This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ff5a6a-f945-3067-a4f8-f9a669904150.roa File: 29ff5a6a-f945-3067-a4f8-f9a669904150.roa (raw, json) Hash identifier: Oyjxk0+r7BsZ/ZgGiMoFBE8ltlKv8yykemOyxXGOpwI= Subject key identifier: C6:24:D5:DA:14:E9:88:0C:63:41:E9:41:E1:E5:71:39:D1:A9:65:50 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BE74806A471220778415FAB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ff5a6a-f945-3067-a4f8-f9a669904150.roa Signing time: Tue 18 Nov 2025 18:44:33 +0000 ROA not before: Tue 18 Nov 2025 18:44:33 +0000 ROA not after: Mon 16 Feb 2026 18:44:33 +0000 asID: 19905 IP address blocks: 2604:2e8f:d400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:48:06:a4:71:22:07:78:41:5f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 18 18:44:33 2025 GMT Not After : Feb 16 18:44:33 2026 GMT Subject: CN=8be4ef92-0315-4862-8fee-6208dc9f1f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:bd:73:5f:7d:cc:ae:1a:30:43:c9:04:b6: 65:13:7f:8e:bc:49:85:dc:b4:ac:00:de:0e:22:f3: 72:ba:d7:69:1e:54:21:13:36:9d:c9:a6:66:4c:c9: 36:c6:ce:bc:73:e8:a6:af:54:48:ee:41:00:7e:dd: 1b:1c:1b:3b:3f:0d:42:1e:dd:67:bc:87:a5:ec:70: 45:eb:75:60:51:c0:39:d2:90:75:93:78:c8:31:bd: 81:a3:37:18:8e:b6:60:4a:fa:9c:cc:db:47:66:b1: 01:1c:cd:da:6e:2a:f4:98:5b:72:aa:b2:f2:a8:70: 81:ba:d3:09:b0:4c:4f:5e:82:1e:9e:8b:cf:45:d5: 63:eb:6e:a8:cf:a3:fe:e3:43:bd:7f:a2:1c:f1:d2: 16:6b:0b:1a:fe:5c:e5:e3:90:48:4f:6b:f9:49:2d: a0:75:c8:91:ba:34:3e:52:f7:46:a5:6a:b6:25:ab: ab:dc:f4:cb:10:3d:7a:96:9f:cd:73:df:06:59:ee: b6:07:8e:5a:95:ce:a2:20:c8:7e:db:96:f4:86:c4: 91:07:a0:39:07:83:38:3f:c6:c6:6b:f9:a1:65:6e: 20:62:62:17:00:46:9b:7b:77:fa:58:a7:e6:f0:d1: 93:a9:58:3a:b1:96:be:f7:e3:a5:5a:0c:d8:40:08: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:24:D5:DA:14:E9:88:0C:63:41:E9:41:E1:E5:71:39:D1:A9:65:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ff5a6a-f945-3067-a4f8-f9a669904150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:d400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6f:ba:6c:e3:20:f6:e1:bf:6e:8e:90:0d:56:4e:36:df:70: d2:2d:8d:55:20:17:fb:bb:a5:84:61:8f:86:19:50:93:0a:11: fd:73:91:51:76:58:62:53:f8:39:03:1c:b9:f4:29:82:ee:37: 66:1d:70:46:67:2e:87:ec:b7:47:f6:5a:bc:f7:58:ef:80:f9: 21:50:86:00:91:09:16:17:5a:85:53:89:e6:9e:28:f7:2c:71: 94:93:b6:3f:20:12:51:ac:d3:d0:16:bd:f1:99:00:3c:b7:22: 50:cd:b5:28:08:e4:78:0f:bd:9d:77:f3:4e:24:ca:7c:c1:3c: 63:9f:64:58:f8:a8:e4:14:88:fa:96:06:ea:fc:f9:9d:d7:32: 0b:03:f4:c3:a7:6c:fb:71:2f:d4:2b:21:bd:f0:84:42:ce:1a: b2:e3:8c:8e:7c:7a:c4:14:f9:f4:02:6f:6b:bb:60:e2:85:96: 7e:6a:21:0d:91:af:16:0d:1f:0e:e8:61:3b:c2:95:b0:36:2f: 54:40:14:28:ca:15:3e:97:fa:e5:f7:b5:9d:b6:5a:72:af:4c: 8d:19:91:d7:c7:a2:eb:d6:4b:9c:ee:26:c2:43:a8:fc:d1:9a: 1b:61:8f:60:fa:c9:c5:6d:6f:36:b8:39:7a:83:6a:20:f4:b9: 13:33:d1:e7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvnSAakcSIHeEFfq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExODE4NDQzM1oXDTI2MDIxNjE4NDQzM1owLzEtMCsGA1UEAxMk OGJlNGVmOTItMDMxNS00ODYyLThmZWUtNjIwOGRjOWYxZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsG9c199zK4aMEPJBLZlE3+OvEmF3LSsAN4O IvNyutdpHlQhEzadyaZmTMk2xs68c+imr1RI7kEAft0bHBs7Pw1CHt1nvIel7HBF 63VgUcA50pB1k3jIMb2BozcYjrZgSvqczNtHZrEBHM3abir0mFtyqrLyqHCButMJ sExPXoIenovPRdVj626oz6P+40O9f6Ic8dIWawsa/lzl45BIT2v5SS2gdciRujQ+ UvdGpWq2Jaur3PTLED16lp/Nc98GWe62B45alc6iIMh+25b0hsSRB6A5B4M4P8bG a/mhZW4gYmIXAEabe3f6WKfm8NGTqVg6sZa+9+OlWgzYQAitNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMYk1doU6YgMY0HpQeHlcTnRqWVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjlmZjVhNmEtZjk0NS0z MDY3LWE0ZjgtZjlhNjY5OTA0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj9Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF2+6bOMg9uG/bo6QDVZONt9w0i2NVSAX+7ulhGGPhhlQkwoR/XOR UXZYYlP4OQMcufQpgu43Zh1wRmcuh+y3R/ZavPdY74D5IVCGAJEJFhdahVOJ5p4o 9yxxlJO2PyASUazT0Ba98ZkAPLciUM21KAjkeA+9nXfzTiTKfME8Y59kWPio5BSI +pYG6vz5ndcyCwP0w6ds+3Ev1CshvfCEQs4asuOMjnx6xBT59AJva7tg4oWWfmoh DZGvFg0fDuhhO8KVsDYvVEAUKMoVPpf65fe1nbZacq9MjRmR18ei69ZLnO4mwkOo /NGaG2GPYPrJxW1vNrg5eoNqIPS5EzPR5w== -----END CERTIFICATE-----Generated at Tue Nov 25 17:02:12 2025 by rpki-client