This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e4231f0-cbab-3e53-a2e2-65431fd0819b.roa File: 2e4231f0-cbab-3e53-a2e2-65431fd0819b.roa (raw, json) Hash identifier: jPvKFb381qyeE8gw/j6XeXiQXtnsWI44DuC6f1gZExI= Subject key identifier: C1:F2:AD:CE:B4:F9:3E:84:60:87:0B:AB:0D:6D:A6:3E:ED:3C:4E:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A83158E2B40BB205904F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e4231f0-cbab-3e53-a2e2-65431fd0819b.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:31:58:e2:b4:0b:b2:05:90:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e5430c17-8d04-45e6-a22c-c7a82e0963ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:4c:5c:1e:33:e0:04:4c:26:31:a9:ef:9e: 7f:a1:de:08:49:ba:02:a1:5d:80:17:a1:db:8a:ae: 90:e3:a4:7c:96:53:14:0d:e0:5f:cd:f8:29:1a:da: 07:96:b1:a3:fb:3b:a5:41:da:f9:bb:2b:e0:da:d1: 6a:46:29:b8:b9:53:e9:90:38:1b:80:47:1d:6b:45: 3e:bd:b3:4b:9b:04:59:50:25:c8:a9:1e:dd:f3:d8: f0:28:07:97:93:f6:b4:b2:06:24:ac:36:90:98:55: ea:77:ab:a2:8a:16:33:1c:90:68:c0:c9:38:c0:c0: 40:ae:47:b4:b6:8d:5a:e0:89:08:8c:88:38:93:36: 62:21:33:4f:69:74:3f:aa:75:5f:b4:c8:b0:90:4b: ab:45:43:b1:fb:a0:57:ad:f5:59:60:ab:77:e4:3f: 46:e9:f6:28:5f:35:5c:2d:a3:7c:26:ab:87:d1:6a: d1:76:b6:d3:7c:3c:6e:9a:3b:0c:80:27:f1:9e:66: 85:40:18:b1:3b:75:87:ed:81:97:ad:f7:ee:63:74: 65:95:6e:3d:2d:ac:89:9f:d4:94:f5:9f:38:86:e9: 4a:91:f2:fd:52:2d:ae:fe:47:08:3f:73:ee:db:4c: 26:72:e5:27:bb:39:ca:23:d4:fb:ed:36:a0:ec:53: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:AD:CE:B4:F9:3E:84:60:87:0B:AB:0D:6D:A6:3E:ED:3C:4E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e4231f0-cbab-3e53-a2e2-65431fd0819b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:59:49:cb:4c:83:a7:62:5a:49:dd:42:b6:0e:13:d9:e4:a0: 2d:aa:a6:81:50:9a:9a:32:e5:82:ef:2b:0e:ca:0f:e2:d3:ce: e0:0d:31:a9:a9:ca:1d:ef:ee:37:9e:96:62:57:03:c4:4a:50: 58:1b:3c:63:b0:86:6c:0f:76:df:93:e1:07:64:30:66:31:28: a4:90:78:51:c9:2e:86:33:33:fe:39:87:70:4a:c7:d7:63:e6: 6b:f2:60:66:54:c7:a2:13:e4:cf:c9:7a:50:3d:43:00:8b:d0: c4:3a:35:d1:96:84:e9:c4:60:ed:2c:a2:e6:a4:4b:7a:e6:dd: 3c:87:03:a6:c2:b3:19:55:7d:98:23:6b:39:66:5b:5f:c1:11: a9:15:e6:74:ed:66:e0:66:a6:2d:cf:2d:a1:21:3d:84:a1:d7: cf:c7:93:47:6f:48:6a:a2:6d:93:07:31:dd:89:fb:4c:bb:9d: 11:52:07:4b:6a:48:ca:09:01:e3:50:c2:90:e8:cb:75:37:38: 18:8e:a8:22:c9:44:81:59:50:4a:e5:d4:3a:b7:0c:2f:60:1e: a6:01:3e:28:ea:3d:e4:53:94:7a:29:6e:87:0a:09:6c:64:41: 9f:08:cc:8a:01:66:f3:d7:bc:85:8e:e4:53:25:c8:ec:04:83: 80:ef:ee:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDFY4rQLsgWQTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTU0MzBjMTctOGQwNC00NWU2LWEyMmMtYzdhODJlMDk2M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgFMXB4z4ARMJjGp755/od4ISboCoV2AF6Hb iq6Q46R8llMUDeBfzfgpGtoHlrGj+zulQdr5uyvg2tFqRim4uVPpkDgbgEcda0U+ vbNLmwRZUCXIqR7d89jwKAeXk/a0sgYkrDaQmFXqd6uiihYzHJBowMk4wMBArke0 to1a4IkIjIg4kzZiITNPaXQ/qnVftMiwkEurRUOx+6BXrfVZYKt35D9G6fYoXzVc LaN8JquH0WrRdrbTfDxumjsMgCfxnmaFQBixO3WH7YGXrffuY3RllW49LayJn9SU 9Z84hulKkfL9Ui2u/kcIP3Pu20wmcuUnuznKI9T77Tag7FM83wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHyrc60+T6EYIcLqw1tpj7tPE4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmU0MjMxZjAtY2JhYi0z ZTUzLWEyZTItNjU0MzFmZDA4MTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC1lJy0yDp2JaSd1Ctg4T2eSgLaqmgVCamjLlgu8rDsoP4tPO4A0x qanKHe/uN56WYlcDxEpQWBs8Y7CGbA9235PhB2QwZjEopJB4UckuhjMz/jmHcErH 12Pma/JgZlTHohPkz8l6UD1DAIvQxDo10ZaE6cRg7Syi5qRLeubdPIcDpsKzGVV9 mCNrOWZbX8ERqRXmdO1m4GamLc8toSE9hKHXz8eTR29IaqJtkwcx3Yn7TLudEVIH S2pIygkB41DCkOjLdTc4GI6oIslEgVlQSuXUOrcML2AepgE+KOo95FOUeiluhwoJ bGRBnwjMigFm89e8hY7kUyXI7ASDgO/ugQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:40 2026 by rpki-client