This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa File: dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa (raw, json) Hash identifier: qh+clUYPGLAn/s3Q8aAhSm8KEYy1Wosczp8ANmQO2L0= Subject key identifier: BB:29:42:C1:E9:4E:39:4B:E6:4F:5A:63:D3:50:1A:86:4C:10:B1:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B10186E3164903FABD8140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:01:86:e3:16:49:03:fa:bd:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=2d47b644-377c-4347-9a1c-5c04c61bb8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:d8:fb:99:07:20:95:07:95:a4:f4:73:52: 08:42:2c:53:89:84:72:c3:ce:a8:77:8a:d5:20:94: 2e:05:35:bb:f2:64:ca:f5:e0:0c:34:b1:d6:ff:84: 6c:20:60:c6:7d:40:9b:a4:53:37:84:f2:9d:f3:6b: 95:af:88:80:0e:6f:a3:d7:c6:eb:40:97:f7:32:71: 8b:53:86:cf:fa:6c:f0:60:04:e6:c8:59:d5:2d:53: ef:bc:56:b4:0a:23:50:50:e9:48:e2:b6:f9:20:9e: be:91:12:fc:5d:55:32:6b:e5:e6:95:c0:ae:42:9f: e2:fe:61:c1:2c:82:7f:13:7e:19:f6:1e:ef:62:73: e5:f9:2c:a2:13:70:f5:c1:ee:81:d2:79:ac:18:c9: 3b:f4:c9:d5:e7:13:74:f5:da:93:b7:a2:2b:ec:42: 5e:1f:39:9d:34:34:20:41:4c:d1:be:83:09:80:89: aa:39:f4:94:45:36:2a:f6:89:4e:47:0a:6b:19:5f: 8f:a7:34:6c:6b:f4:82:f4:bd:64:0a:2a:10:94:a2: aa:43:1c:67:e4:16:6d:ef:bc:b0:23:c5:f6:24:1b: b7:ac:d0:22:59:36:d9:98:17:55:22:a7:7f:a1:39: 4e:69:c2:a6:0c:a7:07:61:30:e3:12:46:a1:13:23: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:42:C1:E9:4E:39:4B:E6:4F:5A:63:D3:50:1A:86:4C:10:B1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:cc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:64:71:92:8b:4a:9c:09:7c:85:95:9f:1d:6c:e6:65:95:86: 90:7c:9c:e1:26:80:bf:0f:8d:17:84:8f:15:d2:f5:2e:d6:3f: 38:e9:87:97:a8:76:1c:c4:c1:6f:b5:61:05:42:d0:c4:74:60: f4:01:4a:c7:a3:82:b7:11:da:62:7f:9c:21:b7:ec:dc:26:c9: e3:c3:2b:07:88:e8:0e:3e:ac:1c:bc:cc:16:79:84:1b:31:25: 3d:73:37:5f:bc:8b:aa:2a:5c:d6:46:24:df:dd:33:6b:29:19: 20:17:55:63:d2:de:7a:76:a4:b7:19:09:0a:88:29:20:83:44: 7e:e9:58:16:82:4b:d9:ff:5f:02:5d:d8:d2:d9:5c:aa:96:2e: 18:54:b6:1b:fe:41:19:70:7d:c5:10:4a:b7:f5:0e:aa:3f:de: 15:19:a8:d4:02:f2:a1:37:7c:96:3d:43:a7:40:5d:66:66:c9: 46:ae:ef:ca:f4:3f:f1:76:12:09:9f:16:e6:98:ea:a2:d3:18: 4e:56:02:38:12:b4:a4:67:5b:3e:be:46:8c:36:33:25:86:01: ef:80:37:9a:4b:61:75:f5:84:e6:cb:63:78:9e:ef:5a:08:ef: 05:98:c7:26:65:ad:d3:d6:c3:e5:c9:b4:90:47:2f:e6:03:b8: 45:38:bb:22 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sQGG4xZJA/q9gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MmQ0N2I2NDQtMzc3Yy00MzQ3LTlhMWMtNWMwNGM2MWJiOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxefY+5kHIJUHlaT0c1IIQixTiYRyw86od4rV IJQuBTW78mTK9eAMNLHW/4RsIGDGfUCbpFM3hPKd82uVr4iADm+j18brQJf3MnGL U4bP+mzwYATmyFnVLVPvvFa0CiNQUOlI4rb5IJ6+kRL8XVUya+XmlcCuQp/i/mHB LIJ/E34Z9h7vYnPl+SyiE3D1we6B0nmsGMk79MnV5xN09dqTt6Ir7EJeHzmdNDQg QUzRvoMJgImqOfSURTYq9olORwprGV+PpzRsa/SC9L1kCioQlKKqQxxn5BZt77yw I8X2JBu3rNAiWTbZmBdVIqd/oTlOacKmDKcHYTDjEkahEyPNrwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLspQsHpTjlL5k9aY9NQGoZMELG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGVjN2JjNTgtODg1OS0z YTVmLTllODctY2UxYjkxYWY5YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgmRxkotKnAl8hZWfHWzmZZWGkHyc4SaAvw+NF4SPFdL1LtY/OOmH l6h2HMTBb7VhBULQxHRg9AFKx6OCtxHaYn+cIbfs3CbJ48MrB4joDj6sHLzMFnmE GzElPXM3X7yLqipc1kYk390zaykZIBdVY9LeenaktxkJCogpIINEfulYFoJL2f9f Al3Y0tlcqpYuGFS2G/5BGXB9xRBKt/UOqj/eFRmo1ALyoTd8lj1Dp0BdZmbJRq7v yvQ/8XYSCZ8W5pjqotMYTlYCOBK0pGdbPr5GjDYzJYYB74A3mkthdfWE5stjeJ7v WgjvBZjHJmWt09bD5cm0kEcv5gO4RTi7Ig== -----END CERTIFICATE-----Generated at Sat Dec 20 13:57:03 2025 by rpki-client