This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa
File: 22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa (raw, json)
Hash identifier: gyZducKzCs8c/jptINWUyI7DGIW3ie0ThQEu7Hz2t94=
Subject key identifier: 67:6A:FF:7D:63:96:96:D4:0C:DF:3A:D5:39:27:E3:37:BC:B8:D8:A2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C42DBF91F669802BE4E84D680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e8b:d400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:f9:1f:66:98:02:be:4e:84:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=42582e8d-0ea4-4531-ae7d-1e66b4ce2bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:53:f5:63:31:86:72:f8:a2:7e:b0:0a:f6:
85:43:41:18:be:f5:b6:8b:8b:90:17:7a:8b:e6:e5:
dd:f9:ec:b1:d7:5d:fb:32:c4:88:8c:1a:31:fd:f1:
85:9e:d7:5e:75:2d:93:20:97:5c:74:9a:7a:78:9d:
d3:28:f5:6e:04:72:2c:ae:fe:49:b7:93:ec:5e:22:
20:d8:83:f4:f6:e9:bc:75:11:9d:8a:a9:ea:5a:43:
8a:cf:64:e9:f9:25:0b:5b:65:48:d0:4d:38:e6:f0:
4c:f9:c0:5d:4d:6c:61:99:c9:32:8d:7f:bf:7c:86:
95:d3:6c:ed:97:1b:b5:49:62:c9:d3:71:c3:ec:67:
6c:cc:45:50:9a:76:37:8c:b0:da:98:69:ea:d4:e4:
db:5d:1f:d5:14:8e:6e:bb:37:f3:ca:05:53:80:47:
1f:32:0e:bb:f6:a7:2d:58:ed:8f:aa:72:d0:c2:2d:
ae:4f:57:af:b1:eb:0a:2b:f8:7d:79:3a:83:ca:e9:
4b:bf:36:96:ce:96:8e:17:51:02:5b:31:df:75:2f:
ac:81:e1:bc:83:1d:73:46:fb:c9:91:0f:b3:70:34:
ba:96:f0:0f:51:20:d6:a9:9c:43:8a:b8:8e:14:59:
01:14:13:eb:f0:aa:cc:85:8a:8e:f7:06:83:f9:40:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:FF:7D:63:96:96:D4:0C:DF:3A:D5:39:27:E3:37:BC:B8:D8:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:d400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:21:c5:d5:b5:21:5a:68:d7:c8:ae:3a:c9:f9:24:ee:14:2c:
97:42:b4:35:81:88:c6:74:14:8c:db:6e:7d:00:a1:aa:ad:ce:
94:67:d9:20:99:54:55:3b:a0:62:ec:fd:16:d4:96:f9:c5:17:
ce:37:88:52:01:db:54:b5:a4:2f:63:1e:04:ba:e0:60:7b:5a:
63:3a:01:fb:14:2f:81:fa:88:80:b0:5a:92:e3:23:a3:c2:ab:
ad:c3:0b:7b:f1:81:0c:70:ca:bc:87:1c:ae:c1:5f:7e:4c:05:
44:b2:b7:e8:a8:51:98:93:de:10:c6:be:ed:87:cd:b6:eb:f8:
46:93:27:0f:f8:64:11:4a:0a:6d:b9:70:fc:5e:3b:e4:f0:7b:
85:81:ea:2e:1b:6c:67:72:08:b9:80:92:77:9c:0b:9b:a2:43:
83:1a:89:0e:95:13:ee:1e:05:b6:74:70:bc:c1:a3:a7:e0:88:
48:c4:30:93:86:56:84:eb:e9:fc:4e:e7:00:73:39:78:56:fe:
79:ce:2e:f6:1f:65:f2:07:f2:ec:ef:36:a4:75:97:19:9d:4a:
3b:70:d2:9a:de:6d:32:41:d2:7f:6e:1a:0a:03:e1:27:6e:e1:
21:46:e1:68:c5:71:39:76:33:c7:f7:67:5c:e1:6e:25:56:54:
a1:d7:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:25:54 2026 by rpki-client