This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa File: 1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa (raw, json) Hash identifier: f0j3GHNQSPrz4utaFVpCPnQaN01ndo+DxzgE7hMYZFk= Subject key identifier: 1D:3B:B3:83:C1:52:95:7B:7F:36:D1:C6:AC:29:7A:B7:3D:52:77:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BCF0070ADDF6928F15D704480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e87:c400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:70:ad:df:69:28:f1:5d:70:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=9405abd4-f718-4da7-b3ff-3fa0335901d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:52:e8:a4:3c:33:7f:6b:a1:14:8f:c5:55: 63:ea:1b:63:d3:b6:0f:dc:f0:46:a2:ea:fa:f2:21: 2c:a0:a9:77:cc:c7:38:f8:4f:99:e2:bb:11:80:42: 65:47:7d:8b:92:33:3f:7b:da:81:5b:02:4b:5c:cd: 6d:09:8e:0b:30:67:f8:19:db:ec:7a:81:e3:b4:07: f6:ba:9d:c0:71:4f:25:d9:a0:3d:bb:6a:3a:f8:88: 11:11:10:98:83:f8:13:22:8f:31:cc:26:1f:f8:39: c1:34:c0:45:5f:e6:f9:00:07:a1:0b:70:8e:83:5a: fc:ee:b2:da:6b:32:90:37:f5:19:6f:df:0f:d8:81: 04:3c:bb:d9:db:19:67:37:3d:be:bf:85:a8:fb:3b: 8a:e1:1b:65:8e:36:be:dd:f2:b9:4c:5e:0f:c8:d7: 7d:15:89:63:4d:bb:f0:70:8f:85:c7:8e:53:6c:53: 38:2a:6c:81:d0:ef:03:83:c0:f7:44:5c:0d:ac:6c: 28:60:89:06:d9:30:44:28:b6:97:04:bd:57:bd:08: 49:38:e3:ae:26:69:33:7c:35:6d:0b:c3:6d:fa:c3: 70:59:b5:2a:c9:4d:e3:88:93:54:cb:42:c3:63:13: 2a:11:18:a3:c8:01:86:ce:24:7e:11:2d:24:54:5e: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:B3:83:C1:52:95:7B:7F:36:D1:C6:AC:29:7A:B7:3D:52:77:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ed:28:5d:dc:ee:46:04:25:35:4a:08:60:45:75:b3:7c:d4: 3f:ec:e4:61:76:b9:d3:85:3c:ec:7c:cb:92:88:76:5c:d0:90: ab:11:76:c8:90:8d:05:cd:f8:a7:08:ed:fc:2d:ca:53:a4:1f: bb:a5:a3:1f:ab:0a:c8:8d:2e:c7:f2:7b:4b:39:8c:e4:ef:1c: 63:3d:30:8f:39:12:6b:4a:77:c9:76:95:94:85:08:ba:52:9d: 91:cd:de:44:3d:77:c5:7e:5e:59:85:d7:5b:4f:93:b4:bf:c1: 36:17:f8:5c:de:a8:e1:37:e5:f7:07:1d:88:50:91:b6:a7:9f: df:67:14:74:8d:89:2a:20:4c:56:fe:15:8e:17:ec:30:3d:32: 0a:9f:74:6e:de:1a:8e:69:67:95:84:79:5f:6b:e2:42:97:6b: db:3d:00:6f:a4:8c:8a:72:f8:e0:9a:71:c7:56:11:5f:a6:99: 32:12:5c:1f:11:b2:3e:eb:1f:e5:4b:03:7d:82:e4:70:2f:fe: fe:31:e1:cc:35:89:7f:7c:43:f9:0b:7c:fb:d0:8a:4f:31:d9: 67:a0:2a:ee:c5:2a:f5:9e:2e:fb:ae:14:ca:c7:08:ae:39:3f: 01:54:52:a8:51:95:0b:68:21:79:0e:71:63:f2:fa:00:eb:7e: 7a:48:c1:e7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvPAHCt32ko8V1wRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk OTQwNWFiZDQtZjcxOC00ZGE3LWIzZmYtM2ZhMDMzNTkwMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7tS6KQ8M39roRSPxVVj6htj07YP3PBGour6 8iEsoKl3zMc4+E+Z4rsRgEJlR32LkjM/e9qBWwJLXM1tCY4LMGf4GdvseoHjtAf2 up3AcU8l2aA9u2o6+IgRERCYg/gTIo8xzCYf+DnBNMBFX+b5AAehC3COg1r87rLa azKQN/UZb98P2IEEPLvZ2xlnNz2+v4Wo+zuK4Rtljja+3fK5TF4PyNd9FYljTbvw cI+Fx45TbFM4KmyB0O8Dg8D3RFwNrGwoYIkG2TBEKLaXBL1XvQhJOOOuJmkzfDVt C8Nt+sNwWbUqyU3jiJNUy0LDYxMqERijyAGGziR+ES0kVF7NLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB07s4PBUpV7fzbRxqwperc9UnfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWZkZjMyZTktMzc3Yi0z ZjFhLTg3ZDAtYTIyNzFhM2NjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASe0oXdzuRgQlNUoIYEV1s3zUP+zkYXa504U87HzLkoh2XNCQqxF2 yJCNBc34pwjt/C3KU6Qfu6WjH6sKyI0ux/J7SzmM5O8cYz0wjzkSa0p3yXaVlIUI ulKdkc3eRD13xX5eWYXXW0+TtL/BNhf4XN6o4Tfl9wcdiFCRtqef32cUdI2JKiBM Vv4VjhfsMD0yCp90bt4ajmlnlYR5X2viQpdr2z0Ab6SMinL44Jpxx1YRX6aZMhJc HxGyPusf5UsDfYLkcC/+/jHhzDWJf3xD+Qt8+9CKTzHZZ6Aq7sUq9Z4u+64UyscI rjk/AVRSqFGVC2gheQ5xY/L6AOt+ekjB5w== -----END CERTIFICATE-----Generated at Tue Nov 25 17:03:27 2025 by rpki-client