This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa File: 1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa (raw, json) Hash identifier: 4YkqmnthT52uECcWbF5r+J7lNuHD5Vp1qtofpjp9DEc= Subject key identifier: F1:25:C9:4C:C4:2E:F7:59:6F:11:DE:81:23:67:A2:D1:24:33:92:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A8227F202FEBFBA3478300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:22:7f:20:2f:eb:fb:a3:47:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=fa0f59a3-0878-4ac3-a1c3-17143d6897c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:8d:58:e5:ea:39:7c:3e:5e:0a:51:3c:0d: 83:81:1e:a7:6c:8d:57:e2:62:c0:e3:7f:cd:8f:46: b9:24:07:fc:60:91:6a:80:58:46:a2:34:d1:fa:3e: f3:c5:6c:7e:2e:62:73:ad:9e:74:25:20:21:28:a2: f0:15:34:84:52:06:1a:c5:7e:1b:a2:33:52:75:47: 31:ee:14:f5:fb:df:90:08:1e:0f:ae:ba:34:2a:c8: 06:f0:97:77:e4:f1:28:b6:b1:5b:6b:64:d0:4a:dc: c5:a0:f7:86:f4:25:a9:ee:34:8f:c9:8b:8d:9d:80: 6b:ee:12:aa:2e:c6:40:91:e4:bc:8a:0f:8e:21:3b: 92:99:11:ac:75:6f:54:da:49:aa:3a:4c:49:0b:07: fb:fb:fb:9e:6f:c1:f6:b4:39:42:47:e8:62:95:aa: a7:fb:16:eb:f4:e4:ab:eb:60:e9:2a:0b:48:ad:8d: 74:16:d7:0c:cd:88:a5:ff:3b:0d:f9:7a:5e:0e:bd: 58:00:75:9d:28:cc:22:60:b6:35:1d:ff:00:25:2c: 99:3a:55:28:bf:25:a1:d6:7c:e3:2f:e6:c9:6a:b2: 08:d5:16:17:7e:8a:f2:63:cc:26:77:bf:c4:c5:03: 1c:8e:9b:24:df:27:18:f2:10:92:a5:63:a2:ce:f3: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:C9:4C:C4:2E:F7:59:6F:11:DE:81:23:67:A2:D1:24:33:92:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:db:9a:08:26:ec:cd:7b:92:f9:7f:6d:5e:16:d4:79:01:d1: aa:fe:f6:89:ab:2b:46:2c:92:af:53:cd:10:4d:85:be:89:aa: 25:5e:3d:c5:e6:77:ae:8e:aa:1f:97:40:ed:4a:dd:77:91:ee: 16:51:2f:11:52:3c:a8:ea:d9:be:d9:c8:54:ee:49:29:3a:45: b2:32:cd:d9:3a:56:d1:e8:00:02:f7:6e:89:d1:b3:f6:3e:ce: b5:83:a2:09:c2:46:ec:c5:47:9b:4d:7c:e0:1d:7e:3d:fa:65: 60:5e:50:56:97:d3:cd:df:b9:f4:f9:c1:e4:d4:dd:50:04:7c: 3e:f1:04:c5:d8:20:1a:cc:dc:cf:ab:13:5b:41:19:c4:90:e4: f1:43:15:f0:e6:95:65:a7:06:70:b4:8d:a9:50:7c:86:cc:45: 50:f0:d9:84:72:b6:17:7a:7a:cc:12:58:6d:f6:ec:5e:cf:aa: e9:f5:7e:a4:ad:d3:98:92:40:f9:9a:b5:24:7e:4f:4f:d2:5d: b5:a3:92:32:4c:88:b5:a6:02:dc:f8:62:5c:b5:21:89:92:ec: 40:12:36:3a:61:be:7d:7c:03:0f:ef:f3:d0:30:51:9c:01:a5: 7e:28:7b:54:cc:c1:5f:b8:9e:10:69:68:77:49:d9:d4:ba:03: cf:50:e7:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCJ/IC/r+6NHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZmEwZjU5YTMtMDg3OC00YWMzLWExYzMtMTcxNDNkNjg5N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmNWOXqOXw+XgpRPA2DgR6nbI1X4mLA43/N j0a5JAf8YJFqgFhGojTR+j7zxWx+LmJzrZ50JSAhKKLwFTSEUgYaxX4bojNSdUcx 7hT1+9+QCB4Prro0KsgG8Jd35PEotrFba2TQStzFoPeG9CWp7jSPyYuNnYBr7hKq LsZAkeS8ig+OITuSmRGsdW9U2kmqOkxJCwf7+/ueb8H2tDlCR+hilaqn+xbr9OSr 62DpKgtIrY10FtcMzYil/zsN+XpeDr1YAHWdKMwiYLY1Hf8AJSyZOlUovyWh1nzj L+bJarII1RYXforyY8wmd7/ExQMcjpsk3ycY8hCSpWOizvM7uwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPElyUzELvdZbxHegSNnotEkM5LRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWQ3OGE5N2MtN2ZlMy0z NjBiLWFkOWQtMjJjOWM2Y2Y5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiuQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJ9uaCCbszXuS+X9tXhbUeQHRqv72iasrRiySr1PNEE2FvomqJV49 xeZ3ro6qH5dA7Urdd5HuFlEvEVI8qOrZvtnIVO5JKTpFsjLN2TpW0egAAvduidGz 9j7OtYOiCcJG7MVHm0184B1+PfplYF5QVpfTzd+59PnB5NTdUAR8PvEExdggGszc z6sTW0EZxJDk8UMV8OaVZacGcLSNqVB8hsxFUPDZhHK2F3p6zBJYbfbsXs+q6fV+ pK3TmJJA+Zq1JH5PT9JdtaOSMkyItaYC3PhiXLUhiZLsQBI2OmG+fXwDD+/z0DBR nAGlfih7VMzBX7ieEGlod0nZ1LoDz1DnRg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:19 2026 by rpki-client