This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad223b0-1e93-3472-8620-fe6121c6a02b.roa File: dad223b0-1e93-3472-8620-fe6121c6a02b.roa (raw, json) Hash identifier: j+wqx3C5zEGA7gzmPTY8A9LT1bwHgR1JkATDHDBdSjs= Subject key identifier: C3:9A:81:3C:39:2E:03:FF:E0:D6:57:67:9D:80:9A:C6:2C:17:0E:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C26F0F2E9959497AD4E286B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad223b0-1e93-3472-8620-fe6121c6a02b.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e8d:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f2:e9:95:94:97:ad:4e:28:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=882c45a6-7a5e-48b7-b148-8d9dc1d239ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:3b:a7:04:2c:8f:34:71:99:03:08:87:15: 71:ef:ef:e0:bc:b7:88:2d:11:7e:53:e4:7f:a4:de: fe:59:d6:5d:24:6d:b8:38:5c:30:b6:37:fd:28:aa: 03:b8:92:03:19:99:23:f3:41:25:3b:33:dc:f9:97: d4:d9:f0:60:3a:a9:d8:38:fa:dc:c0:55:59:39:f8: c0:25:05:b9:4f:81:18:bc:35:83:f7:92:a5:bd:33: 3a:9c:35:be:b8:a8:ee:f3:4e:ff:48:11:c8:c3:84: 4c:26:cd:5b:e3:62:ed:82:3e:cc:43:6f:8a:d1:e4: b0:47:eb:55:38:39:ab:6f:84:b6:2a:34:4e:f1:27: 2c:02:5d:12:9f:86:f9:a9:9c:49:a8:90:7b:35:21: 37:16:fa:cc:86:f4:e3:86:79:bb:4e:ba:c2:a9:f6: 0c:41:ff:d8:67:ef:a0:35:5d:62:a9:3c:3f:03:e5: 66:c3:0a:62:78:50:8d:b3:53:7f:0a:5d:66:a5:69: 12:f2:65:92:91:d8:d4:8f:95:fb:e1:71:3b:d6:47: 67:70:96:63:b4:e3:3a:ce:5f:aa:21:22:ce:54:a6: 66:30:48:52:30:88:a2:0a:06:80:fc:a4:db:b9:27: c8:5c:e5:54:51:22:39:7f:7e:89:ac:07:85:20:fd: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9A:81:3C:39:2E:03:FF:E0:D6:57:67:9D:80:9A:C6:2C:17:0E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad223b0-1e93-3472-8620-fe6121c6a02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ba:55:bb:e3:85:a8:6f:a7:fb:33:ce:14:77:81:e8:8d:d7: ca:72:c5:58:99:df:d5:ad:f7:4f:19:40:8c:ef:46:36:dc:7e: e5:b6:83:10:07:36:05:b1:0b:2b:f2:11:0e:f4:bd:5c:e3:40: 82:f6:a0:48:f1:ad:98:56:42:60:2b:02:9a:1f:95:ac:14:24: 48:91:19:85:ff:92:27:39:01:24:fd:5e:18:74:f7:84:24:0f: 04:b2:f1:69:5a:ac:ed:d4:15:32:ee:aa:18:ca:26:67:fe:13: bb:b1:d3:54:52:8a:10:0e:91:d6:67:04:67:b9:31:06:f9:a2: bf:2b:41:02:eb:f7:2d:10:7e:db:5c:e2:0e:5f:88:9e:ff:04: cf:ee:93:aa:8a:6d:a2:02:b9:de:2b:67:da:c9:88:df:54:4e: 59:f6:e9:f7:79:6a:11:90:54:3a:78:49:8f:54:5e:71:22:6c: 34:28:51:76:23:d3:91:b1:df:ea:93:7c:cd:84:d5:30:5e:2f: be:dc:34:ca:4a:3e:44:e6:d7:3e:42:1e:57:ab:89:6f:79:64: 70:d2:e6:10:37:74:82:af:80:68:6d:c6:c9:4f:d0:35:5f:83: ed:05:65:fb:08:a7:83:df:d5:49:4f:1d:5c:d1:f4:56:90:8f: f3:15:99:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwm8PLplZSXrU4oawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ODgyYzQ1YTYtN2E1ZS00OGI3LWIxNDgtOGQ5ZGMxZDIzOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzU7pwQsjzRxmQMIhxVx7+/gvLeILRF+U+R/ pN7+WdZdJG24OFwwtjf9KKoDuJIDGZkj80ElOzPc+ZfU2fBgOqnYOPrcwFVZOfjA JQW5T4EYvDWD95KlvTM6nDW+uKju807/SBHIw4RMJs1b42Ltgj7MQ2+K0eSwR+tV ODmrb4S2KjRO8ScsAl0Sn4b5qZxJqJB7NSE3FvrMhvTjhnm7TrrCqfYMQf/YZ++g NV1iqTw/A+VmwwpieFCNs1N/Cl1mpWkS8mWSkdjUj5X74XE71kdncJZjtOM6zl+q ISLOVKZmMEhSMIiiCgaA/KTbuSfIXOVUUSI5f36JrAeFIP0hpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMOagTw5LgP/4NZXZ52AmsYsFw7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGFkMjIzYjAtMWU5My0z NDcyLTg2MjAtZmU2MTIxYzZhMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujSww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYLpVu+OFqG+n+zPOFHeB6I3XynLFWJnf1a33TxlAjO9GNtx+5baD EAc2BbELK/IRDvS9XONAgvagSPGtmFZCYCsCmh+VrBQkSJEZhf+SJzkBJP1eGHT3 hCQPBLLxaVqs7dQVMu6qGMomZ/4Tu7HTVFKKEA6R1mcEZ7kxBvmivytBAuv3LRB+ 21ziDl+Inv8Ez+6TqoptogK53itn2smI31ROWfbp93lqEZBUOnhJj1RecSJsNChR diPTkbHf6pN8zYTVMF4vvtw0yko+RObXPkIeV6uJb3lkcNLmEDd0gq+AaG3GyU/Q NV+D7QVl+wing9/VSU8dXNH0VpCP8xWZ1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:34:37 2025 by rpki-client