This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa File: 23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa (raw, json) Hash identifier: cvnsrfzFf+Fy/4aqViXWb4DZC03ViCMm4rdBLhoVADM= Subject key identifier: 39:01:5C:18:9E:F8:80:13:6D:40:CF:4E:7C:80:5A:75:8B:71:0E:EC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A835F364CC3E80A1C5A4C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:5c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:35:f3:64:cc:3e:80:a1:c5:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5256df57-7dea-49b8-9654-a3592a5bca8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:f0:cc:1e:66:87:f4:5e:03:97:af:63:20: 37:f4:85:08:9e:e9:03:a4:2c:d0:77:bd:85:36:8c: d4:57:05:4c:ab:81:31:8e:f2:64:9e:85:22:65:84: 12:3b:67:24:a8:a4:0d:03:15:2c:6c:70:49:29:0b: 0d:e3:7e:b0:b2:97:57:a6:fb:06:1c:1f:55:5d:af: 7c:7b:c1:b4:69:74:e0:01:c8:73:52:1d:56:c5:2d: ea:c8:e6:f2:d7:78:2b:40:00:18:05:5b:82:00:94: 15:09:30:e8:bd:fc:95:b3:88:6b:99:08:f6:dd:5a: 61:a6:ec:f2:1a:f4:93:39:bb:07:6c:89:16:6d:2b: 59:3d:ca:cd:4c:a9:86:fc:43:02:1b:4a:a1:02:4a: a4:4d:58:3c:7c:09:95:d5:fd:34:73:90:07:ed:d3: b5:b0:3a:ef:e0:60:c3:14:e8:93:c9:68:4c:57:fd: da:74:11:74:a4:70:e6:09:e7:f9:d2:bd:6f:b3:9e: 7b:fe:e2:ef:be:42:c7:e6:a7:67:76:2e:1a:2f:a4: 43:6b:e6:cf:ea:a1:b2:02:af:83:9d:d0:30:18:2a: 56:da:6f:43:fc:e3:3a:5e:84:0e:df:fb:16:a4:c9: 25:a6:52:aa:06:2b:02:31:76:da:26:4b:8b:58:4a: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:01:5C:18:9E:F8:80:13:6D:40:CF:4E:7C:80:5A:75:8B:71:0E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:5c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:dc:d0:f4:33:46:6c:a0:55:39:5a:ff:54:21:72:44:c5:34: b6:c5:86:36:46:b6:18:bc:dc:dd:60:a2:6c:39:7f:d9:e0:4d: 66:9e:58:9b:9a:40:43:72:f6:0b:c7:86:78:87:71:89:49:9c: ba:55:55:c0:72:75:c1:38:69:a4:51:41:f3:3c:d7:c2:fe:df: 5d:fc:62:72:b3:d6:40:57:1c:dd:b7:7e:ba:8b:d1:3c:28:82: 6c:ea:cf:e3:3d:b5:01:8d:54:f4:4b:09:a1:a3:44:15:87:fb: f0:63:80:22:05:aa:52:d1:f0:a3:f3:c4:b1:7f:a5:8c:ea:7b: 40:45:d5:32:b9:f5:08:b8:1a:4b:f6:02:45:4d:ea:91:9c:24: 91:54:8c:e0:a3:1a:b7:69:c2:10:6a:78:1c:3f:79:91:18:90: 0f:0e:59:72:20:d4:29:8c:69:8f:e6:58:b8:8b:c8:e7:48:c5: 2b:44:fc:35:d6:d4:56:3e:29:81:d2:de:23:6f:41:25:8e:1f: c9:2a:64:5c:4a:77:a1:cd:ab:9e:fe:89:6f:82:ad:ae:1a:07: b6:4a:52:cb:d0:8e:95:83:6c:cd:7a:7e:8d:8a:c7:ae:83:eb: 80:58:b5:0e:30:25:71:1c:b9:f5:d5:07:ce:0c:9c:01:f0:26: e4:27:a0:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDXzZMw+gKHFpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTI1NmRmNTctN2RlYS00OWI4LTk2NTQtYTM1OTJhNWJjYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtHwzB5mh/ReA5evYyA39IUInukDpCzQd72F NozUVwVMq4ExjvJknoUiZYQSO2ckqKQNAxUsbHBJKQsN436wspdXpvsGHB9VXa98 e8G0aXTgAchzUh1WxS3qyOby13grQAAYBVuCAJQVCTDovfyVs4hrmQj23Vphpuzy GvSTObsHbIkWbStZPcrNTKmG/EMCG0qhAkqkTVg8fAmV1f00c5AH7dO1sDrv4GDD FOiTyWhMV/3adBF0pHDmCef50r1vs557/uLvvkLH5qdndi4aL6RDa+bP6qGyAq+D ndAwGCpW2m9D/OM6XoQO3/sWpMklplKqBisCMXbaJkuLWEqQpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDkBXBie+IATbUDPTnyAWnWLcQ7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNiOTk1YzctNTQ5Yy0z OGZiLWJkN2MtNjg4ZDFmYjdjNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiVww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmtzQ9DNGbKBVOVr/VCFyRMU0tsWGNka2GLzc3WCibDl/2eBNZp5Y m5pAQ3L2C8eGeIdxiUmculVVwHJ1wThppFFB8zzXwv7fXfxicrPWQFcc3bd+uovR PCiCbOrP4z21AY1U9EsJoaNEFYf78GOAIgWqUtHwo/PEsX+ljOp7QEXVMrn1CLga S/YCRU3qkZwkkVSM4KMat2nCEGp4HD95kRiQDw5ZciDUKYxpj+ZYuIvI50jFK0T8 NdbUVj4pgdLeI29BJY4fySpkXEp3oc2rnv6Jb4KtrhoHtkpSy9COlYNszXp+jYrH roPrgFi1DjAlcRy59dUHzgycAfAm5CegjQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:17 2026 by rpki-client