This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa File: 01015e5b-5218-36c9-83ed-4ce6023e4861.roa (raw, json) Hash identifier: SXdx0ZGFc72jaU0v6qPw9en/UWsLYYx5F5kDhpmYDM8= Subject key identifier: D0:72:33:AF:D5:E8:EC:6B:54:70:8F:10:71:26:48:C4:E3:78:90:33 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A817FD37C12EB6927DC340 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:17:fd:37:c1:2e:b6:92:7d:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c84dc2af-2233-4d69-8891-84631d1281be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:dc:97:53:88:5a:ec:5d:d0:2b:ec:ee:92: 3f:07:76:09:b2:7b:d1:03:09:ac:fd:2d:fa:68:9b: 06:d0:80:4c:03:c5:0f:5b:a2:2d:a6:76:70:78:06: 41:e6:86:3a:17:ff:cb:05:28:70:7e:2f:95:25:81: e0:f4:81:71:e4:55:cb:cb:94:6c:95:1c:cd:5b:51: 15:c0:f3:54:cf:88:88:76:76:fc:ed:7f:40:6f:7c: 19:7d:41:c7:de:00:ae:c3:02:78:f3:5c:34:91:3c: 86:11:52:1a:57:b9:fc:43:77:d8:d7:40:7c:09:30: 9c:fb:04:c3:63:84:49:51:e6:bf:6b:e6:ad:e5:bc: b7:0c:91:77:7c:4d:97:74:fc:8a:66:df:82:28:50: bc:10:24:48:54:49:c8:6b:77:c7:e7:57:ca:70:4a: 8e:d9:bd:07:b6:4b:3f:9f:c9:4e:83:60:27:73:e4: 5b:11:99:ff:9a:8a:57:dd:23:a4:eb:8d:3d:19:f6: 6c:f5:13:c8:fa:4d:13:8b:dc:87:2d:6f:e6:53:7a: 48:8f:c4:21:81:61:90:97:35:6b:7e:6a:3e:aa:ea: 59:d2:04:52:a1:58:e6:ba:f5:54:43:0e:74:0e:9a: 71:48:20:84:2d:ad:a6:e7:2b:80:e5:90:a8:d1:96: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:33:AF:D5:E8:EC:6B:54:70:8F:10:71:26:48:C4:E3:78:90:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c0:b9:88:3c:79:34:81:bd:18:c4:49:01:10:77:01:55:5b: a7:e5:a7:fc:ca:ea:7e:17:98:80:19:a8:87:81:ae:11:44:99: 9b:61:f7:a2:c7:45:82:0a:f0:e1:3a:b3:25:52:28:6d:b6:8e: ac:04:75:9b:01:9f:71:4d:b9:79:51:a8:5a:00:57:9f:64:7c: 04:e9:73:96:ea:0a:a9:9a:94:00:33:82:1a:22:b3:d4:98:35: f0:2b:57:73:e9:2e:ab:12:60:b6:a6:c4:4e:16:05:ef:bf:49: f4:66:a5:28:31:2a:cc:1a:7f:c9:ba:09:96:cd:48:5c:cd:87: 97:f1:8c:2b:b1:a3:1c:d4:92:9c:28:a6:3a:c1:61:67:62:ba: c3:a3:03:26:86:c4:56:81:dc:c3:6e:15:f2:e5:df:12:51:7e: 7a:d6:76:4e:e5:6e:3b:c5:47:ca:d5:3f:ca:a9:53:6a:6e:ec: 79:b6:1a:6e:58:30:26:27:94:4a:5b:bc:0e:bc:e5:8b:29:1a: 4f:b4:d5:5c:8e:35:ec:ec:dc:cb:bf:66:5c:27:1e:bc:ea:e2: 2c:e3:01:61:a5:a2:0d:61:e1:bf:89:ea:0c:b0:ff:b4:23:12: 4e:fb:fc:27:cd:af:ab:99:b7:e0:d0:a3:91:72:f1:15:8d:47: 8c:fc:12:53 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqBf9N8EutpJ9w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Yzg0ZGMyYWYtMjIzMy00ZDY5LTg4OTEtODQ2MzFkMTI4MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS3cl1OIWuxd0Cvs7pI/B3YJsnvRAwms/S36 aJsG0IBMA8UPW6ItpnZweAZB5oY6F//LBShwfi+VJYHg9IFx5FXLy5RslRzNW1EV wPNUz4iIdnb87X9Ab3wZfUHH3gCuwwJ481w0kTyGEVIaV7n8Q3fY10B8CTCc+wTD Y4RJUea/a+at5by3DJF3fE2XdPyKZt+CKFC8ECRIVEnIa3fH51fKcEqO2b0Htks/ n8lOg2Anc+RbEZn/mopX3SOk6409GfZs9RPI+k0Ti9yHLW/mU3pIj8QhgWGQlzVr fmo+qupZ0gRSoVjmuvVUQw50DppxSCCELa2m5yuA5ZCo0ZbTMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNByM6/V6OxrVHCPEHEmSMTjeJAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDEwMTVlNWItNTIxOC0z NmM5LTgzZWQtNGNlNjAyM2U0ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiaQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlsC5iDx5NIG9GMRJARB3AVVbp+Wn/MrqfheYgBmoh4GuEUSZm2H3 osdFggrw4TqzJVIobbaOrAR1mwGfcU25eVGoWgBXn2R8BOlzluoKqZqUADOCGiKz 1Jg18CtXc+kuqxJgtqbEThYF779J9GalKDEqzBp/yboJls1IXM2Hl/GMK7GjHNSS nCimOsFhZ2K6w6MDJobEVoHcw24V8uXfElF+etZ2TuVuO8VHytU/yqlTam7sebYa blgwJieUSlu8DrzliykaT7TVXI417Ozcy79mXCcevOriLOMBYaWiDWHhv4nqDLD/ tCMSTvv8J82vq5m34NCjkXLxFY1HjPwSUw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:58 2026 by rpki-client