This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa File: 28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa (raw, json) Hash identifier: j9twRRWo5q5JJudQPivWUEpYvD1GwlRpbwi9aDMBm4s= Subject key identifier: BD:EE:CB:7B:3E:6A:C6:39:30:33:B0:61:89:1E:97:3B:99:94:41:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BC96B11B4F8EA720A1CC05180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 19905 IP address blocks: 2604:2e87:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:11:b4:f8:ea:72:0a:1c:c0:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=1cedc10a-cd5b-447d-b84a-b1dee4a17130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:f5:3e:b9:97:10:5b:8f:18:1f:45:e3:9d: 84:82:d5:33:e4:f9:ab:45:3d:47:e0:2e:db:5b:c0: 72:c9:a9:81:cb:77:0b:91:fd:25:9c:48:99:57:95: 88:8d:43:65:d7:76:d5:f1:73:f4:db:07:48:0b:30: 33:f2:90:f3:9e:49:e1:55:d4:8a:80:df:99:78:c9: 4c:a0:a2:87:82:c3:cd:c4:5f:14:e9:c0:cf:84:55: 09:1e:a9:74:02:a5:48:27:2d:01:6b:f0:df:d2:8e: 5e:3c:29:c5:57:4c:4b:89:b7:75:3d:eb:ca:e5:c7: 35:cf:da:97:73:8e:0b:ea:22:27:7a:14:48:fa:04: 40:56:7d:c1:46:41:72:5e:85:7c:1f:e6:1e:89:54: 0d:7a:99:55:6f:55:9e:f7:53:df:88:4a:40:65:c9: e5:79:51:f0:ec:66:30:a1:66:1e:fa:75:61:03:fb: 72:a1:a3:3f:76:03:a7:a8:21:bd:55:6d:d3:1b:9a: 0e:96:4e:25:98:c9:ba:85:0b:69:c8:0e:62:22:26: 35:5d:b6:45:98:65:5e:e1:a0:76:ab:d1:08:ef:1b: 1f:a1:e8:16:86:f3:5f:1d:35:46:49:cb:39:1a:6a: e5:a7:0a:d1:6a:12:d4:d6:fe:f4:e6:3b:87:91:0d: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:CB:7B:3E:6A:C6:39:30:33:B0:61:89:1E:97:3B:99:94:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3b:9d:20:83:f6:c9:ac:c3:e5:1e:f9:94:cf:f8:3b:82:b0: 11:4a:33:24:33:8a:4a:3e:65:3d:7a:6f:77:15:6c:4f:a8:e6: 3b:8e:41:59:e5:a5:4b:6b:e0:ee:14:ff:47:85:2a:04:86:ec: c2:98:dd:f7:b8:6c:49:8d:fa:22:ff:eb:b6:60:16:c1:71:18: ff:d0:6d:85:6f:46:f3:60:75:00:61:a9:41:fb:e3:54:64:6b: cf:d6:b6:39:d1:f8:08:5c:df:44:8f:d5:e1:14:2d:cf:d0:1d: 57:c4:86:30:f2:f7:89:6e:4a:c7:df:ae:7f:3f:16:61:96:28: 89:69:0c:8c:79:5e:47:66:d4:60:ea:86:5f:ae:36:75:1c:76: 9b:91:03:97:a0:1e:67:6a:22:69:6b:a6:9a:bb:ce:58:38:83: b4:da:f6:e9:8d:e6:77:a9:c9:4c:69:59:15:87:f6:ce:98:d9: 8b:2e:62:dd:76:88:04:b0:ff:0c:7a:70:45:ec:3b:a8:ee:cf: 97:f9:92:1c:e4:01:ae:cf:b2:05:4c:8b:9e:a3:47:f2:b6:7d: a8:75:0e:b6:d3:04:fb:05:1d:b7:0f:75:dd:38:23:21:51:58: 5e:c6:97:ff:b7:7a:75:92:dc:4e:50:59:96:f0:90:5d:73:5a: f6:5b:51:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvJaxG0+OpyChzAUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk MWNlZGMxMGEtY2Q1Yi00NDdkLWI4NGEtYjFkZWU0YTE3MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5r1PrmXEFuPGB9F452EgtUz5PmrRT1H4C7b W8ByyamBy3cLkf0lnEiZV5WIjUNl13bV8XP02wdICzAz8pDznknhVdSKgN+ZeMlM oKKHgsPNxF8U6cDPhFUJHql0AqVIJy0Ba/Df0o5ePCnFV0xLibd1PevK5cc1z9qX c44L6iInehRI+gRAVn3BRkFyXoV8H+YeiVQNeplVb1We91PfiEpAZcnleVHw7GYw oWYe+nVhA/tyoaM/dgOnqCG9VW3TG5oOlk4lmMm6hQtpyA5iIiY1XbZFmGVe4aB2 q9EI7xsfoegWhvNfHTVGScs5GmrlpwrRahLU1v705juHkQ218QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL3uy3s+asY5MDOwYYkelzuZlEEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhhNTQ3MGYtZjAzNC0z YTNmLWFjNDktOWI0OWI2YmQwOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh6Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQzudIIP2yazD5R75lM/4O4KwEUozJDOKSj5lPXpvdxVsT6jmO45B WeWlS2vg7hT/R4UqBIbswpjd97hsSY36Iv/rtmAWwXEY/9BthW9G82B1AGGpQfvj VGRrz9a2OdH4CFzfRI/V4RQtz9AdV8SGMPL3iW5Kx9+ufz8WYZYoiWkMjHleR2bU YOqGX642dRx2m5EDl6AeZ2oiaWummrvOWDiDtNr26Y3md6nJTGlZFYf2zpjZiy5i 3XaIBLD/DHpwRew7qO7Pl/mSHOQBrs+yBUyLnqNH8rZ9qHUOttME+wUdtw913Tgj IVFYXsaX/7d6dZLcTlBZlvCQXXNa9ltRsg== -----END CERTIFICATE-----Generated at Tue Nov 25 17:03:26 2025 by rpki-client