This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2947d34f-511e-35e4-92f9-2ccf04ca5e27.roa File: 2947d34f-511e-35e4-92f9-2ccf04ca5e27.roa (raw, json) Hash identifier: KQ2zIQScJmRg2cZPozyT1qt96C1yBAhptoIJqsDH72I= Subject key identifier: 8B:C2:CA:00:89:2C:19:D3:A6:96:C6:98:A9:1D:F4:FF:65:47:1A:13 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871CE350D6A44CFB5957880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2947d34f-511e-35e4-92f9-2ccf04ca5e27.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:ce:35:0d:6a:44:cf:b5:95:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=aa86b30a-17e7-4500-964d-a1a02606a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:4e:ba:d7:bd:e1:87:de:1e:90:c4:f1:ad: e3:ef:82:88:f2:dc:9a:5b:aa:14:8f:d1:5a:49:f8: 9b:e5:87:6d:06:77:56:2d:c4:c1:3b:fb:ae:b7:b1: 82:d9:7d:54:a5:a7:3e:46:dc:0a:be:20:3f:d3:85: 89:76:f8:58:ca:a2:a8:df:da:a6:e9:0b:b5:e8:e3: ee:e7:85:49:27:ae:d2:83:88:be:b0:5e:f8:b1:82: 72:d9:ba:59:21:7b:93:bb:3b:a7:bf:16:fd:8b:ec: 0a:00:75:4f:1a:ca:d4:d6:19:32:c4:54:04:1f:e1: 60:6f:32:3a:d3:ac:8a:1f:16:b2:39:a2:25:3f:3f: 05:37:21:4e:e2:d1:4a:fa:7a:22:79:b0:59:9c:f0: 1c:7a:6a:25:19:68:eb:40:c4:98:f7:dd:c0:88:9b: e2:9f:19:f7:d3:a0:04:99:05:82:97:37:73:a8:33: 23:7b:0b:c0:00:ba:4a:1d:3e:53:f6:84:b8:9f:3c: 97:77:a5:1c:5c:b7:3d:ca:b1:c4:35:f7:de:0e:7b: 79:61:e3:83:43:c6:d0:8a:19:b1:45:02:07:70:ef: a8:75:36:9e:6c:d6:37:1c:2b:ff:ca:57:5e:16:b7: 19:fc:26:d1:89:49:8d:5e:f1:5f:2d:d2:b8:2d:f4: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:CA:00:89:2C:19:D3:A6:96:C6:98:A9:1D:F4:FF:65:47:1A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2947d34f-511e-35e4-92f9-2ccf04ca5e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:26:ab:60:d5:d6:e9:93:b9:17:cd:23:85:a8:98:4e:54:fc: 78:9f:9f:62:a0:e4:c0:1b:14:52:2a:e6:9e:a1:f7:93:82:b8: 1e:dd:31:16:11:95:63:d0:93:1d:eb:cf:d0:d0:3e:3d:03:0e: c5:f1:8f:f0:0c:81:08:e3:52:71:6d:06:80:4f:89:6d:41:4d: f8:a1:9c:e9:6d:dc:17:29:ce:19:b7:a3:3c:a9:9b:de:87:ec: 59:87:df:97:9b:da:57:92:49:7b:47:f3:08:4f:46:42:fc:c7: df:5f:4a:5a:8d:2c:57:f3:18:0a:09:dc:67:22:87:40:5b:cc: 79:d9:bf:43:0a:a3:ef:c5:0e:27:5c:74:11:b9:1b:d4:fe:b6: d7:98:59:53:26:10:13:27:84:3b:f3:7f:b8:df:48:0e:ea:43: 26:f3:ef:e0:47:51:6c:fc:27:e3:56:5e:16:ae:1f:27:60:2b: 5a:9a:91:c3:59:24:e5:9e:87:e7:11:4a:69:4e:14:17:3a:8b: 74:e7:f1:90:b0:8d:f0:12:a2:d1:14:85:2b:e3:31:eb:44:8a: 7a:05:58:c3:2c:b6:b9:3e:3b:d6:68:05:de:74:b7:94:ad:e2: fb:f9:bb:cf:3a:e4:8f:fb:90:5c:bc:51:ae:c4:4b:26:2a:b7: a9:d0:cc:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcc41DWpEz7WVeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YWE4NmIzMGEtMTdlNy00NTAwLTk2NGQtYTFhMDI2MDZhNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyZOute94YfeHpDE8a3j74KI8tyaW6oUj9Fa Sfib5YdtBndWLcTBO/uut7GC2X1Upac+RtwKviA/04WJdvhYyqKo39qm6Qu16OPu 54VJJ67Sg4i+sF74sYJy2bpZIXuTuzunvxb9i+wKAHVPGsrU1hkyxFQEH+FgbzI6 06yKHxayOaIlPz8FNyFO4tFK+noiebBZnPAcemolGWjrQMSY993AiJvinxn306AE mQWClzdzqDMjewvAALpKHT5T9oS4nzyXd6UcXLc9yrHENffeDnt5YeODQ8bQihmx RQIHcO+odTaebNY3HCv/yldeFrcZ/CbRiUmNXvFfLdK4LfQlcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIvCygCJLBnTppbGmKkd9P9lRxoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjk0N2QzNGYtNTExZS0z NWU0LTkyZjktMmNjZjA0Y2E1ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujIQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARSarYNXW6ZO5F80jhaiYTlT8eJ+fYqDkwBsUUirmnqH3k4K4Ht0x FhGVY9CTHevP0NA+PQMOxfGP8AyBCONScW0GgE+JbUFN+KGc6W3cFynOGbejPKmb 3ofsWYffl5vaV5JJe0fzCE9GQvzH319KWo0sV/MYCgncZyKHQFvMedm/Qwqj78UO J1x0Ebkb1P6215hZUyYQEyeEO/N/uN9IDupDJvPv4EdRbPwn41ZeFq4fJ2ArWpqR w1kk5Z6H5xFKaU4UFzqLdOfxkLCN8BKi0RSFK+Mx60SKegVYwyy2uT471mgF3nS3 lK3i+/m7zzrkj/uQXLxRrsRLJiq3qdDMVA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:05 2026 by rpki-client