This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa File: 24d66b91-511e-326a-8078-7ea7d3a8534b.roa (raw, json) Hash identifier: CKkE4EG5pRBSl43Arz0enqZAxy4LnQKIbM6fQfwULlg= Subject key identifier: B1:E4:8B:2B:37:6D:7C:10:99:BC:C3:C6:22:88:10:41:78:92:CA:C0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBB6839DEF0D2E9DAA4080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:b6:83:9d:ef:0d:2e:9d:aa:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=75faab59-4a0e-461f-9cbd-e42a97179f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:37:fa:f2:1c:e3:c2:28:ac:19:ea:81:60: fe:6d:0b:70:5c:34:81:96:ce:2b:1f:08:91:8a:11: be:6e:38:48:0d:8e:39:a4:3a:af:fb:0f:a0:16:91: 89:89:65:42:d0:8e:e2:1b:4e:f7:3a:3b:ae:ba:be: 5b:6a:20:c3:0a:c8:ec:f3:e5:6c:a7:06:c9:86:24: f4:85:70:8b:e4:eb:08:0f:d8:44:c1:cf:b3:41:dd: a2:3c:a6:80:c3:2d:67:5d:30:05:61:f4:33:bc:cb: 03:10:c3:80:57:95:bc:20:9b:53:61:ce:05:99:ea: e3:7c:ae:10:23:00:35:f4:d8:9b:fc:82:25:07:64: cf:31:85:7c:37:b9:5f:d1:ac:cd:8b:0f:09:5b:b7: ee:0e:65:8f:93:c7:59:af:11:8e:5c:ce:20:58:1b: 3d:02:a3:f6:fc:cd:ff:79:d7:96:87:a8:83:d4:78: 3c:e6:83:a6:66:86:05:fa:96:0f:e0:c8:2e:81:58: 80:2c:b8:ee:61:23:2d:e8:fd:a9:17:2c:d8:56:97: 64:7e:7a:53:4a:3e:d6:d1:79:e3:22:a0:43:8d:5c: 7f:ed:78:61:c2:46:84:4d:fd:27:df:fb:56:84:5e: 45:0c:00:58:5a:58:b3:7b:98:0e:5d:28:e9:f7:0c: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E4:8B:2B:37:6D:7C:10:99:BC:C3:C6:22:88:10:41:78:92:CA:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6f:9b:f1:c7:c5:ec:c0:dc:ee:1b:c6:0c:73:9a:de:2b:60: 1a:86:72:d1:01:39:65:0c:af:b8:16:e6:e0:28:ba:14:25:2c: 29:e4:3a:f8:c9:3d:c4:57:27:c9:aa:7e:ff:da:36:ac:49:74: e3:a3:51:76:31:44:fe:fb:1a:a5:e8:77:9a:d1:9d:09:73:79: c5:d0:1e:1c:c6:ed:8e:b3:7c:2d:26:f1:3d:6c:f8:6e:ea:c6: 59:5b:91:b0:cc:9b:be:a0:cd:64:95:4d:82:74:89:e9:36:48: 29:b8:9a:3a:72:8a:a8:7c:82:c3:b6:0a:dd:ec:cd:a6:27:84: 7c:6a:62:bf:29:93:2e:43:d7:99:2b:5b:6e:f0:99:95:b5:78: fc:67:b3:6d:81:dc:21:e4:61:0a:f5:41:66:1a:26:8b:9a:ff: 51:97:bd:c3:c5:db:eb:45:82:6e:da:c3:e7:76:98:b6:73:96: d7:04:fd:8f:56:14:b5:30:0f:fb:eb:6f:0b:e4:69:5a:1c:db: a7:d2:1c:4e:4b:a2:20:8e:52:9f:94:02:8e:c6:db:3f:70:ee: 21:2f:61:05:6b:89:c1:2b:1e:8c:60:15:af:ee:67:f8:f8:18: 7b:04:41:a7:23:c1:52:49:9b:61:88:ef:7a:55:56:60:aa:4f: f7:fe:2f:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC27aDne8NLp2qQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NzVmYWFiNTktNGEwZS00NjFmLTljYmQtZTQyYTk3MTc5ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+k3+vIc48IorBnqgWD+bQtwXDSBls4rHwiR ihG+bjhIDY45pDqv+w+gFpGJiWVC0I7iG073Ojuuur5baiDDCsjs8+VspwbJhiT0 hXCL5OsID9hEwc+zQd2iPKaAwy1nXTAFYfQzvMsDEMOAV5W8IJtTYc4FmerjfK4Q IwA19Nib/IIlB2TPMYV8N7lf0azNiw8JW7fuDmWPk8dZrxGOXM4gWBs9AqP2/M3/ edeWh6iD1Hg85oOmZoYF+pYP4MgugViALLjuYSMt6P2pFyzYVpdkfnpTSj7W0Xnj IqBDjVx/7XhhwkaETf0n3/tWhF5FDABYWlize5gOXSjp9wxYkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLHkiys3bXwQmbzDxiKIEEF4ksrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjRkNjZiOTEtNTExZS0z MjZhLTgwNzgtN2VhN2QzYTg1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujNgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK2+b8cfF7MDc7hvGDHOa3itgGoZy0QE5ZQyvuBbm4Ci6FCUsKeQ6 +Mk9xFcnyap+/9o2rEl046NRdjFE/vsapeh3mtGdCXN5xdAeHMbtjrN8LSbxPWz4 burGWVuRsMybvqDNZJVNgnSJ6TZIKbiaOnKKqHyCw7YK3ezNpieEfGpivymTLkPX mStbbvCZlbV4/GezbYHcIeRhCvVBZhomi5r/UZe9w8Xb60WCbtrD53aYtnOW1wT9 j1YUtTAP++tvC+RpWhzbp9IcTkuiII5Sn5QCjsbbP3DuIS9hBWuJwSsejGAVr+5n +PgYewRBpyPBUkmbYYjvelVWYKpP9/4v6w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:00 2026 by rpki-client