This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa File: fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa (raw, json) Hash identifier: W9W3QSSLWxLuG8ODYNZpjRP7JGkh5tRYL0T08ogsdXo= Subject key identifier: AD:2A:2C:C5:2F:5B:A5:32:DE:A0:76:09:4A:8F:23:64:15:4A:78:6E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C26F0F1E80BB37985AFE2AC60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e88:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f1:e8:0b:b3:79:85:af:e2:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=ddc1e7ca-057f-423b-a2e9-f0def2e59aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:dd:06:c7:38:58:e8:83:4a:70:55:48:85: fa:9d:eb:08:4a:d5:08:79:e6:d3:48:20:23:c4:af: 35:85:94:bd:80:53:d4:ba:0b:76:ef:14:f9:42:d5: 55:ff:1d:0a:86:29:e0:80:cb:2b:c4:bf:8c:c8:a3: 80:80:81:5b:73:32:cc:36:19:5b:5f:76:b8:52:3b: a3:fd:bd:e0:65:b2:51:ab:66:fc:88:c6:49:8f:52: 68:ac:34:33:5f:33:d6:84:3a:b9:2d:33:ef:f8:b4: 1c:71:4e:4a:0d:25:53:4a:a4:10:c3:43:1b:9a:0b: 0c:4d:6a:c5:76:99:0e:5e:66:7e:e7:7a:cb:66:75: 84:91:60:34:e7:a9:c4:50:9c:c6:bf:a7:62:2c:27: 00:3a:8d:9a:28:d2:32:9a:56:25:04:6e:68:95:1c: 63:0b:90:9f:0b:df:72:9a:8b:1a:65:d6:d2:c0:8d: ca:c6:4d:77:46:dc:99:0a:cb:2c:01:8f:27:80:ab: 27:0c:c8:f3:9d:3a:b2:11:10:1e:69:de:34:d7:83: f6:cd:1c:17:35:df:70:a0:ff:05:5f:ad:b7:74:1e: 51:75:7e:9f:0e:7f:d5:f4:87:d8:85:02:20:ee:bc: 89:cb:b1:be:23:19:8f:b9:6c:ba:3b:7d:3e:1a:a9: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2A:2C:C5:2F:5B:A5:32:DE:A0:76:09:4A:8F:23:64:15:4A:78:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5e:10:bf:09:07:6a:1a:b7:28:18:7f:09:5c:78:40:36:88: 4c:4b:65:f4:40:d0:80:2e:13:55:7e:22:79:76:48:38:3c:8a: a8:a9:d8:21:66:e1:04:37:f0:a0:0e:a0:6c:b9:af:2f:71:7c: 77:98:85:bf:d1:e9:62:f6:ff:89:c9:bd:92:d0:ab:c2:b6:d3: 20:c0:4a:c5:a1:ec:45:2e:cc:46:c4:a5:5a:70:c3:a3:53:2c: a0:86:a7:d2:62:d8:47:38:4a:2d:d6:72:d9:70:9c:11:77:f8: 9c:42:ab:ce:c7:9b:dd:da:46:69:3e:4a:6a:dc:71:1d:92:a5: 3e:60:37:54:c4:c9:a3:7b:05:c3:bb:a6:99:e8:22:44:52:78: e0:0f:10:f0:5e:18:1c:48:9f:23:db:ff:7d:5c:e8:e7:8e:f5: e4:e6:c9:a1:8f:22:f3:11:bd:8c:c9:9c:a9:8a:2c:6d:28:d8: 8f:38:dc:a5:ea:fd:69:fd:bf:c6:f3:69:21:c3:ae:bc:1b:9f: 7d:9a:46:55:46:87:10:37:ae:8c:3f:59:f7:29:d6:37:10:54: bd:b8:2a:76:2a:8a:8a:22:01:90:60:da:f4:b6:37:a0:71:3f: b3:b5:6e:a0:e3:28:32:f3:1d:18:cc:e6:56:6f:b3:8c:fc:1b: a4:99:e8:e9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwm8PHoC7N5ha/irGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZGRjMWU3Y2EtMDU3Zi00MjNiLWEyZTktZjBkZWYyZTU5YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimzdBsc4WOiDSnBVSIX6nesIStUIeebTSCAj xK81hZS9gFPUugt27xT5QtVV/x0KhinggMsrxL+MyKOAgIFbczLMNhlbX3a4Ujuj /b3gZbJRq2b8iMZJj1JorDQzXzPWhDq5LTPv+LQccU5KDSVTSqQQw0MbmgsMTWrF dpkOXmZ+53rLZnWEkWA056nEUJzGv6diLCcAOo2aKNIymlYlBG5olRxjC5CfC99y mosaZdbSwI3Kxk13RtyZCsssAY8ngKsnDMjznTqyERAead4014P2zRwXNd9woP8F X623dB5RdX6fDn/V9IfYhQIg7ryJy7G+IxmPuWy6O30+Gqn+VwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK0qLMUvW6Uy3qB2CUqPI2QVSnhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmEyZGE4ODItNGQ4My0z NWY4LThjNGYtOWE0NWQwYzFjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW14QvwkHahq3KBh/CVx4QDaITEtl9EDQgC4TVX4ieXZIODyKqKnY IWbhBDfwoA6gbLmvL3F8d5iFv9HpYvb/icm9ktCrwrbTIMBKxaHsRS7MRsSlWnDD o1MsoIan0mLYRzhKLdZy2XCcEXf4nEKrzseb3dpGaT5KatxxHZKlPmA3VMTJo3sF w7ummegiRFJ44A8Q8F4YHEifI9v/fVzo54715ObJoY8i8xG9jMmcqYosbSjYjzjc per9af2/xvNpIcOuvBuffZpGVUaHEDeujD9Z9ynWNxBUvbgqdiqKiiIBkGDa9LY3 oHE/s7VuoOMoMvMdGMzmVm+zjPwbpJno6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:31:05 2025 by rpki-client