This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
File: 28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa (raw, json)
Hash identifier: 9JeZ3vvH4Y+DhBt/yjbAUROY3+KSV96CDQLluaPxIjQ=
Subject key identifier: 12:52:D9:0C:51:03:85:4C:DD:63:06:E7:59:D8:C3:03:69:9A:5F:C2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C45A81838D574CD9049543958
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8e:6800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:18:38:d5:74:cd:90:49:54:39:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=c60b2f1a-fb2a-419a-9909-484e9ad742da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:d4:b2:4e:16:20:e5:29:dd:0a:0c:19:16:
1f:c1:ac:a0:31:60:c9:9b:e9:9c:e0:3a:4e:2c:36:
33:dc:6c:79:b0:09:42:3b:42:1a:83:41:c4:4d:cc:
db:98:90:29:04:d7:96:1f:dc:9c:81:67:9b:2b:fc:
2e:f4:74:d1:bd:fd:10:08:95:2a:4b:21:e1:56:e3:
65:93:73:85:c2:a5:23:82:b5:87:2a:24:4f:fc:c7:
51:08:15:08:f4:b5:bb:43:fd:ef:d3:97:b7:e9:58:
86:6f:a1:5e:46:0d:21:98:33:2a:72:7b:de:dd:7e:
fa:24:11:ba:7d:c0:49:52:96:ba:af:01:2d:b2:f0:
3b:39:97:21:3f:a8:8d:93:7a:93:f6:e5:29:41:e3:
9c:d2:9d:76:3a:5e:b6:94:47:60:2d:b9:fb:69:eb:
3a:2f:84:23:39:83:cb:be:f4:dc:e9:16:9b:5a:19:
76:23:17:9f:b2:af:7a:79:9e:b5:5c:6b:54:68:9f:
76:8e:96:c7:66:23:50:b0:c6:11:23:1a:31:87:16:
4d:aa:58:59:e5:b9:85:30:51:48:9e:c0:28:fa:3b:
c8:eb:9d:5b:53:c7:9d:56:46:62:d4:96:3d:63:c3:
15:8e:a3:b0:e7:08:b2:55:bd:7b:7d:9d:a9:ab:5f:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:D9:0C:51:03:85:4C:DD:63:06:E7:59:D8:C3:03:69:9A:5F:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:6800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a0:85:11:5b:48:09:07:a7:2c:f3:02:dc:74:6e:c0:6a:4d:
40:72:80:5d:b3:33:55:8b:36:ce:cc:eb:cf:89:5a:22:19:3c:
a8:26:ac:02:cd:d1:dc:bb:3a:83:43:a4:71:ee:15:3e:02:07:
24:61:7d:bf:62:97:15:c3:55:eb:f9:87:fb:77:03:af:79:cc:
fd:ee:99:0d:dd:b2:24:f3:20:dd:a4:4b:dc:c2:cc:68:c8:cb:
88:1f:00:9c:59:60:a4:bd:4c:ef:f3:e7:cb:7e:35:96:c7:58:
f4:5a:fd:62:24:e7:00:58:e5:b0:18:2d:7b:98:7d:d8:68:66:
1f:f6:7a:7d:0a:42:0b:0c:43:20:f2:b9:48:69:93:d0:6a:a6:
f0:a9:ae:51:1b:cc:e4:0d:ab:80:33:ed:49:f9:ea:46:4d:f6:
76:49:7c:70:d9:c4:b2:78:0c:27:92:53:b9:20:4c:5e:3b:f6:
a1:a3:3c:67:30:bb:c3:04:bd:03:5c:2d:80:6a:c2:44:ec:aa:
c7:38:b3:1a:3a:eb:b6:43:9b:7b:24:f1:e7:f9:72:df:4a:0e:
1c:63:c2:be:87:ec:31:10:d2:f7:0a:c3:a3:4e:c9:37:3d:d2:
5f:0b:bf:94:1b:ee:b7:d1:f1:bb:30:6a:ba:c9:d8:79:e0:9a:
3a:c4:45:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqBg41XTNkElUOVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
YzYwYjJmMWEtZmIyYS00MTlhLTk5MDktNDg0ZTlhZDc0MmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq/Usk4WIOUp3QoMGRYfwaygMWDJm+mc4DpO
LDYz3Gx5sAlCO0Iag0HETczbmJApBNeWH9ycgWebK/wu9HTRvf0QCJUqSyHhVuNl
k3OFwqUjgrWHKiRP/MdRCBUI9LW7Q/3v05e36ViGb6FeRg0hmDMqcnve3X76JBG6
fcBJUpa6rwEtsvA7OZchP6iNk3qT9uUpQeOc0p12Ol62lEdgLbn7aes6L4QjOYPL
vvTc6RabWhl2Ixefsq96eZ61XGtUaJ92jpbHZiNQsMYRIxoxhxZNqlhZ5bmFMFFI
nsAo+jvI651bU8edVkZi1JY9Y8MVjqOw5wiyVb17fZ2pq1/bPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBJS2QxRA4VM3WMG51nYwwNpml/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhjYzc4NWYtNmNlZC0z
ZDFhLThmZDEtNjVjZmNiZTBkZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujmgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS6CFEVtICQenLPMC3HRuwGpNQHKAXbMzVYs2zszrz4laIhk8qCas
As3R3Ls6g0Okce4VPgIHJGF9v2KXFcNV6/mH+3cDr3nM/e6ZDd2yJPMg3aRL3MLM
aMjLiB8AnFlgpL1M7/Pny341lsdY9Fr9YiTnAFjlsBgte5h92GhmH/Z6fQpCCwxD
IPK5SGmT0Gqm8KmuURvM5A2rgDPtSfnqRk32dkl8cNnEsngMJ5JTuSBMXjv2oaM8
ZzC7wwS9A1wtgGrCROyqxzizGjrrtkObeyTx5/ly30oOHGPCvofsMRDS9wrDo07J
Nz3SXwu/lBvut9HxuzBqusnYeeCaOsRF2w==
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:25:42 2026 by rpki-client