This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2506cd4-1c35-306b-8a10-7f674d9d9bd9.roa File: f2506cd4-1c35-306b-8a10-7f674d9d9bd9.roa (raw, json) Hash identifier: bWQsDZ0Hid3VXLX1YYqc38SLY2Pe+l13WrUkyvkSZsc= Subject key identifier: 65:75:39:8A:D4:AD:B9:0C:09:15:06:AE:2C:56:DC:82:1E:EA:E3:77 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC1B3C144230C2722AD420 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2506cd4-1c35-306b-8a10-7f674d9d9bd9.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1b:3c:14:42:30:c2:72:2a:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=09628f31-5349-42c9-8e50-b9ec0cf967a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:81:df:8f:31:f6:5d:4e:61:0a:88:10:3e: 20:88:5f:6a:b3:83:41:a1:2b:ae:dd:18:41:fa:cb: 84:aa:66:67:76:26:35:d6:3b:96:69:e5:18:dc:f1: cf:c8:f2:5e:24:be:b3:ef:c8:2d:01:6f:ba:69:0a: 9b:f0:6f:76:c7:2d:a5:31:8c:94:3f:20:76:fd:47: 0a:5a:3b:c0:dd:00:b2:e2:11:ac:c1:c5:e7:26:7e: 3e:4d:bb:24:1d:c1:d8:da:1d:67:24:79:43:7f:a4: 31:d9:af:9c:92:aa:c5:df:1e:5c:15:80:ad:f1:bd: 7e:72:7c:e4:d6:77:62:ee:09:5c:5c:89:e9:c0:94: e8:0d:7c:d5:c9:28:91:2e:1c:03:05:c8:58:1a:93: d7:37:70:a1:55:23:fb:24:ce:9f:5d:3d:54:72:1e: 53:26:53:13:3a:c2:c0:03:50:31:83:2a:f2:a0:6b: 11:9d:4c:28:46:76:01:41:d4:c1:67:e5:15:63:64: 64:1b:be:05:76:60:95:97:ee:5e:82:7c:e7:d1:3e: bb:04:3a:06:db:86:09:b7:6f:78:28:41:f2:d7:83: 19:79:21:24:0c:81:ed:5f:c0:72:c9:80:d5:da:b7: aa:4e:bf:32:6f:1d:c8:b2:04:45:a9:24:1c:94:62: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:75:39:8A:D4:AD:B9:0C:09:15:06:AE:2C:56:DC:82:1E:EA:E3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2506cd4-1c35-306b-8a10-7f674d9d9bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:08:ec:86:22:de:24:c2:33:68:89:ed:50:9c:21:52:a6:02: 7d:4c:fc:95:38:9f:27:0f:9f:e6:8d:07:a2:52:13:24:50:2a: 6a:c6:96:57:25:fd:d9:de:61:57:f2:d0:90:4c:54:c6:9f:77: f3:11:84:35:8f:9a:29:41:19:3c:2d:6b:8e:13:60:10:52:e5: 19:36:da:50:b8:59:bd:7f:13:cb:e4:e8:f8:84:06:0a:78:7e: c2:67:1c:84:71:9e:13:fd:0f:da:30:2f:76:b6:48:02:5f:f6: a1:70:bb:1a:f5:5e:73:de:2b:ea:c1:d2:8f:3b:0c:22:82:76: 03:90:79:47:ea:8f:eb:c2:e2:ef:fd:a2:fb:bb:8b:9f:60:6c: cb:49:c3:ce:38:06:a3:b0:84:52:8e:eb:8f:ee:d9:40:3d:bb: 33:10:f5:5f:6d:78:55:d1:69:fd:a4:c1:59:0b:b1:29:fc:ac: 1d:ef:49:dc:60:5c:91:c0:82:e4:7a:02:85:70:b9:53:92:75: d8:26:67:86:d2:37:af:f1:b4:e9:7c:b7:e4:af:4d:3a:30:1a: 23:86:23:75:01:3f:b4:15:1f:37:c8:7e:8a:be:f9:30:ee:64: a5:05:d9:be:12:24:42:ef:38:79:3a:0c:8c:14:2c:66:c0:df: 1a:82:e7:7f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3Bs8FEIwwnIq1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDk2MjhmMzEtNTM0OS00MmM5LThlNTAtYjllYzBjZjk2N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDuB348x9l1OYQqIED4giF9qs4NBoSuu3RhB +suEqmZndiY11juWaeUY3PHPyPJeJL6z78gtAW+6aQqb8G92xy2lMYyUPyB2/UcK WjvA3QCy4hGswcXnJn4+TbskHcHY2h1nJHlDf6Qx2a+ckqrF3x5cFYCt8b1+cnzk 1ndi7glcXInpwJToDXzVySiRLhwDBchYGpPXN3ChVSP7JM6fXT1Uch5TJlMTOsLA A1AxgyryoGsRnUwoRnYBQdTBZ+UVY2RkG74FdmCVl+5egnzn0T67BDoG24YJt294 KEHy14MZeSEkDIHtX8ByyYDV2reqTr8ybx3IsgRFqSQclGKMNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGV1OYrUrbkMCRUGrixW3IIe6uN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjI1MDZjZDQtMWMzNS0z MDZiLThhMTAtN2Y2NzRkOWQ5YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiVAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXgjshiLeJMIzaIntUJwhUqYCfUz8lTifJw+f5o0HolITJFAqasaW VyX92d5hV/LQkExUxp938xGENY+aKUEZPC1rjhNgEFLlGTbaULhZvX8Ty+To+IQG Cnh+wmcchHGeE/0P2jAvdrZIAl/2oXC7GvVec94r6sHSjzsMIoJ2A5B5R+qP68Li 7/2i+7uLn2Bsy0nDzjgGo7CEUo7rj+7ZQD27MxD1X214VdFp/aTBWQuxKfysHe9J 3GBckcCC5HoChXC5U5J12CZnhtI3r/G06Xy35K9NOjAaI4YjdQE/tBUfN8h+ir75 MO5kpQXZvhIkQu84eToMjBQsZsDfGoLnfw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:46 2025 by rpki-client