f:be:1f:8b:16:0b:71:bd:7f:fe:77: 22:ab:1a:6a:f2:0f:90:74:ab:a2:ea:e0:7a:6d:bd:ef:6a:80: b7:44:40:81:93:41:15:d4:f4:85:ff:bc:f5:49:08:2b:50:51: a3:25:c6:85:f0:0c:93:5f:73:a0:75:57:55:e1:8c:3f:88:a2: ce:83:23:1e:b4:64:68:cd:3a:74:a7:1f:c8:8c:ba:67:45:5e: 92:f9:37:b6:1e:15:aa:6f:c0:b5:ea:1f:bd:9d:56:31:b1:bb: 2d:8d:6b:3c:26:ed:c4:d6:4e:60:2b:67:7a:76:8a:0b:9a:e9: 0b:e1:58:30:7d:60:45:27:d4:6a:7f:b0:b7:dd:68:e9:56:58: 2a:9f:eb:c1:ae:dd:5c:4d:4a:08:11:70:79:c0:01:de:1b:00: 35:55:3b:ae:c9:f4:42:cd:4f:8f:09:7f:2a:a2:29:0c:45:b8: 78:7e:8a:39:1e:3f:e3:23:9b:48:53:cc:4c:e6:56:fe:c9:51: 36:9b:53:5d:18:01:e6:e7:76:b0:6a:11:fe:fc:7b:f0:a1:eb: b2:f4:9c:6c:04:f0:71:c9:8b:cf:46:69:70:bb:a9:ed:73:fd: 61:a0:b8:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BA02mEANGaBogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NGI0ODllYzUtNDc3MC00YWFjLTgzOWUtY2MxYzk2NGE1M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptxRwwsGm1XkqNBhthrPhey3/uHeL22gNzwY 3sJOBcEeBpmdXwf+Bu/7Le32oDg6EPoRqwomhBsvXX5ssmTd6NW8fGn0vRP4Dvxr on2Y2YUuMShcdK/wJvjaNx+kpBmBXWPdciVvpUZvL8lmFfl+/q/9J33Ga1K3eNrN sboINCHKNOpSFWb4cL7O/OrsTRcAaEK8/mEv95LrjlhxVacooPvHTYyvayVy+hVH gu+EV9nywGviSIZFuZnGXiC+NGHjAabtx7IVUDFK/xIUHupLn1XuT/HxdlMlkVvC foIRI+56795vGo5dE6qs7BTHc9cci2AcDQKjUZUCP4/Szbh3aQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAt4u7SNyhWomoGxMYYcrHnvQfUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDlkNDFhN2ItYzMwYS0z YmUwLWI0YTktNDRkNGYzYWVkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuipgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW7/j8KDnwdZSoSgFpSdiYP1pjXNTm8RnrF++H4sWC3G9f/53Iqsa avIPkHSrourgem2972qAt0RAgZNBFdT0hf+89UkIK1BRoyXGhfAMk19zoHVXVeGM P4iizoMjHrRkaM06dKcfyIy6Z0Vekvk3th4Vqm/AteofvZ1WMbG7LY1rPCbtxNZO YCtnenaKC5rpC+FYMH1gRSfUan+wt91o6VZYKp/rwa7dXE1KCBFwecAB3hsANVU7 rsn0Qs1Pjwl/KqIpDEW4eH6KOR4/4yObSFPMTOZW/slRNptTXRgB5ud2sGoR/vx7 8KHrsvScbATwccmLz0ZpcLup7XP9YaC4aQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:35 2025 by rpki-client