This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa File: 0cdccb18-47f8-3e17-afc8-8cda7c425886.roa (raw, json) Hash identifier: SeV83yo1v0Pi16+fV0K+WOZKqBdEBtHzTX6ksVwO6rU= Subject key identifier: 73:1E:94:68:A4:05:97:B8:8C:FE:8B:50:FE:8D:DF:09:C4:5E:13:41 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC16208E2012EF636DE200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e8c:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:16:20:8e:20:12:ef:63:6d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=59a302a4-bed2-4c7c-8052-4d737d68cf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:da:8a:0d:8e:3a:82:41:63:ca:73:d1:25: 2a:b3:38:c1:ff:8a:f3:1d:18:19:32:7f:2a:5b:a3: 61:a0:47:25:d4:78:c9:d5:2f:da:57:f1:d6:28:3c: 92:3d:3d:1a:f2:76:25:db:34:1d:5e:43:13:6f:30: 0d:bd:b6:6b:d6:8d:9c:f2:0d:57:63:e9:b6:9c:e9: 10:ac:22:93:8b:6e:a5:14:2c:5e:10:0a:fc:86:7e: bd:16:b0:4c:9c:79:96:95:8a:07:dd:0e:7d:7f:36: 90:14:77:2f:2c:87:ac:37:d3:1b:4e:4c:57:81:b8: 0b:c7:bf:21:7d:85:f7:21:78:be:75:99:92:05:3d: 93:a1:f4:ab:06:a4:48:71:ec:4a:23:4e:82:61:3a: 8e:b8:53:1f:b8:98:81:6e:2b:39:96:9f:4f:50:41: c3:99:c7:27:72:f6:9b:a9:ee:88:88:3f:98:aa:62: b8:13:74:10:dd:96:b1:c8:c1:9c:aa:fb:4e:e2:60: 65:87:42:49:b7:b2:ed:ae:b4:03:37:40:e6:af:81: ef:45:66:64:f0:2f:99:b4:c6:7c:ae:9e:41:e4:eb: 85:eb:89:58:9c:06:5a:56:10:e3:4c:cc:70:ff:cb: e4:55:4c:de:5e:35:aa:50:14:76:11:a1:72:69:dc: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:94:68:A4:05:97:B8:8C:FE:8B:50:FE:8D:DF:09:C4:5E:13:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0f:41:22:6e:99:e8:0f:4e:12:27:70:6f:28:b8:1f:7d:9f: 1f:85:7a:35:98:0d:8c:4e:b5:49:37:dd:ba:27:4e:42:ae:c3: a6:4c:92:06:6c:c1:1e:6d:01:94:f8:3e:68:51:80:59:4b:63: ab:f4:58:93:86:32:87:1e:c0:bf:5b:99:ee:44:08:0d:b1:d4: fe:b6:f6:a2:b0:c2:87:cd:cb:01:94:bf:8a:6b:14:8c:4e:81: 27:f9:32:05:92:92:e2:c1:44:8b:96:30:79:d4:d5:6d:24:4e: 0c:85:7d:38:1b:b5:df:d9:d9:52:06:f0:e2:55:24:5b:f2:b4: ff:eb:44:a6:43:9d:6e:d9:1e:97:43:e4:27:7e:09:d1:05:9c: 22:62:86:0a:f1:d1:31:6f:86:83:e6:19:b3:52:ca:67:e3:8d: 0b:4d:13:b4:bf:6e:bc:f2:59:cb:db:95:23:fd:50:b4:fe:14: fa:0d:18:4e:5e:18:6f:35:1b:7d:66:3a:45:c1:d6:bc:10:cb: 31:ab:ed:85:39:1a:ef:36:fe:90:cb:de:1a:8c:c7:96:d3:2b: aa:6d:07:27:db:e8:a5:24:07:bc:15:f4:06:d9:6a:d3:61:61: 75:96:65:b2:d7:b1:ba:1d:1c:c1:13:55:db:aa:a9:56:e5:37: 4e:4d:d4:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BYgjiAS72Nt4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTlhMzAyYTQtYmVkMi00YzdjLTgwNTItNGQ3MzdkNjhjZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDLaig2OOoJBY8pz0SUqszjB/4rzHRgZMn8q W6NhoEcl1HjJ1S/aV/HWKDySPT0a8nYl2zQdXkMTbzANvbZr1o2c8g1XY+m2nOkQ rCKTi26lFCxeEAr8hn69FrBMnHmWlYoH3Q59fzaQFHcvLIesN9MbTkxXgbgLx78h fYX3IXi+dZmSBT2TofSrBqRIcexKI06CYTqOuFMfuJiBbis5lp9PUEHDmccncvab qe6IiD+YqmK4E3QQ3ZaxyMGcqvtO4mBlh0JJt7LtrrQDN0Dmr4HvRWZk8C+ZtMZ8 rp5B5OuF64lYnAZaVhDjTMxw/8vkVUzeXjWqUBR2EaFyadzhjwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHMelGikBZe4jP6LUP6N3wnEXhNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGNkY2NiMTgtNDdmOC0z ZTE3LWFmYzgtOGNkYTdjNDI1ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgQ9BIm6Z6A9OEidwbyi4H32fH4V6NZgNjE61STfduidOQq7DpkyS BmzBHm0BlPg+aFGAWUtjq/RYk4Yyhx7Av1uZ7kQIDbHU/rb2orDCh83LAZS/imsU jE6BJ/kyBZKS4sFEi5YwedTVbSRODIV9OBu139nZUgbw4lUkW/K0/+tEpkOdbtke l0PkJ34J0QWcImKGCvHRMW+Gg+YZs1LKZ+ONC00TtL9uvPJZy9uVI/1QtP4U+g0Y Tl4YbzUbfWY6RcHWvBDLMavthTka7zb+kMveGozHltMrqm0HJ9vopSQHvBX0Btlq 02FhdZZlstexuh0cwRNV26qpVuU3Tk3U5g== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:11 2026 by rpki-client