This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa File: eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa (raw, json) Hash identifier: hGRXFHP/dOq00NKvF01+Y/oSnh0aD/FhuI2z1bmNDaM= Subject key identifier: F4:69:B6:DA:56:47:65:47:8B:51:18:42:DF:70:93:E7:21:07:A7:B4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A672C5C0EB625F84270F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:72:c5:c0:eb:62:5f:84:27:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=38819401-d686-4e6a-8aad-2549e723151b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:c2:d8:a8:37:5f:91:73:0b:fb:30:96:9c: c3:0b:5b:40:3b:89:38:7e:9f:57:ed:65:cf:f0:94: c1:db:20:ac:e5:9d:a4:d0:70:40:36:11:2d:77:c2: be:6e:7b:bc:45:5d:63:78:c4:46:f4:1a:75:dc:ad: 96:5e:8b:24:7b:b8:34:a6:66:16:65:1a:4f:13:ea: 6b:a2:43:ee:4b:c5:18:a1:62:75:43:60:8e:2e:44: 96:f8:cf:c0:3e:65:8d:10:7e:5e:68:5d:2a:fd:b8: f2:d6:f9:16:d5:a8:27:00:b3:30:85:65:15:de:e2: 0e:e9:75:9d:7e:52:f0:fe:96:e9:86:1d:01:36:08: cf:4e:9a:6a:85:71:8d:4e:27:9d:8f:fb:a8:45:10: d7:cc:53:8e:91:38:57:04:9e:10:ca:71:32:21:1d: 1e:a2:df:b5:fb:ae:27:e3:fe:09:4c:d6:10:cb:9e: 09:e7:43:fe:fd:7a:20:f2:a5:91:fc:55:37:54:77: 2c:d4:db:3a:6d:50:f2:ca:68:aa:87:c4:c4:9c:27: 9a:8a:40:52:d6:c9:b2:70:bb:ea:a5:b0:f2:bc:47: a9:e6:51:d4:f2:55:f3:3e:1f:c5:27:f6:33:1c:38: 26:f0:a3:71:ba:0e:65:1b:60:4b:b7:b6:f6:3f:3d: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:69:B6:DA:56:47:65:47:8B:51:18:42:DF:70:93:E7:21:07:A7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:44:1b:7e:b7:1a:2e:f7:1f:05:55:47:f7:83:bc:82:44:e8: 68:9d:7c:55:22:a9:c0:ef:ea:79:7a:34:1d:b7:78:38:c0:1c: ab:2e:7c:ba:79:ef:67:c7:42:e5:9e:16:1a:27:0d:70:03:59: 43:c7:72:11:bb:40:07:36:6f:4e:d5:03:c8:a7:ff:d7:9f:98: 50:59:71:d5:03:d3:14:04:a8:44:ff:25:27:e7:a7:fa:40:23: 25:94:d8:6d:e8:5b:28:70:0e:61:4f:79:52:bb:55:95:e1:8c: e0:dd:b4:8e:84:e5:a9:85:4c:eb:b4:4d:11:46:34:89:99:08: 19:56:52:79:29:c8:6b:92:59:ab:6a:dd:37:33:7b:e8:64:8d: 47:24:9d:d3:83:5d:80:7e:5e:dc:a4:5d:4c:8d:a1:0c:dd:f8: 2d:a8:96:30:c1:90:54:9c:09:c9:cd:75:aa:8d:24:65:69:2c: f7:4c:35:30:8d:5c:ee:2f:a0:93:5b:1f:d6:5c:2f:a4:d1:38: 16:18:af:59:73:a5:50:a2:fa:98:1e:d9:6a:8f:1a:1d:25:ff: ee:12:cb:00:0a:a0:3e:49:8b:ed:d0:19:6c:7a:01:24:c1:7a: 5f:af:b2:ad:cc:bd:77:e8:ff:f1:bd:a1:5f:29:9d:2c:e2:7b: cf:77:b0:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpnLFwOtiX4QnDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mzg4MTk0MDEtZDY4Ni00ZTZhLThhYWQtMjU0OWU3MjMxNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbC2Kg3X5FzC/swlpzDC1tAO4k4fp9X7WXP 8JTB2yCs5Z2k0HBANhEtd8K+bnu8RV1jeMRG9Bp13K2WXoske7g0pmYWZRpPE+pr okPuS8UYoWJ1Q2COLkSW+M/APmWNEH5eaF0q/bjy1vkW1agnALMwhWUV3uIO6XWd flLw/pbphh0BNgjPTppqhXGNTiedj/uoRRDXzFOOkThXBJ4QynEyIR0eot+1+64n 4/4JTNYQy54J50P+/Xog8qWR/FU3VHcs1Ns6bVDyymiqh8TEnCeaikBS1smycLvq pbDyvEep5lHU8lXzPh/FJ/YzHDgm8KNxug5lG2BLt7b2Pz0vqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPRpttpWR2VHi1EYQt9wk+chB6e0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWIzZmI0MTQtZDcxZi0z YjdkLTg1ZDktMzRlNGRmYTA5ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOEQbfrcaLvcfBVVH94O8gkToaJ18VSKpwO/qeXo0Hbd4OMAcqy58 unnvZ8dC5Z4WGicNcANZQ8dyEbtABzZvTtUDyKf/15+YUFlx1QPTFASoRP8lJ+en +kAjJZTYbehbKHAOYU95UrtVleGM4N20joTlqYVM67RNEUY0iZkIGVZSeSnIa5JZ q2rdNzN76GSNRySd04NdgH5e3KRdTI2hDN34LaiWMMGQVJwJyc11qo0kZWks90w1 MI1c7i+gk1sf1lwvpNE4FhivWXOlUKL6mB7Zao8aHSX/7hLLAAqgPkmL7dAZbHoB JMF6X6+yrcy9d+j/8b2hXymdLOJ7z3ewIA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:39 2025 by rpki-client