This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa File: 00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa (raw, json) Hash identifier: rn2cTC6Wg2FT84XjrUq3klQetAHlRRKmLw+HL9VssBI= Subject key identifier: A6:9A:01:65:51:0A:3B:26:7F:67:D4:BF:9B:F5:99:3A:70:23:48:A0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A668271487D97C1B2D2800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:68:27:14:87:d9:7c:1b:2d:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=14a11ba2-d142-47e0-8ab5-01ab0e7578cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:6d:de:0f:34:6a:c3:9d:ec:b5:18:e4:4e: 59:6a:6d:c6:13:1e:2b:a7:82:84:50:48:1b:d9:29: f7:1b:bc:34:6a:97:27:8a:cc:7b:8c:43:42:dc:72: f7:86:b2:1b:57:d8:65:80:66:62:a6:da:b9:e4:ee: da:23:11:34:2e:a7:4e:fc:e8:f2:5a:61:d7:6e:4f: 39:ac:cb:05:78:49:ff:01:8e:18:9b:dd:62:08:45: 66:94:4e:e5:69:35:0a:d0:ce:c2:ca:01:3d:43:5a: ed:31:c2:b4:f7:98:1f:3e:9b:7a:b2:46:a6:e1:39: 46:82:fd:1d:c5:88:07:51:b7:db:85:fa:34:1d:80: 68:67:5f:f3:07:eb:8a:55:b2:0a:f8:56:ab:fa:15: 89:ca:00:3c:96:af:16:f0:e4:f2:ac:02:1b:28:45: 94:44:b8:98:8a:1d:52:74:f4:72:99:86:13:14:14: bd:07:02:60:8d:18:a0:2d:be:53:8b:9c:98:cb:03: 31:b2:66:0b:c0:b2:42:9d:f8:96:3d:b0:4b:59:6f: 77:8e:96:75:25:87:fa:f8:04:53:d5:9c:92:f0:49: 67:90:b5:19:29:03:93:4d:21:b8:e0:81:27:d4:1b: cd:1c:3e:85:06:43:1b:5e:f8:70:f7:e8:80:38:19: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9A:01:65:51:0A:3B:26:7F:67:D4:BF:9B:F5:99:3A:70:23:48:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:98:9e:ae:ab:8f:4e:46:e1:24:50:f0:22:1b:99:c8:a7:f2: e5:49:a6:c2:64:30:ab:14:e3:92:01:fe:e6:0d:01:9f:e5:ec: ec:ea:92:6c:40:b1:46:d7:5d:b3:4f:e4:c5:a4:68:b3:7e:4c: 0a:d0:35:5d:4c:01:7a:30:17:a0:9f:8f:21:cb:1c:34:bb:7f: 81:95:f8:b3:3d:bb:fb:29:44:5a:cc:0a:15:eb:8d:60:c9:d3: fc:b2:b6:48:c2:24:d3:db:83:68:14:00:35:54:aa:51:5f:d1: 62:fc:8d:81:69:26:28:e4:52:79:77:6e:1b:98:40:2f:13:f7: 47:80:e0:9e:bb:d3:4d:9f:dd:a1:3c:b7:a1:71:d9:ba:55:33: 9e:93:fb:c5:f5:c7:4d:4b:f9:c2:6e:9c:ef:d4:01:4a:3c:9c: 6f:3a:3c:fc:ce:92:be:06:59:d7:9a:d6:2e:b9:20:77:2e:d2: 67:a9:44:f5:54:28:a7:e3:83:1f:6d:cf:2f:fb:52:ac:03:8e: 01:70:db:4e:24:2f:eb:2e:4e:73:b9:a8:4a:31:8f:7d:18:f1: 79:e5:a9:44:61:f4:e1:47:6a:4a:10:86:c3:35:b9:2e:df:bc: 53:4f:64:bd:82:33:df:34:7d:02:84:3b:92:38:16:b7:a1:50: ec:a9:07:e2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpmgnFIfZfBstKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MTRhMTFiYTItZDE0Mi00N2UwLThhYjUtMDFhYjBlNzU3OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Nt3g80asOd7LUY5E5Zam3GEx4rp4KEUEgb 2Sn3G7w0apcnisx7jENC3HL3hrIbV9hlgGZiptq55O7aIxE0LqdO/OjyWmHXbk85 rMsFeEn/AY4Ym91iCEVmlE7laTUK0M7CygE9Q1rtMcK095gfPpt6skam4TlGgv0d xYgHUbfbhfo0HYBoZ1/zB+uKVbIK+Far+hWJygA8lq8W8OTyrAIbKEWURLiYih1S dPRymYYTFBS9BwJgjRigLb5Ti5yYywMxsmYLwLJCnfiWPbBLWW93jpZ1JYf6+ART 1ZyS8ElnkLUZKQOTTSG44IEn1BvNHD6FBkMbXvhw9+iAOBlz4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKaaAWVRCjsmf2fUv5v1mTpwI0igMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBjOTBmNGUtMjNmNi0z ZTQ1LTlkMGUtODRkMDkzN2Y0YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuivQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ5ierquPTkbhJFDwIhuZyKfy5UmmwmQwqxTjkgH+5g0Bn+Xs7OqS bECxRtdds0/kxaRos35MCtA1XUwBejAXoJ+PIcscNLt/gZX4sz27+ylEWswKFeuN YMnT/LK2SMIk09uDaBQANVSqUV/RYvyNgWkmKORSeXduG5hALxP3R4DgnrvTTZ/d oTy3oXHZulUznpP7xfXHTUv5wm6c79QBSjycbzo8/M6SvgZZ15rWLrkgdy7SZ6lE 9VQop+ODH23PL/tSrAOOAXDbTiQv6y5Oc7moSjGPfRjxeeWpRGH04UdqShCGwzW5 Lt+8U09kvYIz3zR9AoQ7kjgWt6FQ7KkH4g== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:11 2026 by rpki-client