This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa File: 1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa (raw, json) Hash identifier: EIZRKnI0Iy+wMpAFXb1nUxWH8Pf/jVCio97GXk5KEM8= Subject key identifier: 2D:E1:74:E8:D6:3F:4D:AD:84:20:78:34:F8:06:30:83:5F:85:41:61 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A81E96EF75A442FFB45530 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1e:96:ef:75:a4:42:ff:b4:55:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d9511d12-d06d-4747-9c98-587b5af931fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:41:e9:49:49:45:ee:72:20:07:3f:07:ed: 60:8b:7d:a3:2d:60:5b:1c:99:3b:75:ff:45:99:82: 24:b9:72:56:94:aa:d3:e7:3f:7e:7d:56:c8:04:af: 5d:e8:d1:48:8c:b3:a7:e5:42:d0:a2:ca:36:29:0c: b5:ff:94:02:4c:c3:ca:43:81:af:9c:09:c9:d0:d3: de:a4:3c:db:0a:58:78:79:b3:6e:a7:67:2b:35:e0: 53:d4:2b:ea:17:44:15:39:6d:df:58:4b:c3:46:87: b2:a8:bb:83:43:a6:bf:60:6c:32:49:91:c2:bb:5b: ed:6f:b9:74:47:d0:d7:88:8c:bd:b1:6f:ad:10:4a: d6:63:87:e3:3d:d3:5e:ef:76:ca:15:2b:6b:ff:6d: fe:da:02:47:5f:83:8b:43:49:55:c0:52:05:88:75: f5:03:0a:dc:aa:07:ec:7e:82:1c:6c:45:a0:72:11: f1:cc:ac:2c:f5:b8:98:87:99:66:e5:9b:ea:a4:fc: cb:56:d3:7e:93:db:b9:58:7b:be:bc:49:74:0b:b9: 0a:33:38:11:c4:1d:d9:43:57:3a:79:82:0f:e1:38: 7b:e6:4e:de:c5:0b:5a:f6:df:1d:c2:6f:b9:46:01: 52:b4:1c:61:59:b8:bb:e9:74:0a:04:9f:66:7f:7b: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E1:74:E8:D6:3F:4D:AD:84:20:78:34:F8:06:30:83:5F:85:41:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c7:83:a4:0b:46:f1:80:7c:17:f5:a6:60:e5:03:bf:cf:73: 8e:21:42:15:75:3c:aa:63:d7:81:8d:71:07:c1:27:92:83:ef: f0:f3:ea:be:8f:14:32:dd:d9:ea:49:51:1a:a5:84:50:c5:ba: 5c:81:f4:83:d3:7a:c4:54:e3:98:24:13:ad:66:da:20:79:30: 21:35:40:2f:3e:e4:5c:0d:0e:ea:d5:d0:fe:95:d1:31:75:9e: 57:49:cb:47:a3:2c:99:19:b7:c7:db:b7:9d:88:40:26:8f:6a: 50:94:77:b1:f3:20:9f:60:c2:f7:32:04:16:ad:1b:1a:a4:45: eb:b0:6e:ea:9b:cf:a0:74:45:7e:2b:31:5b:b4:8a:6b:86:71: ad:cb:89:fb:33:3c:09:d1:bb:aa:a3:69:2c:7f:a9:8b:4e:9b: 81:e2:0b:11:72:ec:04:db:71:29:20:36:68:e4:00:09:5a:04: 77:69:62:8f:b0:1a:ed:c9:0e:9c:22:70:06:2c:c9:bb:46:77: 49:73:df:73:be:f4:ea:09:14:b1:fe:ac:1c:17:38:0d:a2:0f: c7:6d:9e:e5:65:5f:6a:4d:d7:da:33:00:d2:d0:4b:f7:fa:0b: 45:ce:ba:b9:dc:ac:de:37:d7:ed:ae:a8:6c:e9:22:6d:80:ee: d7:71:7a:82 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqB6W73WkQv+0VTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDk1MTFkMTItZDA2ZC00NzQ3LTljOTgtNTg3YjVhZjkzMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh9B6UlJRe5yIAc/B+1gi32jLWBbHJk7df9F mYIkuXJWlKrT5z9+fVbIBK9d6NFIjLOn5ULQoso2KQy1/5QCTMPKQ4GvnAnJ0NPe pDzbClh4ebNup2crNeBT1CvqF0QVOW3fWEvDRoeyqLuDQ6a/YGwySZHCu1vtb7l0 R9DXiIy9sW+tEErWY4fjPdNe73bKFStr/23+2gJHX4OLQ0lVwFIFiHX1Awrcqgfs foIcbEWgchHxzKws9biYh5lm5ZvqpPzLVtN+k9u5WHu+vEl0C7kKMzgRxB3ZQ1c6 eYIP4Th75k7exQta9t8dwm+5RgFStBxhWbi76XQKBJ9mf3tofQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC3hdOjWP02thCB4NPgGMINfhUFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWZkYTE5ZDMtMDBmZC0z NzVlLWI2ODgtNGQzYzNiNzRiZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV8eDpAtG8YB8F/WmYOUDv89zjiFCFXU8qmPXgY1xB8EnkoPv8PPq vo8UMt3Z6klRGqWEUMW6XIH0g9N6xFTjmCQTrWbaIHkwITVALz7kXA0O6tXQ/pXR MXWeV0nLR6MsmRm3x9u3nYhAJo9qUJR3sfMgn2DC9zIEFq0bGqRF67Bu6pvPoHRF fisxW7SKa4ZxrcuJ+zM8CdG7qqNpLH+pi06bgeILEXLsBNtxKSA2aOQACVoEd2li j7Aa7ckOnCJwBizJu0Z3SXPfc7706gkUsf6sHBc4DaIPx22e5WVfak3X2jMA0tBL 9/oLRc66udys3jfX7a6obOkibYDu13F6gg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:32 2026 by rpki-client