This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa File: 13f1be87-f0fe-33e2-bb02-2b398d03b667.roa (raw, json) Hash identifier: jxk4Hu8RBHy0/FYtsCTdJxd2mYbvJtBuVYLpOB6IuBU= Subject key identifier: 95:FD:B9:E3:3C:FD:A5:B7:05:1B:44:34:3D:63:A6:50:A0:E3:C2:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBCEA3309FC38C42FF1DD0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:3800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ce:a3:30:9f:c3:8c:42:ff:1d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=002cd9b4-e137-4c04-ba79-d01fcd875fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:f8:7f:de:02:df:93:3f:28:2b:0b:0c:8c: 6d:33:67:cc:55:2d:f2:2a:56:25:af:52:ed:9d:02: a6:2b:cc:d6:31:39:dc:f3:c5:bc:44:88:7e:0d:ed: 62:68:63:a4:c1:ec:63:d3:b4:22:bc:99:a9:b8:c3: 5c:9f:6b:cf:c5:d6:3b:75:dd:dc:e8:c3:6a:7f:df: c7:66:8e:59:ef:a2:7f:cf:c9:ce:91:f6:13:44:18: 8e:0c:ca:e1:bb:c9:10:3d:75:2d:3e:2a:0b:0b:c3: cb:a7:e4:14:b7:c8:e2:d1:82:0e:e4:a8:71:5b:bf: c8:da:01:a0:dc:e1:7b:81:f9:a3:2b:f6:35:7f:b9: cb:1a:ef:8c:5d:8a:79:8b:21:a9:e2:32:52:09:c9: 30:03:02:b1:5f:78:ea:16:45:c0:61:88:2a:18:b6: f6:88:63:53:41:0f:c1:43:29:0e:b2:19:e0:6a:68: 69:be:44:e2:96:a2:24:b8:5f:ef:90:90:68:d1:f6: 5f:8e:01:53:8c:14:15:7e:fa:a9:e3:68:52:90:6c: 41:a3:e0:4a:fa:3a:af:f5:4b:de:54:26:c9:5b:45: e6:f2:0c:12:84:77:15:93:60:6b:c6:06:ea:4c:62: 55:2a:a6:57:ef:6d:6e:90:97:10:b3:87:7e:7a:ff: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:B9:E3:3C:FD:A5:B7:05:1B:44:34:3D:63:A6:50:A0:E3:C2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f3:53:98:71:d9:4a:34:88:07:1e:55:7f:67:94:a8:6c:a2: 29:10:6a:d4:16:ff:49:1f:eb:62:fc:bf:38:aa:23:8c:82:f6: ed:11:be:4e:ab:b7:8a:00:16:bc:d7:f3:20:b3:13:5e:d7:d1: c1:69:08:88:50:2c:2a:82:74:bb:6b:23:58:0e:a1:5b:9d:1d: 5f:60:1e:b0:df:87:a5:27:7f:51:ff:4d:50:0c:97:7a:35:90: 1c:d7:3c:4d:68:74:c8:e2:ea:01:2c:f9:17:ef:b6:a2:a0:e0: 4d:c5:08:6b:3a:8c:cb:d9:6a:e4:08:3b:90:ea:58:8c:62:d6: ee:64:45:42:4a:48:5a:50:6c:ef:57:5c:07:9c:87:d0:e8:b6: c1:06:a0:3c:1d:5e:83:55:90:d3:76:e7:a8:81:93:8f:41:9c: 95:c3:e7:f0:d1:9c:33:11:25:cd:1f:4d:b6:83:de:fd:d6:4c: 69:43:67:4d:5c:45:21:fb:b4:10:81:e4:0a:47:c9:f4:c5:d4: 5d:e2:8f:a9:f8:36:98:ea:05:a0:86:a2:24:5e:df:d5:ed:a5: 21:32:0d:86:e1:ae:1f:57:aa:df:76:c4:ae:6c:8d:c1:c2:16: cc:fa:1e:25:ba:4e:0b:20:f2:4b:c2:46:c5:40:e6:63:7a:84: c3:26:e4:d7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC286jMJ/DjEL/HdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDAyY2Q5YjQtZTEzNy00YzA0LWJhNzktZDAxZmNkODc1ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoH4f94C35M/KCsLDIxtM2fMVS3yKlYlr1Lt nQKmK8zWMTnc88W8RIh+De1iaGOkwexj07QivJmpuMNcn2vPxdY7dd3c6MNqf9/H Zo5Z76J/z8nOkfYTRBiODMrhu8kQPXUtPioLC8PLp+QUt8ji0YIO5KhxW7/I2gGg 3OF7gfmjK/Y1f7nLGu+MXYp5iyGp4jJSCckwAwKxX3jqFkXAYYgqGLb2iGNTQQ/B QykOshngamhpvkTilqIkuF/vkJBo0fZfjgFTjBQVfvqp42hSkGxBo+BK+jqv9Uve VCbJW0Xm8gwShHcVk2BrxgbqTGJVKqZX721ukJcQs4d+ev/qMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJX9ueM8/aW3BRtEND1jplCg48IFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTNmMWJlODctZjBmZS0z M2UyLWJiMDItMmIzOThkMDNiNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd/NTmHHZSjSIBx5Vf2eUqGyiKRBq1Bb/SR/rYvy/OKojjIL27RG+ Tqu3igAWvNfzILMTXtfRwWkIiFAsKoJ0u2sjWA6hW50dX2AesN+HpSd/Uf9NUAyX ejWQHNc8TWh0yOLqASz5F++2oqDgTcUIazqMy9lq5Ag7kOpYjGLW7mRFQkpIWlBs 71dcB5yH0Oi2wQagPB1eg1WQ03bnqIGTj0GclcPn8NGcMxElzR9NtoPe/dZMaUNn TVxFIfu0EIHkCkfJ9MXUXeKPqfg2mOoFoIaiJF7f1e2lITINhuGuH1eq33bErmyN wcIWzPoeJbpOCyDyS8JGxUDmY3qEwybk1w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:50 2026 by rpki-client