This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa File: 2e348530-00eb-3412-ab33-98cd25071483.roa (raw, json) Hash identifier: Y+Z2Rkc4q1bNtVJRi2eyhevzkw0kXvVjH4KYRpFIsb0= Subject key identifier: 93:CB:A7:7B:19:FB:8C:B6:5E:A9:31:2F:CD:EB:69:5D:C4:27:BE:85 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C49D6711BB86BF83C8073FE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa Signing time: Wed 24 Dec 2025 02:00:31 +0000 ROA not before: Wed 24 Dec 2025 02:00:31 +0000 ROA not after: Tue 24 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8d:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:71:1b:b8:6b:f8:3c:80:73:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Mar 24 01:00:31 2026 GMT Subject: CN=378ad38d-d00e-4e79-a4f7-8689d4156f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:87:e0:67:66:41:2f:ba:8d:b8:43:fb:f7: 7b:2e:40:6f:b7:37:df:16:98:fe:5d:ea:dd:3d:06: 30:43:3e:00:b3:0f:4c:83:27:11:50:0d:9d:55:36: e9:e8:93:60:4f:1c:c9:5b:0c:2e:4a:81:12:1d:64: d2:ed:a0:54:e1:19:51:8b:68:f4:02:e3:aa:c4:b2: 78:f2:3e:c3:f9:41:56:57:94:c8:49:35:4c:2a:63: 72:1c:1d:e8:bf:5c:51:06:1b:57:6b:71:24:a3:c0: 67:8c:bc:2e:91:bb:57:58:fc:9a:47:ef:dc:6e:08: 92:3b:32:3d:8b:41:46:30:55:f8:ae:59:61:2f:6a: 72:4c:df:37:a7:7e:be:a2:c5:2c:fd:ba:10:a3:13: 03:0e:61:fd:dd:d3:18:be:29:be:8e:de:e0:e7:c4: 98:04:2e:34:a1:fe:86:cc:56:cc:03:82:32:61:5d: ce:a4:fa:4f:60:52:71:14:ac:3b:2c:bf:3c:b8:e5: 53:cc:d5:52:d1:7a:e9:6a:01:66:2a:99:92:cc:3b: 1a:53:b5:62:a1:d1:b8:b0:ca:5e:15:0f:07:73:b7: 60:15:60:17:63:29:d3:af:42:70:7f:13:86:fa:1b: 6a:85:5d:dc:d0:15:00:8b:c9:6c:87:13:20:4b:a6: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CB:A7:7B:19:FB:8C:B6:5E:A9:31:2F:CD:EB:69:5D:C4:27:BE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:aa:60:20:22:2a:c8:43:48:b7:d8:53:04:88:83:9d:23:58: 2b:1c:9b:37:f7:b0:87:d2:92:81:65:bc:bb:81:a2:2a:e4:61: de:c2:00:82:61:68:72:e6:12:fd:f8:10:af:08:d3:ff:8d:5b: 4e:d1:24:3d:a3:7b:48:0c:ef:c8:fb:14:7d:b5:8e:35:74:06: 1b:b5:68:95:48:c6:d3:66:20:0c:f6:da:30:91:b6:83:24:76: 46:bd:83:7e:64:b5:45:7c:e0:5b:e7:dc:81:15:f1:b6:76:85: f4:8f:17:c0:95:6d:31:d7:d6:b8:c7:86:e8:92:ab:00:4d:1f: 0a:17:bc:d9:1e:85:5e:39:da:d1:19:b9:37:a7:dd:73:8b:1b: b5:6c:17:1f:e4:39:90:07:cd:f9:20:07:b6:cd:70:52:de:dc: 73:84:72:36:bb:33:b4:fe:d7:09:54:9d:8d:35:1e:90:b5:4b: ba:16:59:85:42:07:c1:51:0b:d3:72:d1:fb:8c:fe:ed:f4:75: 5a:2e:ff:ff:07:b8:b8:61:7d:01:06:3f:b8:a3:5a:78:a5:de: 8f:ce:d6:bb:f3:80:98:a8:9b:29:60:09:79:2d:6e:28:09:f2: e0:d9:3c:78:3f:a2:d2:0f:81:f3:ea:11:ef:f0:cb:29:49:8d: 32:e6:d5:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExJ1nEbuGv4PIBz/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNDAyMDAzMVoXDTI2MDMyNDAxMDAzMVowLzEtMCsGA1UEAxMk Mzc4YWQzOGQtZDAwZS00ZTc5LWE0ZjctODY4OWQ0MTU2Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgOH4GdmQS+6jbhD+/d7LkBvtzffFpj+Xerd PQYwQz4Asw9MgycRUA2dVTbp6JNgTxzJWwwuSoESHWTS7aBU4RlRi2j0AuOqxLJ4 8j7D+UFWV5TISTVMKmNyHB3ov1xRBhtXa3Eko8BnjLwukbtXWPyaR+/cbgiSOzI9 i0FGMFX4rllhL2pyTN83p36+osUs/boQoxMDDmH93dMYvim+jt7g58SYBC40of6G zFbMA4IyYV3OpPpPYFJxFKw7LL88uOVTzNVS0XrpagFmKpmSzDsaU7ViodG4sMpe FQ8Hc7dgFWAXYynTr0JwfxOG+htqhV3c0BUAi8lshxMgS6ZnoQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJPLp3sZ+4y2XqkxL83raV3EJ76FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmUzNDg1MzAtMDBlYi0z NDEyLWFiMzMtOThjZDI1MDcxNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujbQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfKpgICIqyENIt9hTBIiDnSNYKxybN/ewh9KSgWW8u4GiKuRh3sIA gmFocuYS/fgQrwjT/41bTtEkPaN7SAzvyPsUfbWONXQGG7VolUjG02YgDPbaMJG2 gyR2Rr2DfmS1RXzgW+fcgRXxtnaF9I8XwJVtMdfWuMeG6JKrAE0fChe82R6FXjna 0Rm5N6fdc4sbtWwXH+Q5kAfN+SAHts1wUt7cc4RyNrsztP7XCVSdjTUekLVLuhZZ hUIHwVEL03LR+4z+7fR1Wi7//we4uGF9AQY/uKNaeKXej87Wu/OAmKibKWAJeS1u KAny4Nk8eD+i0g+B8+oR7/DLKUmNMubVmA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:56 2026 by rpki-client