This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa File: 13729c5f-274c-34cc-a76f-119e8bfd7d29.roa (raw, json) Hash identifier: OQKy48Q1YmnuBebKPf/HaMqsuddnXUJ9N/3XKLlmsm0= Subject key identifier: FA:05:69:CA:0B:A0:81:41:F6:D0:BD:3F:13:EF:03:97:A3:5F:C8:71 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82B0C23544B9CB1F2D4C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2b:0c:23:54:4b:9c:b1:f2:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=0a9a1b20-f1c5-4940-81a9-48c662516afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:be:f1:5b:b3:d8:61:50:3a:c1:0e:51:b7: 00:4a:ff:e4:4f:69:7a:95:c0:42:10:2b:b4:5c:21: b2:1e:8c:2d:4f:4d:53:0e:b3:c9:35:be:dc:87:26: bf:90:03:de:ec:27:71:4b:b1:77:7c:60:be:73:20: 0e:b4:95:99:6c:bf:ff:cc:3f:5d:48:52:0f:95:49: b6:8f:9c:90:41:51:f3:ff:93:2c:b5:57:bd:02:db: c2:f3:39:bb:b9:48:d4:c9:2f:93:3c:58:51:a1:d4: 89:53:2a:e7:85:b9:8d:25:47:6b:96:72:2a:5c:01: b1:06:a1:1a:e4:40:33:25:d4:b7:63:76:3b:7c:6c: 22:bd:08:2a:5e:25:2d:fa:0e:73:9d:58:1a:4a:42: ca:5e:b0:12:5e:fb:c5:78:b6:c0:7f:82:75:36:8c: 7c:8c:df:7d:02:05:4b:bf:52:8d:fe:98:82:19:53: e2:a1:e7:b1:d2:81:85:f1:70:35:d9:3e:3b:7b:9e: 01:bc:9d:78:b4:b2:9b:87:79:ce:6f:51:11:f2:e9: 90:7d:c7:7e:cd:19:c1:b1:14:f9:5b:a3:f3:cb:8a: ef:42:84:c5:eb:46:a7:c5:81:f5:cd:d9:fc:58:e9: ff:48:33:19:7a:44:f2:42:68:10:9f:d7:7a:6a:c2: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:69:CA:0B:A0:81:41:F6:D0:BD:3F:13:EF:03:97:A3:5F:C8:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ca:8d:83:7f:5f:49:9a:26:8f:66:46:14:6f:e6:ad:bf:7d: 4a:50:b5:56:ad:c1:8b:de:5f:1a:23:f2:b8:e3:58:02:a6:fb: d0:3b:cb:98:38:60:97:cb:6d:3a:99:ce:c0:c3:1b:d3:eb:4b: 74:58:1a:de:ce:14:23:52:01:75:b3:27:1c:b8:b2:a0:10:79: 34:57:20:18:94:d4:71:1d:01:fc:18:51:60:06:68:dd:f8:b1: 8f:e2:f7:52:ac:97:e4:9b:70:86:3d:1f:14:f1:84:ae:db:92: 51:de:06:29:99:42:0e:00:5a:29:38:f8:69:62:00:64:d3:31: 50:a2:80:67:ea:5a:77:37:5a:78:7f:65:34:a8:77:20:d7:7b: 3f:ce:88:64:4c:21:05:9b:18:d2:2a:0d:e8:cf:4b:af:28:ad: 28:e5:9d:c7:fd:64:83:16:a4:af:b0:1c:8d:cd:01:d2:29:9d: 12:b4:29:fe:8d:b6:6e:08:92:dd:e0:19:eb:77:e3:ba:22:16: ab:31:dd:5b:1b:ae:21:70:db:88:fa:2e:9a:ef:f6:89:5b:b9: 35:db:21:3e:d7:f5:ba:6f:8f:1a:25:e4:7d:a9:d6:ca:cf:50: f8:cf:49:de:86:29:78:de:5c:76:a1:62:05:8f:0b:65:68:76: 50:64:a3:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCsMI1RLnLHy1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MGE5YTFiMjAtZjFjNS00OTQwLTgxYTktNDhjNjYyNTE2YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnq+8Vuz2GFQOsEOUbcASv/kT2l6lcBCECu0 XCGyHowtT01TDrPJNb7chya/kAPe7CdxS7F3fGC+cyAOtJWZbL//zD9dSFIPlUm2 j5yQQVHz/5MstVe9AtvC8zm7uUjUyS+TPFhRodSJUyrnhbmNJUdrlnIqXAGxBqEa 5EAzJdS3Y3Y7fGwivQgqXiUt+g5znVgaSkLKXrASXvvFeLbAf4J1Nox8jN99AgVL v1KN/piCGVPioeex0oGF8XA12T47e54BvJ14tLKbh3nOb1ER8umQfcd+zRnBsRT5 W6Pzy4rvQoTF60anxYH1zdn8WOn/SDMZekTyQmgQn9d6asI3RQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPoFacoLoIFB9tC9PxPvA5ejX8hxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTM3MjljNWYtMjc0Yy0z NGNjLWE3NmYtMTE5ZThiZmQ3ZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiSww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdsqNg39fSZomj2ZGFG/mrb99SlC1Vq3Bi95fGiPyuONYAqb70DvL mDhgl8ttOpnOwMMb0+tLdFga3s4UI1IBdbMnHLiyoBB5NFcgGJTUcR0B/BhRYAZo 3fixj+L3UqyX5Jtwhj0fFPGErtuSUd4GKZlCDgBaKTj4aWIAZNMxUKKAZ+padzda eH9lNKh3INd7P86IZEwhBZsY0ioN6M9LryitKOWdx/1kgxakr7Acjc0B0imdErQp /o22bgiS3eAZ63fjuiIWqzHdWxuuIXDbiPoumu/2iVu5NdshPtf1um+PGiXkfanW ys9Q+M9J3oYpeN5cdqFiBY8LZWh2UGSjmg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:16 2026 by rpki-client