This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb4884e7-5d93-3e04-8646-f0c62be90775.roa File: eb4884e7-5d93-3e04-8646-f0c62be90775.roa (raw, json) Hash identifier: FnLVEuI/4gbkjlHmgj0gpznz4TiFk1bMrB9RL3ptQ24= Subject key identifier: 43:F9:E2:ED:14:81:C2:B4:21:33:E8:EC:F3:E2:07:26:41:86:26:2B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A83779B552E02FB71D50D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb4884e7-5d93-3e04-8646-f0c62be90775.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:37:79:b5:52:e0:2f:b7:1d:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=60d8cbc5-891e-46af-976b-920547e21af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:4d:27:de:7c:6f:5a:d0:2d:b0:7a:1a:21: 69:ca:0f:e0:a4:5b:27:ae:71:bc:e8:d5:41:0e:c4: af:20:ae:c6:c5:d2:cc:36:33:d8:04:0b:3a:d7:88: 02:2a:01:3d:41:69:b0:e2:15:63:49:9a:80:7f:c1: 89:93:bc:b7:46:55:7c:d0:04:7b:b0:c7:d3:df:75: f9:8e:23:96:da:fe:e7:e0:88:c6:b9:66:37:24:b1: b3:72:a8:b3:0b:9c:ce:19:3e:b1:75:54:d1:95:50: 69:d2:b2:00:ec:b0:69:15:16:4e:09:18:1f:18:ae: 98:59:30:a2:05:98:97:2e:a0:84:25:50:b5:e4:62: c8:32:4c:a2:42:e9:a9:f2:50:a7:dd:bb:28:ad:44: b6:63:b3:81:27:c7:d8:54:a9:a6:d3:29:80:0a:8d: e2:4b:3f:18:53:81:ed:1f:0f:18:22:86:47:b0:20: b7:40:7b:4c:39:57:60:d2:52:41:b8:f8:d2:12:02: 49:66:c2:2c:b3:41:a7:e1:eb:72:f7:40:be:8d:0d: c7:4c:ac:0f:dc:96:c2:d6:79:7c:28:aa:2a:2d:8b: d3:0f:4d:db:ba:b1:39:2c:74:29:7d:4c:09:dd:61: c6:2a:37:76:ab:02:11:42:24:bf:fa:8e:9d:b4:17: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F9:E2:ED:14:81:C2:B4:21:33:E8:EC:F3:E2:07:26:41:86:26:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb4884e7-5d93-3e04-8646-f0c62be90775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bd:9b:31:4b:ac:43:f3:b3:43:35:21:ab:7e:90:5a:d5:33: 92:e6:4e:80:80:a7:ab:dd:c6:72:b2:76:28:f8:a8:46:6c:43: f5:19:c4:43:0d:6e:72:fb:9e:ca:46:02:9e:22:e7:57:eb:3a: 51:f2:b4:98:4e:7f:d6:6e:4f:d6:c8:b4:54:9f:55:bb:e7:f5: 92:9e:da:e0:bf:ca:35:a6:63:d7:62:13:27:ef:39:62:e0:c4: 67:ff:2f:cc:cf:81:d0:1b:db:41:9a:4b:42:82:45:50:b0:36: f6:a2:95:ca:ae:58:cc:55:98:28:19:b1:e4:a6:97:46:20:83: 8b:06:fe:d4:6e:95:97:01:89:d0:ec:1c:4f:22:a9:53:48:ec: d0:c5:d7:a2:62:4b:fa:41:4f:65:ba:54:e1:a8:1c:7a:9a:3d: 5a:68:65:24:61:f1:f6:f6:9b:89:f9:65:8d:c5:47:08:73:81: fb:b6:b8:7c:81:df:2d:5d:e3:ff:ff:41:94:30:3a:23:59:93: ab:1f:49:81:07:9c:59:e6:a5:d2:33:85:14:72:17:d7:62:aa: 22:cc:ba:22:da:7a:64:3c:26:34:0a:53:20:8f:7c:23:70:7b: b8:ab:33:17:de:18:e7:96:75:cb:9c:80:32:76:7e:59:53:47: 67:7d:87:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDd5tVLgL7cdUNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjBkOGNiYzUtODkxZS00NmFmLTk3NmItOTIwNTQ3ZTIxYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpxNJ958b1rQLbB6GiFpyg/gpFsnrnG86NVB DsSvIK7GxdLMNjPYBAs614gCKgE9QWmw4hVjSZqAf8GJk7y3RlV80AR7sMfT33X5 jiOW2v7n4IjGuWY3JLGzcqizC5zOGT6xdVTRlVBp0rIA7LBpFRZOCRgfGK6YWTCi BZiXLqCEJVC15GLIMkyiQump8lCn3bsorUS2Y7OBJ8fYVKmm0ymACo3iSz8YU4Ht Hw8YIoZHsCC3QHtMOVdg0lJBuPjSEgJJZsIss0Gn4ety90C+jQ3HTKwP3JbC1nl8 KKoqLYvTD03burE5LHQpfUwJ3WHGKjd2qwIRQiS/+o6dtBdW5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEP54u0UgcK0ITPo7PPiByZBhiYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWI0ODg0ZTctNWQ5My0z ZTA0LTg2NDYtZjBjNjJiZTkwNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiWAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZL2bMUusQ/OzQzUhq36QWtUzkuZOgICnq93GcrJ2KPioRmxD9RnE Qw1ucvueykYCniLnV+s6UfK0mE5/1m5P1si0VJ9Vu+f1kp7a4L/KNaZj12ITJ+85 YuDEZ/8vzM+B0BvbQZpLQoJFULA29qKVyq5YzFWYKBmx5KaXRiCDiwb+1G6VlwGJ 0OwcTyKpU0js0MXXomJL+kFPZbpU4agcepo9WmhlJGHx9vabiflljcVHCHOB+7a4 fIHfLV3j//9BlDA6I1mTqx9JgQecWeal0jOFFHIX12KqIsy6Itp6ZDwmNApTII98 I3B7uKszF94Y55Z1y5yAMnZ+WVNHZ32H6w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:35:52 2025 by rpki-client