This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa File: 1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa (raw, json) Hash identifier: GwUVNdwsE3cxRZALHLzinE3nTaTg9e1qyR0xzCgYcsQ= Subject key identifier: C4:CD:CC:E2:97:DE:18:9C:8D:19:2C:86:62:B4:78:1B:94:47:B1:E7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82B2B9949B80B9B4F9E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:6800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2b:2b:99:49:b8:0b:9b:4f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=af6ec694-5443-4ec5-966a-6ec22d08bdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:69:0e:fc:f0:ec:9b:b0:99:7f:4f:c5:61: 2e:40:ef:19:15:c7:36:73:68:21:5a:b0:9c:bc:fd: d5:e1:4d:e5:55:01:6b:bd:85:07:57:1c:3f:56:f0: 4f:9b:c4:14:e3:9f:37:74:0a:d7:8a:f9:f6:81:c2: 3e:67:76:ab:1b:3e:43:d7:28:75:1e:5b:7d:f6:12: 61:ce:56:15:49:ff:e9:4c:41:b0:08:0b:96:eb:da: c2:7c:a8:8f:72:d6:2b:74:a6:5f:b6:d5:8b:37:79: d1:f0:4a:01:0b:d0:f9:9b:ce:a0:9a:62:6a:b8:e4: 6f:ea:49:6d:74:95:51:4f:72:c6:6d:e6:19:cb:0f: d6:5f:8e:be:e8:d0:e3:a9:4a:05:cb:ba:11:ad:69: ec:fe:8c:49:6d:81:77:02:4b:70:91:36:18:f7:04: ee:9f:69:00:79:fa:59:d5:31:48:fa:a3:c4:02:45: 3c:7d:1d:3e:00:76:3d:09:26:1e:8e:b3:e7:06:22: da:e7:80:47:cf:5a:dd:7f:1f:e4:17:04:31:75:db: e2:43:34:0f:2b:2c:6a:2e:79:ec:35:87:fd:00:99: 81:4f:4b:92:0e:a3:03:96:5d:1a:44:00:63:df:af: e4:c3:09:29:69:61:02:57:77:bb:83:51:a3:5b:fe: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:CC:E2:97:DE:18:9C:8D:19:2C:86:62:B4:78:1B:94:47:B1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:6800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:36:5b:8b:8b:ee:08:0d:96:79:79:ad:ce:fc:2f:08:59:2e: 53:52:3e:64:1d:2b:e3:1c:0d:f0:51:ea:af:64:af:93:82:2a: 21:29:59:94:ac:5e:04:09:5b:df:03:c0:6e:d6:93:64:4b:b1: e1:59:d1:6c:9a:af:64:e9:68:49:a3:6b:94:14:09:2d:9f:9b: bf:9b:27:c0:46:70:86:23:8d:31:fe:3b:64:9a:91:7a:4b:02: 10:f3:9b:2d:e2:a7:c7:5f:39:a9:6f:f0:6e:a9:31:ba:9a:c8: 71:b7:60:99:24:78:51:c8:1b:31:8d:01:d2:cb:da:f6:a7:19: ab:4f:9c:48:f8:6f:28:6a:95:2f:6d:42:7a:34:c5:c4:94:ec: aa:61:cd:11:df:90:54:eb:3e:d0:a8:24:9b:ed:22:23:45:33: 31:8c:81:52:e6:73:d0:39:a4:96:4c:90:94:cf:73:e5:e7:de: 2e:56:88:0e:38:45:13:2a:3f:09:0c:a5:80:27:20:03:04:ef: 9f:48:c0:e3:38:e8:9a:2b:a6:3c:e1:82:39:90:18:a1:79:26: 83:5d:81:60:cf:38:40:aa:93:95:8f:4e:7a:a1:5c:38:a3:f1: c9:22:92:dd:29:ed:c7:1b:6c:52:f8:bb:71:1e:ba:54:30:99: 3b:d5:99:3a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCsrmUm4C5tPnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YWY2ZWM2OTQtNTQ0My00ZWM1LTk2NmEtNmVjMjJkMDhiZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt85pDvzw7JuwmX9PxWEuQO8ZFcc2c2ghWrCc vP3V4U3lVQFrvYUHVxw/VvBPm8QU4583dArXivn2gcI+Z3arGz5D1yh1Hlt99hJh zlYVSf/pTEGwCAuW69rCfKiPctYrdKZfttWLN3nR8EoBC9D5m86gmmJquORv6klt dJVRT3LGbeYZyw/WX46+6NDjqUoFy7oRrWns/oxJbYF3AktwkTYY9wTun2kAefpZ 1TFI+qPEAkU8fR0+AHY9CSYejrPnBiLa54BHz1rdfx/kFwQxddviQzQPKyxqLnns NYf9AJmBT0uSDqMDll0aRABj36/kwwkpaWECV3e7g1GjW/7q1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMTNzOKX3hicjRkshmK0eBuUR7HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTcwOWZhNGMtYmI4Ni0z ZmQyLTlkMmQtNzY1MWQwMmRlMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuimgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUzZbi4vuCA2WeXmtzvwvCFkuU1I+ZB0r4xwN8FHqr2Svk4IqISlZ lKxeBAlb3wPAbtaTZEux4VnRbJqvZOloSaNrlBQJLZ+bv5snwEZwhiONMf47ZJqR eksCEPObLeKnx185qW/wbqkxuprIcbdgmSR4UcgbMY0B0sva9qcZq0+cSPhvKGqV L21CejTFxJTsqmHNEd+QVOs+0Kgkm+0iI0UzMYyBUuZz0DmklkyQlM9z5efeLlaI DjhFEyo/CQylgCcgAwTvn0jA4zjomiumPOGCOZAYoXkmg12BYM84QKqTlY9OeqFc OKPxySKS3SntxxtsUvi7cR66VDCZO9WZOg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:07 2026 by rpki-client