This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa File: ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa (raw, json) Hash identifier: 73bzeEoHAoo7tcMqs4IsMh6/aTG8atg0VpHppJtD6qQ= Subject key identifier: A5:9B:A9:5A:CB:F0:A1:50:87:B0:5A:BA:9D:E6:65:87:93:50:A4:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4176868ABB10EBBE1DD55300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2d80:180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:86:8a:bb:10:eb:be:1d:d5:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=67e7aae3-01af-4197-bd57-c975c2acf054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:47:ab:33:01:62:4e:5e:ce:18:db:8c:22: a5:1d:70:42:c7:12:7f:1d:f5:ac:d7:77:6d:d9:ed: 49:63:60:e0:16:65:cc:c2:35:e0:5e:1e:0f:d8:29: 92:e5:23:05:5a:47:4c:18:1a:69:51:e4:fa:d0:b0: a5:78:f9:1f:42:f5:fb:72:e4:9f:49:be:4b:14:4f: 8b:0b:c8:59:89:a8:b0:b7:06:83:b9:ed:bb:5a:8e: 14:da:19:a0:b1:5f:ef:0b:cf:9c:14:17:c5:93:ef: 00:3c:3f:2e:d9:a7:2f:41:2c:8c:9d:34:27:53:2c: f7:fc:d0:24:b7:3b:12:21:bd:8e:d0:82:0b:35:dc: 96:56:7a:b9:b3:94:b4:3e:8e:5b:41:31:2b:45:18: fa:c9:27:12:b3:4e:44:8c:29:ab:aa:29:98:1e:1c: 5b:37:02:33:c1:c2:10:47:d6:73:8c:eb:71:61:bb: c6:99:25:94:4c:b9:70:48:be:5a:58:cd:de:7c:ff: 8b:17:f8:a8:5e:88:6c:0e:f3:96:0d:75:7b:49:0b: 77:03:68:06:84:cc:c5:bd:1c:c2:e4:bf:91:f1:f0: e3:8f:c0:fc:cf:67:0f:60:13:6f:40:3e:d6:b4:dd: 1a:7c:8d:16:90:7d:01:dc:71:85:3f:e5:c6:6d:fa: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:A9:5A:CB:F0:A1:50:87:B0:5A:BA:9D:E6:65:87:93:50:A4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:65:fe:ca:36:12:e2:84:a1:7e:c7:7a:d3:fc:9b:db:4f:2f: 17:14:88:83:ed:c8:c9:17:6a:db:74:f4:f2:5a:bf:44:30:c8: 22:f3:05:2f:c6:fd:13:8b:7d:a3:a4:12:9f:c7:8f:30:5b:72: f3:2c:e7:ec:3f:ff:de:57:44:5e:aa:1a:0a:94:27:68:1e:46: 2b:74:e8:d7:23:4a:39:1b:0b:af:09:50:a9:27:b0:bb:55:63: 3f:bf:b4:c7:28:fd:39:1f:63:b2:f2:ce:73:b8:42:c3:63:60: 2a:0f:f4:f0:7d:44:ae:33:ea:25:f0:8e:68:62:9d:57:c4:99: 24:77:18:94:0d:e6:e4:a0:54:a0:f3:e8:23:7c:b7:82:25:6b: 7d:2e:88:ca:61:73:33:38:29:79:ec:c8:fd:64:b4:c8:74:32: b4:d0:f6:24:08:9d:0c:eb:54:23:a6:48:93:70:00:78:c0:f2: b0:89:ec:3e:cb:c7:02:00:31:e1:3c:8f:ca:33:af:c7:8b:87: e7:53:5b:eb:11:44:b3:f0:a8:c3:4f:55:e6:de:02:10:4e:94: 3e:e5:9d:5e:74:ae:ae:32:06:4d:9c:51:9f:4e:83:cf:1b:91: bf:54:88:72:e3:f0:9d:80:02:8c:48:3a:ba:15:44:d2:19:1a: 80:20:81:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExBdoaKuxDrvh3VUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NjdlN2FhZTMtMDFhZi00MTk3LWJkNTctYzk3NWMyYWNmMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbJHqzMBYk5ezhjbjCKlHXBCxxJ/HfWs13dt 2e1JY2DgFmXMwjXgXh4P2CmS5SMFWkdMGBppUeT60LClePkfQvX7cuSfSb5LFE+L C8hZiaiwtwaDue27Wo4U2hmgsV/vC8+cFBfFk+8APD8u2acvQSyMnTQnUyz3/NAk tzsSIb2O0IILNdyWVnq5s5S0Po5bQTErRRj6yScSs05EjCmrqimYHhxbNwIzwcIQ R9ZzjOtxYbvGmSWUTLlwSL5aWM3efP+LF/ioXohsDvOWDXV7SQt3A2gGhMzFvRzC 5L+R8fDjj8D8z2cPYBNvQD7WtN0afI0WkH0B3HGFP+XGbfoquwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWbqVrL8KFQh7Baup3mZYeTUKQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWNmYTA0YTktMjE3NS0z YjBmLTg0MWMtYjJiZTNmNzUyYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFl/so2EuKEoX7HetP8m9tPLxcUiIPtyMkXatt09PJav0QwyCLz BS/G/ROLfaOkEp/HjzBbcvMs5+w//95XRF6qGgqUJ2geRit06NcjSjkbC68JUKkn sLtVYz+/tMco/TkfY7LyznO4QsNjYCoP9PB9RK4z6iXwjmhinVfEmSR3GJQN5uSg VKDz6CN8t4Ila30uiMphczM4KXnsyP1ktMh0MrTQ9iQInQzrVCOmSJNwAHjA8rCJ 7D7LxwIAMeE8j8ozr8eLh+dTW+sRRLPwqMNPVebeAhBOlD7lnV50rq4yBk2cUZ9O g88bkb9UiHLj8J2AAoxIOroVRNIZGoAggfc= -----END CERTIFICATE-----Generated at Sun Jan 11 16:28:17 2026 by rpki-client