This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa File: 28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa (raw, json) Hash identifier: HXFdiAvorrpIXIe74BwL/9vLlxD/d3dcUeu1t/aN4zs= Subject key identifier: F0:05:86:02:43:A7:34:C3:1A:25:3C:2F:2F:A3:E2:72:97:A1:CA:27 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C49D659CB2B5D1ECCBF264900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa Signing time: Wed 24 Dec 2025 02:00:31 +0000 ROA not before: Wed 24 Dec 2025 02:00:31 +0000 ROA not after: Tue 24 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8d:b800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:59:cb:2b:5d:1e:cc:bf:26:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Mar 24 01:00:31 2026 GMT Subject: CN=7584fb98-2df1-4cba-8bcf-486a5c34fcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:68:c5:90:5c:99:de:ce:91:3f:3a:4f:99: f2:36:42:c4:98:32:2f:39:c9:8f:ef:73:de:d0:c0: ec:6c:aa:d4:c8:3e:de:1d:09:5b:80:54:51:da:43: 54:70:c7:e4:f3:46:6a:30:5c:98:ac:da:43:84:3c: 32:e8:81:3c:0c:ad:71:9b:d3:e2:c4:08:35:ba:2a: 4f:42:bd:6c:84:82:a5:fa:c0:0a:bc:29:bd:8e:43: 3c:5a:05:b4:4d:5a:f6:2d:e2:74:2f:9a:94:4c:20: e2:c4:b0:ad:b0:2b:5a:82:fd:ea:a3:ef:53:97:34: 03:98:eb:38:57:6b:88:f5:db:1f:33:28:a4:bd:54: 5d:58:83:19:a0:c7:41:d3:ef:c9:da:68:83:d3:76: f1:a1:31:1d:b2:89:2b:1c:f7:5e:0d:09:d4:55:24: 61:1a:e0:6d:4d:6b:dd:3a:22:ad:a2:1e:49:20:75: 2e:b9:19:0f:08:3a:82:43:35:ad:3d:2a:ed:03:95: 57:15:cd:1c:31:d8:6a:c4:df:43:7c:54:9e:bf:63: 45:15:f8:3d:ec:33:22:73:5d:bd:71:3e:ac:f5:89: ba:61:8d:be:b0:1c:ec:aa:ed:5b:85:07:f1:45:86: a2:92:de:60:55:64:7d:1e:bf:fb:1c:c7:7a:0b:96: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:86:02:43:A7:34:C3:1A:25:3C:2F:2F:A3:E2:72:97:A1:CA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:b800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:96:a3:8a:63:45:c4:38:4e:e7:3d:32:0f:d8:b6:9e:e2:96: 54:19:30:23:af:43:d3:3d:c0:0e:8d:2d:10:cb:8f:64:35:a1: 9a:bf:88:40:91:87:ab:80:bf:de:a4:b7:55:c3:ff:5e:0e:7c: 16:2f:00:99:db:c7:f7:a0:40:10:77:63:14:f8:05:cb:f6:06: 2f:b1:e9:a7:1a:93:dd:b2:19:e0:06:08:2a:89:8c:39:fa:b7: c3:f4:a6:a6:b1:70:a8:24:af:ba:14:47:f0:c0:d4:7d:b6:b9: af:f9:c0:60:dc:bf:32:a7:2a:b0:a2:6b:65:44:62:67:0c:69: 98:47:7b:53:0d:30:1d:3f:d9:01:d2:da:52:66:a3:b8:50:da: 2d:c9:50:60:0d:5e:9e:44:e7:c8:28:b9:82:79:0c:43:20:d3: fa:96:6c:78:9a:47:17:4b:5c:6c:2b:f9:aa:cc:0c:99:fe:20: db:ae:c0:9d:f9:55:f6:dd:20:86:fd:4d:8f:4d:61:6d:b9:9e: 60:57:48:c7:fa:dd:f6:af:11:71:90:1e:b6:a2:0b:ff:2a:09: 4d:b7:b3:84:f3:b2:4c:1a:9f:22:14:51:ee:fb:af:80:7b:e5: ef:30:b5:aa:ef:76:ed:b0:fb:f3:2f:03:56:31:b5:c5:e1:00: 66:10:7e:8f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExJ1lnLK10ezL8mSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNDAyMDAzMVoXDTI2MDMyNDAxMDAzMVowLzEtMCsGA1UEAxMk NzU4NGZiOTgtMmRmMS00Y2JhLThiY2YtNDg2YTVjMzRmY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjNoxZBcmd7OkT86T5nyNkLEmDIvOcmP73Pe 0MDsbKrUyD7eHQlbgFRR2kNUcMfk80ZqMFyYrNpDhDwy6IE8DK1xm9PixAg1uipP Qr1shIKl+sAKvCm9jkM8WgW0TVr2LeJ0L5qUTCDixLCtsCtagv3qo+9TlzQDmOs4 V2uI9dsfMyikvVRdWIMZoMdB0+/J2miD03bxoTEdsokrHPdeDQnUVSRhGuBtTWvd OiKtoh5JIHUuuRkPCDqCQzWtPSrtA5VXFc0cMdhqxN9DfFSev2NFFfg97DMic129 cT6s9Ym6YY2+sBzsqu1bhQfxRYaikt5gVWR9Hr/7HMd6C5Y5lwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPAFhgJDpzTDGiU8Ly+j4nKXoconMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhmZGYwZjYtZWY3ZC0z MDVjLWEzOTUtYWRjMWE3NmM4NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujbgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAY5ajimNFxDhO5z0yD9i2nuKWVBkwI69D0z3ADo0tEMuPZDWhmr+I QJGHq4C/3qS3VcP/Xg58Fi8AmdvH96BAEHdjFPgFy/YGL7HppxqT3bIZ4AYIKomM Ofq3w/SmprFwqCSvuhRH8MDUfba5r/nAYNy/MqcqsKJrZURiZwxpmEd7Uw0wHT/Z AdLaUmajuFDaLclQYA1enkTnyCi5gnkMQyDT+pZseJpHF0tcbCv5qswMmf4g267A nflV9t0ghv1Nj01hbbmeYFdIx/rd9q8RcZAetqIL/yoJTbezhPOyTBqfIhRR7vuv gHvl7zC1qu927bD78y8DVjG1xeEAZhB+jw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:38 2026 by rpki-client