This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa File: 2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa (raw, json) Hash identifier: tVqsk1neNivGaGIMpPdBUUFoF21/FRnx0untkKanWJg= Subject key identifier: DB:F4:CA:08:07:40:0E:1D:0D:BC:C6:C4:3C:98:6D:DE:CD:9D:76:80 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BE125C4E5A4C165D4EC1C2F40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:c4:e5:a4:c1:65:d4:ec:1c:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=32ff4389-98fd-4a04-922e-12d611840016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:ca:e4:4a:80:51:f6:9a:b1:a4:bd:be:05: e3:d0:32:13:d4:5b:d9:1a:57:a8:51:82:cf:ac:8a: 41:1e:09:bf:61:ba:99:ae:59:ba:ac:6b:95:90:42: 7d:19:8b:d6:4e:57:a5:94:4c:cd:84:ca:d0:70:08: f0:95:5e:92:c6:9b:c4:04:62:8c:ab:ff:15:f3:0d: b0:c1:28:a8:cf:b4:cd:69:b7:90:7e:e3:df:16:ea: 12:8c:79:a6:04:4d:1e:70:01:3c:42:a2:ab:e2:0b: 5d:e1:76:2a:b2:33:cd:ae:50:65:e6:bc:33:ff:7b: ad:87:8f:52:e5:4f:7d:42:1c:f8:e7:9b:56:8f:54: 14:db:09:9f:8b:10:f2:63:fc:d9:6a:60:b1:76:a7: a1:f5:8f:3f:96:a2:18:8d:26:cd:91:00:fc:0b:65: e6:d1:af:08:b6:40:c6:42:f4:dd:d1:b7:50:a4:b6: 6b:4d:ff:9e:b6:4f:17:0f:4b:3c:82:25:f4:91:b4: cf:cc:7c:ad:70:a7:31:ec:5e:c5:60:9d:6d:85:1f: 87:ae:db:4a:76:83:6f:25:43:d5:7e:e0:58:c7:88: 66:70:9d:3f:de:48:21:d3:df:72:ee:79:bc:d7:2b: f7:ff:c9:a7:de:ce:f1:7a:12:81:24:19:96:b0:34: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:CA:08:07:40:0E:1D:0D:BC:C6:C4:3C:98:6D:DE:CD:9D:76:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5c:e1:a4:89:7f:cc:8c:3e:6d:91:ba:c1:f9:e5:26:4a:a0: 45:de:50:40:00:33:28:5d:08:e6:1d:92:c8:71:96:9b:dd:6f: 36:3c:b3:91:f1:0e:db:02:a4:92:99:1b:33:ff:30:18:68:5c: db:58:55:9c:1c:b1:95:e2:b3:f6:3b:23:80:79:13:c1:41:aa: 36:ab:37:66:1f:ff:6a:1b:13:18:fc:c6:f6:20:93:db:d4:31: 1a:ef:4b:1c:32:b9:50:4f:42:3d:ed:5e:74:8f:b6:f8:48:94: c6:55:eb:70:9b:11:10:1e:5b:35:4a:ec:3a:8c:93:ae:62:41: 4a:66:28:84:7f:97:ea:54:73:68:05:75:dd:7c:09:1c:a8:bf: 75:80:06:d3:7e:67:2d:03:25:47:46:af:7a:43:f9:ff:5b:a7: 76:4c:f4:32:e3:4f:76:22:4d:7e:d3:51:45:36:af:aa:3e:9a: bd:79:e5:62:df:df:41:48:b7:a2:21:b0:18:42:13:de:e3:8a: 0a:03:1a:d8:45:f4:ab:54:fc:d8:0e:2d:84:78:66:23:a1:16: 85:f4:58:e7:fb:b6:1f:91:13:8c:2e:95:49:68:04:d8:9c:e5: f7:71:1e:18:8a:d5:52:58:0d:08:07:1e:23:26:74:d1:f2:c9: 6f:35:5e:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvhJcTlpMFl1OwcL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk MzJmZjQzODktOThmZC00YTA0LTkyMmUtMTJkNjExODQwMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjbK5EqAUfaasaS9vgXj0DIT1FvZGleoUYLP rIpBHgm/YbqZrlm6rGuVkEJ9GYvWTlellEzNhMrQcAjwlV6SxpvEBGKMq/8V8w2w wSioz7TNabeQfuPfFuoSjHmmBE0ecAE8QqKr4gtd4XYqsjPNrlBl5rwz/3uth49S 5U99Qhz455tWj1QU2wmfixDyY/zZamCxdqeh9Y8/lqIYjSbNkQD8C2Xm0a8ItkDG QvTd0bdQpLZrTf+etk8XD0s8giX0kbTPzHytcKcx7F7FYJ1thR+HrttKdoNvJUPV fuBYx4hmcJ0/3kgh099y7nm81yv3/8mn3s7xehKBJBmWsDQWMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNv0yggHQA4dDbzGxDyYbd7NnXaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZhYTJhMmMtYmMyNC0z OWU1LWExZGItNWQxMzdmZjAwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR1zhpIl/zIw+bZG6wfnlJkqgRd5QQAAzKF0I5h2SyHGWm91vNjyz kfEO2wKkkpkbM/8wGGhc21hVnByxleKz9jsjgHkTwUGqNqs3Zh//ahsTGPzG9iCT 29QxGu9LHDK5UE9CPe1edI+2+EiUxlXrcJsREB5bNUrsOoyTrmJBSmYohH+X6lRz aAV13XwJHKi/dYAG035nLQMlR0avekP5/1undkz0MuNPdiJNftNRRTavqj6avXnl Yt/fQUi3oiGwGEIT3uOKCgMa2EX0q1T82A4thHhmI6EWhfRY5/u2H5ETjC6VSWgE 2Jzl93EeGIrVUlgNCAceIyZ00fLJbzVeRg== -----END CERTIFICATE-----Generated at Tue Nov 25 15:27:21 2025 by rpki-client