This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
File: fca43530-5049-3e32-a93f-9ae5f61e8b35.roa (raw, json)
Hash identifier: 9AfTwbtYnFoWfLG+L0d8aGQC3m+6FjQUG6bPbbiXqvk=
Subject key identifier: F9:BB:29:1C:68:8C:2E:9D:95:5D:61:DC:BF:CE:97:3F:B7:12:6A:16
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C42DC0019A08DCA611DD79280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e88:c800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:00:19:a0:8d:ca:61:1d:d7:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=201c7dea-ce54-4b4f-8fff-7891f4432216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:ee:d4:8f:29:4b:a9:d1:fb:ea:ec:7a:a2:
fe:9b:b0:82:cc:c4:92:a2:1e:ce:bf:98:d0:e9:d9:
04:45:86:5b:4f:a1:a4:c3:94:f3:41:61:24:6a:74:
af:75:15:5c:75:dd:ab:05:ab:d3:e4:f6:3f:ab:71:
57:8f:08:3f:bd:66:d1:20:78:98:ec:a0:cf:01:d7:
a2:37:a3:fd:d3:6d:10:2d:81:48:cd:27:34:33:cd:
c7:4f:ed:3d:37:9c:7c:eb:86:d8:db:9c:d9:f7:28:
0c:8c:d8:20:b1:1c:a8:de:e6:fe:9c:f5:72:e1:1a:
c0:30:41:85:8d:70:35:fb:24:b2:7b:45:a7:e7:a6:
aa:7c:c7:3d:b0:be:9a:7c:5b:83:38:e0:6b:d0:12:
ab:5b:c1:38:d1:f8:6b:a1:7d:fd:70:12:15:de:21:
c6:20:04:3f:b7:14:7e:93:fe:84:4a:3b:e9:23:fa:
2a:d9:0f:28:3e:8c:6b:b0:ba:aa:b9:53:3f:cc:01:
40:01:a5:f9:2e:3f:47:de:a2:b1:05:10:ed:21:e3:
80:71:59:b5:f6:6e:f0:f8:9f:ed:c2:d7:76:0f:00:
dd:67:b0:0f:fb:44:4d:c5:cf:09:91:6a:9d:76:17:
9c:32:46:d7:14:f8:59:7a:98:07:8d:5c:fc:f9:15:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:29:1C:68:8C:2E:9D:95:5D:61:DC:BF:CE:97:3F:B7:12:6A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:c800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ab:b9:29:75:38:a4:b0:a3:ff:28:e0:d2:e8:d3:7f:00:4a:
00:77:16:b8:0a:e6:16:a4:b3:d8:e4:2c:6a:5e:91:41:72:5d:
db:0d:f0:d7:e2:f9:6c:be:88:bd:d4:8d:d1:10:10:aa:63:50:
bd:80:99:c3:77:ea:df:35:58:0c:b5:2b:29:d5:12:f2:ea:23:
8c:af:9a:26:c4:76:71:13:71:f4:a1:f9:15:85:97:2b:2a:bd:
5d:75:de:a4:8f:49:bf:f9:33:95:81:d2:49:ab:a1:78:cf:2b:
ce:00:68:6c:67:cb:35:ce:c1:ec:e5:d5:b7:fa:c1:0f:0b:00:
67:1f:9d:df:e9:f3:25:11:46:29:65:28:f0:0e:ac:19:4e:f3:
2e:9e:a3:c6:67:77:c0:a8:79:3a:81:42:7e:1f:f5:7d:fc:20:
7e:3c:66:1f:c8:06:36:b7:5e:06:9a:7d:09:87:d2:8d:00:06:
f5:b5:97:06:0f:06:a2:f5:7b:2b:0e:06:72:41:e6:6f:58:8c:
d2:f9:45:c3:4b:d5:34:3b:50:3d:02:50:39:40:ba:ea:f7:5c:
9b:8d:aa:74:bb:89:7a:9e:8b:f8:3a:a3:6c:72:34:e2:2c:91:
ed:75:f3:df:68:99:9a:eb:c6:3b:55:39:d9:ea:4d:b6:4d:4d:
30:47:a7:18
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3AAZoI3KYR3XkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
MjAxYzdkZWEtY2U1NC00YjRmLThmZmYtNzg5MWY0NDMyMjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqXu1I8pS6nR++rseqL+m7CCzMSSoh7Ov5jQ
6dkERYZbT6Gkw5TzQWEkanSvdRVcdd2rBavT5PY/q3FXjwg/vWbRIHiY7KDPAdei
N6P9020QLYFIzSc0M83HT+09N5x864bY25zZ9ygMjNggsRyo3ub+nPVy4RrAMEGF
jXA1+ySye0Wn56aqfMc9sL6afFuDOOBr0BKrW8E40fhroX39cBIV3iHGIAQ/txR+
k/6ESjvpI/oq2Q8oPoxrsLqquVM/zAFAAaX5Lj9H3qKxBRDtIeOAcVm19m7w+J/t
wtd2DwDdZ7AP+0RNxc8JkWqddhecMkbXFPhZepgHjVz8+RVYXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPm7KRxojC6dlV1h3L/Olz+3EmoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmNhNDM1MzAtNTA0OS0z
ZTMyLWE5M2YtOWFlNWY2MWU4YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUqu5KXU4pLCj/yjg0ujTfwBKAHcWuArmFqSz2OQsal6RQXJd2w3w
1+L5bL6IvdSN0RAQqmNQvYCZw3fq3zVYDLUrKdUS8uojjK+aJsR2cRNx9KH5FYWX
Kyq9XXXepI9Jv/kzlYHSSauheM8rzgBobGfLNc7B7OXVt/rBDwsAZx+d3+nzJRFG
KWUo8A6sGU7zLp6jxmd3wKh5OoFCfh/1ffwgfjxmH8gGNrdeBpp9CYfSjQAG9bWX
Bg8GovV7Kw4GckHmb1iM0vlFw0vVNDtQPQJQOUC66vdcm42qdLuJep6L+DqjbHI0
4iyR7XXz32iZmuvGO1U52epNtk1NMEenGA==
-----END CERTIFICATE-----
Generated at Wed Dec 24 08:47:55 2025 by rpki-client