This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa File: f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa (raw, json) Hash identifier: 8CMfDo9TZlK1bSoYn3K5Xd+PmZsyRVOcFUj1FzeXIBw= Subject key identifier: E4:B9:A8:F7:99:4B:F6:6F:AE:99:28:46:89:51:DB:B7:B7:65:00:B2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C487116966806FE8CA4A9CB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:16:96:68:06:fe:8c:a4:a9:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=f19452eb-1e35-4b3f-9a03-56600a78c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:99:42:00:20:3a:b4:88:bb:53:04:2c:7e: 52:32:4b:20:2f:23:96:1a:42:1b:ed:13:be:3a:30: 18:0e:87:33:c3:d8:a7:56:75:e3:ff:20:1b:ff:b0: bc:16:f1:4b:ae:65:66:0f:f8:d6:b9:96:95:b3:40: 1f:8b:de:19:ec:86:9f:b2:8e:ec:95:8e:42:8f:45: c4:4a:a0:2a:ec:29:31:1e:f6:8c:13:d6:62:75:13: be:5a:d9:40:b5:f1:a6:4e:c1:ad:90:24:79:6d:2e: 0d:df:fa:dc:dd:a5:c2:05:eb:30:00:f5:76:12:af: 49:a9:cb:7f:4e:da:dc:2e:b0:70:05:82:3e:80:92: 6d:2c:cb:df:c6:08:60:50:24:fb:93:4c:a1:a1:58: 0a:07:4a:6c:d8:85:64:e7:14:0f:78:b1:8c:88:1f: d7:4c:0c:d5:b6:8b:94:10:4f:15:75:a3:a8:54:5e: 2b:86:27:59:c8:f0:f2:e4:6b:76:28:06:23:a7:4b: 6d:9d:d4:b1:54:0c:0e:4e:fb:e6:2c:3e:2f:c1:8b: 2f:5c:d1:55:fa:1e:16:5e:86:1a:87:b2:09:4d:4e: f6:82:f8:ba:91:15:32:1e:9a:06:d3:01:08:4d:31: c3:8e:2e:30:ed:08:14:63:dc:51:2a:4b:6e:51:b6: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:A8:F7:99:4B:F6:6F:AE:99:28:46:89:51:DB:B7:B7:65:00:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b9:3d:89:05:0f:8a:29:1f:74:48:b0:bb:9b:70:1b:a3:74: dc:26:6b:27:ef:65:4a:59:67:0c:30:e7:50:a6:47:ea:d9:10: 66:98:53:98:6a:8e:39:4f:bb:78:be:47:65:6c:ac:64:32:88: b0:4a:34:a3:5c:10:b3:5f:3b:ce:39:9e:68:6a:7b:a8:a9:ee: 84:fd:56:91:c3:00:b9:0b:49:9f:7b:5e:49:39:2e:b6:ea:ba: 30:f1:6e:0b:f4:cc:a8:50:c4:ec:1f:2e:55:da:4b:3a:1b:41: f1:fa:08:20:e1:c7:1f:cb:cb:06:14:64:7a:25:ec:ca:c7:81: 90:a6:7f:83:8e:23:78:cd:27:67:b7:30:1e:c0:a9:72:a2:e3: 5e:6a:d4:93:8e:9b:e4:c4:66:1a:85:76:29:11:7f:bb:5b:a1: f7:df:fc:6c:83:87:99:6b:f2:39:89:55:db:33:d3:7e:26:98: 42:d7:98:cb:fc:7b:61:45:28:9b:1e:15:29:23:21:0a:75:e3: e5:64:4c:9d:6b:8b:46:f7:67:92:c0:60:e4:27:00:ce:a9:fa: c6:8d:67:7a:83:2d:46:d2:fd:22:06:6e:bd:f8:09:a4:60:0e: b3:17:78:3c:77:56:d8:3c:05:10:fe:cf:9c:18:7c:76:1a:49: e0:40:3d:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcRaWaAb+jKSpy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZjE5NDUyZWItMWUzNS00YjNmLTlhMDMtNTY2MDBhNzhjMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaWZQgAgOrSIu1MELH5SMksgLyOWGkIb7RO+ OjAYDoczw9inVnXj/yAb/7C8FvFLrmVmD/jWuZaVs0Afi94Z7Iafso7slY5Cj0XE SqAq7CkxHvaME9ZidRO+WtlAtfGmTsGtkCR5bS4N3/rc3aXCBeswAPV2Eq9Jqct/ TtrcLrBwBYI+gJJtLMvfxghgUCT7k0yhoVgKB0ps2IVk5xQPeLGMiB/XTAzVtouU EE8VdaOoVF4rhidZyPDy5Gt2KAYjp0ttndSxVAwOTvvmLD4vwYsvXNFV+h4WXoYa h7IJTU72gvi6kRUyHpoG0wEITTHDji4w7QgUY9xRKktuUbZZrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOS5qPeZS/ZvrpkoRolR27e3ZQCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjQwMzJkOGYtMjBkMy0z OTExLWJiOTItNmY2NmM3ZTdmYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuizww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL7k9iQUPiikfdEiwu5twG6N03CZrJ+9lSllnDDDnUKZH6tkQZphT mGqOOU+7eL5HZWysZDKIsEo0o1wQs187zjmeaGp7qKnuhP1WkcMAuQtJn3teSTku tuq6MPFuC/TMqFDE7B8uVdpLOhtB8foIIOHHH8vLBhRkeiXsyseBkKZ/g44jeM0n Z7cwHsCpcqLjXmrUk46b5MRmGoV2KRF/u1uh99/8bIOHmWvyOYlV2zPTfiaYQteY y/x7YUUomx4VKSMhCnXj5WRMnWuLRvdnksBg5CcAzqn6xo1neoMtRtL9IgZuvfgJ pGAOsxd4PHdW2DwFEP7PnBh8dhpJ4EA9Vg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:42 2025 by rpki-client