This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f96d2bf-d75f-31a1-b6c2-616b1070caaf.roa File: 0f96d2bf-d75f-31a1-b6c2-616b1070caaf.roa (raw, json) Hash identifier: dmJ5Dx/cDaoE+we4PWEx2NNecfEqoQ5H9PLfjtzkGg4= Subject key identifier: 2D:ED:C7:FF:CF:91:1B:DF:CF:B3:AA:43:0D:F4:A6:97:D3:81:75:CB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A685A2C474F700706163C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f96d2bf-d75f-31a1-b6c2-616b1070caaf.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:a000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:85:a2:c4:74:f7:00:70:61:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a6aacf72-a11c-40dc-ba16-005fea688195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:db:1e:30:56:52:24:66:1a:bd:31:21:ef: 9a:a1:ca:27:37:36:66:34:74:92:86:82:f5:0c:16: 3c:75:30:5a:3f:9a:ba:d0:a1:e6:44:e6:9e:76:1c: a8:1b:5f:22:ec:a7:56:af:0d:f5:f9:42:74:09:77: d6:cd:a3:dd:aa:c2:54:2a:f9:0e:ef:ea:92:77:88: 34:ff:1b:71:cf:4e:8d:db:34:9d:3f:27:07:9e:12: c1:db:7d:3c:b3:53:03:59:f5:c9:99:24:e0:c3:f1: 6d:de:3e:5b:15:fd:a9:4e:cc:da:18:fe:b0:32:ad: b4:c7:08:7d:48:ce:f1:2c:fd:f4:62:9e:cf:76:df: 1d:0c:ae:24:f4:7e:98:a8:59:6f:e7:48:9a:ab:c5: 25:2f:b6:f2:06:c3:c7:5a:c7:df:4c:cb:bc:8d:25: c2:ef:57:aa:0b:44:33:2a:09:5b:46:4b:14:92:09: 66:a1:34:40:62:0b:a3:bb:d6:ce:90:95:49:aa:99: ea:ae:6e:f6:44:32:a5:91:a5:da:d4:42:45:4a:81: 3c:3c:aa:61:ff:07:6b:0a:48:ee:99:2c:c6:fa:9d: 7b:0e:01:08:42:09:57:8e:35:79:f1:de:f1:b5:99: 60:58:46:9a:ec:6a:3e:b2:0d:1b:8d:d1:3d:92:18: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:C7:FF:CF:91:1B:DF:CF:B3:AA:43:0D:F4:A6:97:D3:81:75:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f96d2bf-d75f-31a1-b6c2-616b1070caaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:a000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ff:ff:8b:95:e4:52:75:e7:d1:9b:bf:71:81:6f:79:fd:a2: ed:38:fc:f1:50:0b:0d:8c:79:53:78:50:45:80:77:0b:13:25: ea:12:e3:95:37:11:70:cd:ad:15:89:98:73:d2:87:33:16:0c: 91:6f:81:fb:0b:22:a6:47:11:a6:10:73:0d:f4:b9:8f:a8:cc: 38:36:e8:c9:4c:01:a8:6b:7f:b7:b8:70:6f:18:17:bb:f2:b8: ff:16:39:1c:8c:a3:0f:bf:9c:53:e5:0f:7e:d7:c4:d9:0d:90: 2f:04:fd:21:c2:c7:b7:18:1d:a3:95:2b:77:0a:9d:2d:21:3d: 6b:53:be:0d:ce:50:95:16:60:d1:ab:41:79:53:9b:e4:9b:5d: 05:c7:5f:8c:d8:aa:ad:aa:62:38:c8:78:e6:62:9c:62:b0:e2: 39:56:1f:98:95:db:ef:2f:85:5a:38:40:92:49:ac:0a:20:e4: 8a:06:2e:d2:e7:b0:88:1d:c0:14:a9:6b:55:44:28:a7:4f:cc: 01:1c:d7:00:ae:a1:cc:2d:42:f7:ce:29:1f:69:f7:b8:ce:0c: 0c:a3:46:50:fd:a2:da:19:35:4d:9b:0d:97:f7:2b:90:a6:87: ca:cf:16:ba:63:ce:6e:26:2e:46:b0:c8:1f:60:85:71:f1:db: 35:a2:1b:2f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpoWixHT3AHBhY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTZhYWNmNzItYTExYy00MGRjLWJhMTYtMDA1ZmVhNjg4MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFfbHjBWUiRmGr0xIe+aoconNzZmNHSShoL1 DBY8dTBaP5q60KHmROaedhyoG18i7KdWrw31+UJ0CXfWzaPdqsJUKvkO7+qSd4g0 /xtxz06N2zSdPycHnhLB2308s1MDWfXJmSTgw/Ft3j5bFf2pTszaGP6wMq20xwh9 SM7xLP30Yp7Pdt8dDK4k9H6YqFlv50iaq8UlL7byBsPHWsffTMu8jSXC71eqC0Qz KglbRksUkglmoTRAYguju9bOkJVJqpnqrm72RDKlkaXa1EJFSoE8PKph/wdrCkju mSzG+p17DgEIQglXjjV58d7xtZlgWEaa7Go+sg0bjdE9khhxQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC3tx//PkRvfz7OqQw30ppfTgXXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY5NmQyYmYtZDc1Zi0z MWExLWI2YzItNjE2YjEwNzBjYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiqAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIv//i5XkUnXn0Zu/cYFvef2i7Tj88VALDYx5U3hQRYB3CxMl6hLj lTcRcM2tFYmYc9KHMxYMkW+B+wsipkcRphBzDfS5j6jMODboyUwBqGt/t7hwbxgX u/K4/xY5HIyjD7+cU+UPftfE2Q2QLwT9IcLHtxgdo5UrdwqdLSE9a1O+Dc5QlRZg 0atBeVOb5JtdBcdfjNiqrapiOMh45mKcYrDiOVYfmJXb7y+FWjhAkkmsCiDkigYu 0uewiB3AFKlrVUQop0/MARzXAK6hzC1C984pH2n3uM4MDKNGUP2i2hk1TZsNl/cr kKaHys8WumPObiYuRrDIH2CFcfHbNaIbLw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:44 2026 by rpki-client