This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa File: 0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json) Hash identifier: VPgQgFyzSW5JCgtgSv2ifj6qFW8FtFQSQGmx0vFKq/8= Subject key identifier: 28:F1:08:7E:5E:F9:BC:81:76:FB:D8:02:ED:50:A4:FE:EE:BB:60:54 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6968A60CB9F8557EF4480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:96:8a:60:cb:9f:85:57:ef:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b3c1b4cc-ceab-416e-8efe-fe811a3902d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:48:53:06:b4:62:53:e1:b7:36:7e:62:de: 7c:36:42:64:26:fc:21:d4:8c:a2:86:7d:ec:3b:c5: 0d:cd:26:ba:c2:3b:2f:b1:b2:3b:34:92:fc:21:f9: 6b:4a:f7:8a:97:79:5b:d1:4b:a2:30:ac:f6:e4:ba: d9:b4:da:59:0b:dd:58:c7:d1:bc:5d:d0:5f:a7:a9: ab:dc:ed:e5:e1:96:64:95:4c:4f:5f:7b:74:44:c4: ef:ee:cb:b9:ea:7a:24:c9:05:5d:a0:2c:8d:ce:a8: 9c:5a:6c:9d:1d:f8:9d:2f:13:87:c3:69:cb:8e:48: 6d:c8:32:bf:64:ba:12:32:0a:29:c3:08:11:55:9b: 08:34:49:db:78:1a:ba:7c:46:40:65:6d:0a:00:0c: a3:fc:9e:17:af:ec:13:f4:06:7a:90:ad:ea:54:6f: e5:6a:9d:bf:49:40:27:b9:29:95:fb:c8:6d:cd:69: c4:df:32:47:9a:57:d4:8c:a1:60:85:0e:9f:55:2e: 4e:64:49:a5:27:c6:67:4f:56:ea:59:17:e9:cc:6e: 8d:90:db:51:eb:1c:36:b2:73:10:27:56:f2:12:8c: e0:e9:36:90:bb:44:33:61:78:87:88:5b:33:18:43: 72:73:c3:f9:16:80:75:96:c3:d9:5c:e9:bc:99:23: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F1:08:7E:5E:F9:BC:81:76:FB:D8:02:ED:50:A4:FE:EE:BB:60:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:73:e5:b6:df:56:aa:52:20:91:58:81:4d:cc:32:b9:01:f7: 2d:59:25:65:0c:06:62:ef:a2:23:a2:ac:88:e7:16:39:e6:1f: db:e9:75:52:9f:1d:ae:3b:f5:62:b9:10:5f:be:ad:6d:32:4f: a3:89:ca:c9:f0:fb:3f:71:c8:1f:0a:7c:ab:ef:7a:72:41:8b: 3a:0a:40:e0:42:d5:13:d4:78:1b:4f:a7:4d:7b:b9:82:ee:6d: b5:97:4e:a8:17:a7:2a:43:13:52:1f:fb:e9:32:07:9d:cc:dc: 29:b0:71:ac:9d:00:0b:f9:38:9e:c5:b7:ab:b6:b4:29:42:2f: a5:a6:c4:4a:23:d9:80:2c:e1:30:c9:60:1c:37:9a:1e:b9:e5: 05:c7:2b:03:30:e1:f6:60:fd:88:bb:c2:d9:d8:23:f4:46:d2: 1d:82:6a:56:61:f8:03:69:ce:63:a4:4b:e6:29:d1:c8:46:9c: 8d:82:37:50:0f:8f:6a:51:ab:66:b2:ed:19:10:da:6b:af:d3: 57:e8:03:e6:30:b9:0d:e6:78:47:6e:48:be:d9:9e:1d:11:39: 38:7d:d3:95:0d:60:63:dc:87:36:6f:00:83:da:19:fb:4d:ae: 06:79:23:c2:a6:d9:92:0e:f1:6e:65:8a:f1:74:22:3f:45:96: 63:59:73:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppaKYMufhVfvRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YjNjMWI0Y2MtY2VhYi00MTZlLThlZmUtZmU4MTFhMzkwMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBNIUwa0YlPhtzZ+Yt58NkJkJvwh1Iyihn3s O8UNzSa6wjsvsbI7NJL8IflrSveKl3lb0UuiMKz25LrZtNpZC91Yx9G8XdBfp6mr 3O3l4ZZklUxPX3t0RMTv7su56nokyQVdoCyNzqicWmydHfidLxOHw2nLjkhtyDK/ ZLoSMgopwwgRVZsINEnbeBq6fEZAZW0KAAyj/J4Xr+wT9AZ6kK3qVG/lap2/SUAn uSmV+8htzWnE3zJHmlfUjKFghQ6fVS5OZEmlJ8ZnT1bqWRfpzG6NkNtR6xw2snMQ J1byEozg6TaQu0QzYXiHiFszGENyc8P5FoB1lsPZXOm8mSMiBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCjxCH5e+byBdvvYAu1QpP7uu2BUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3ODg0YTYtZWQ1Ny0z ZmNlLWIyYzAtNWQ4YzY0ZTRhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADnPltt9WqlIgkViBTcwyuQH3LVklZQwGYu+iI6KsiOcWOeYf2+l1 Up8drjv1YrkQX76tbTJPo4nKyfD7P3HIHwp8q+96ckGLOgpA4ELVE9R4G0+nTXu5 gu5ttZdOqBenKkMTUh/76TIHnczcKbBxrJ0AC/k4nsW3q7a0KUIvpabESiPZgCzh MMlgHDeaHrnlBccrAzDh9mD9iLvC2dgj9EbSHYJqVmH4A2nOY6RL5inRyEacjYI3 UA+PalGrZrLtGRDaa6/TV+gD5jC5DeZ4R25IvtmeHRE5OH3TlQ1gY9yHNm8Ag9oZ +02uBnkjwqbZkg7xbmWK8XQiP0WWY1lz9Q== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:34 2026 by rpki-client