This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa File: 1f98d05a-221a-3e67-a811-957ae99c4b9f.roa (raw, json) Hash identifier: K1jsd34bDreiiIv9WBnP96Ad2Im7kpR8yT5KRBLc1PI= Subject key identifier: AD:85:E3:D7:C0:6D:13:D9:E9:86:2C:25:8E:00:D7:6D:58:B1:52:5F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A668EF267355D24E9E9500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:68:ef:26:73:55:d2:4e:9e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=4b8ed302-1953-43d9-a638-c58a8969a002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f2:66:cb:2a:08:89:23:d6:81:7a:03:88:06: d5:da:ac:b5:78:5a:84:00:44:75:ff:fa:9c:28:0d: 65:12:88:3a:a6:f4:7c:87:52:1a:e7:11:db:9a:0a: 48:7b:23:db:cc:02:e4:bb:0b:a0:59:47:03:c9:d5: 37:45:dd:cf:3a:a8:0f:92:23:f1:34:3d:ae:e8:70: 2e:68:cb:1a:69:45:d8:76:b4:e8:1f:d8:88:fa:bc: b4:93:fc:bb:45:06:1f:d7:9e:1a:43:f3:ce:5f:ff: 70:29:c9:77:0e:40:25:81:52:33:9b:15:c2:b7:5e: 12:44:b0:29:11:5a:2f:dd:a1:e5:e1:ee:bb:9f:51: d9:fb:60:7c:e0:e2:94:9d:6e:5d:26:5f:a2:2e:c2: cb:43:54:bf:8b:09:10:bd:4d:30:60:4d:7f:db:18: e2:a0:85:c5:28:1b:45:9a:b2:f9:e8:52:ed:bb:04: 8a:b6:df:f2:2f:7d:b6:4c:39:9a:f1:78:18:69:32: e1:d6:c7:50:c3:fe:fd:de:be:b0:e4:f8:8b:58:59: a3:94:03:88:63:84:f6:e6:85:74:fa:37:0c:75:e6: aa:b2:5c:2f:1e:30:bd:e9:59:a6:a6:57:7e:dd:62: 89:e5:d5:ff:41:bb:80:45:79:c5:9b:6f:db:5d:ac: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:E3:D7:C0:6D:13:D9:E9:86:2C:25:8E:00:D7:6D:58:B1:52:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:98:38:9b:e3:1e:fa:1a:3a:84:4d:8f:db:98:5c:e1:70: 40:c4:33:a1:77:3e:7b:a3:63:42:f2:63:d6:fc:f9:10:e2:3a: 0e:30:58:5a:d3:34:bf:7a:b9:7d:6f:74:78:de:8d:57:e9:25: e6:b0:ac:96:ba:6f:04:63:3a:0b:d8:f6:75:fd:eb:b5:93:63: 91:dc:1a:e2:c5:20:b0:f8:e5:a4:76:bd:d1:ef:04:f8:77:d1: d5:c2:96:87:e4:cc:79:ba:ee:0e:46:79:7f:87:8b:35:d8:a0: e4:fc:30:48:8a:8f:fe:4f:04:d2:58:b2:ca:e5:5a:88:5a:a2: f9:87:ac:9a:4c:d4:ea:84:f3:3c:f4:63:a3:05:3e:24:4a:57: 58:39:3b:65:a5:29:b4:17:c5:f3:60:24:bf:89:87:0d:a2:0c: 76:7d:d8:49:03:c2:ed:df:5c:b9:81:c7:a2:53:23:4f:03:bf: bf:20:40:20:ee:ac:cb:cf:d6:91:96:8d:ae:b3:1d:43:45:67: f7:06:fe:b4:03:36:0f:16:ae:b5:20:b7:a0:62:0e:79:48:4b: 40:84:d3:0f:b5:21:9d:d9:a6:cf:4b:c5:33:90:3d:cc:ad:d3: b5:91:a2:94:27:35:3b:b1:da:75:61:87:ba:98:d6:93:05:9b: 4c:bc:ab:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpmjvJnNV0k6elQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NGI4ZWQzMDItMTk1My00M2Q5LWE2MzgtYzU4YTg5NjlhMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fJmyyoIiSPWgXoDiAbV2qy1eFqEAER1//qc KA1lEog6pvR8h1Ia5xHbmgpIeyPbzALkuwugWUcDydU3Rd3POqgPkiPxND2u6HAu aMsaaUXYdrToH9iI+ry0k/y7RQYf154aQ/POX/9wKcl3DkAlgVIzmxXCt14SRLAp EVov3aHl4e67n1HZ+2B84OKUnW5dJl+iLsLLQ1S/iwkQvU0wYE1/2xjioIXFKBtF mrL56FLtuwSKtt/yL322TDma8XgYaTLh1sdQw/793r6w5PiLWFmjlAOIY4T25oV0 +jcMdeaqslwvHjC96Vmmpld+3WKJ5dX/QbuARXnFm2/bXawx+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK2F49fAbRPZ6YYsJY4A121YsVJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWY5OGQwNWEtMjIxYS0z ZTY3LWE4MTEtOTU3YWU5OWM0YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATDSYOJvjHvoaOoRNj9uYXOFwQMQzoXc+e6NjQvJj1vz5EOI6DjBY WtM0v3q5fW90eN6NV+kl5rCslrpvBGM6C9j2df3rtZNjkdwa4sUgsPjlpHa90e8E +HfR1cKWh+TMebruDkZ5f4eLNdig5PwwSIqP/k8E0liyyuVaiFqi+YesmkzU6oTz PPRjowU+JEpXWDk7ZaUptBfF82Akv4mHDaIMdn3YSQPC7d9cuYHHolMjTwO/vyBA IO6sy8/WkZaNrrMdQ0Vn9wb+tAM2DxautSC3oGIOeUhLQITTD7Uhndmmz0vFM5A9 zK3TtZGilCc1O7HadWGHupjWkwWbTLyrXA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:08 2026 by rpki-client