This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ffc1c6f-2542-31b9-8a23-a2acf6f0dbbc.roa File: 2ffc1c6f-2542-31b9-8a23-a2acf6f0dbbc.roa (raw, json) Hash identifier: OWlPap0tLsofTq4dZ6DHrQdyMgCQ0WxFiGqLHx20Tc4= Subject key identifier: 04:8A:13:24:93:49:B9:FE:A8:47:2E:09:93:56:57:01:BB:C1:84:1F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BE3D2B209E305AE44FE19C140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ffc1c6f-2542-31b9-8a23-a2acf6f0dbbc.roa Signing time: Mon 17 Nov 2025 13:00:43 +0000 ROA not before: Mon 17 Nov 2025 13:00:43 +0000 ROA not after: Sun 15 Feb 2026 13:00:43 +0000 asID: 19905 IP address blocks: 2604:2e8c:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e3:d2:b2:09:e3:05:ae:44:fe:19:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 17 13:00:43 2025 GMT Not After : Feb 15 13:00:43 2026 GMT Subject: CN=23c2a20f-7431-4784-b2e0-83d488ecfa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:73:24:db:3e:b5:dd:32:61:71:d3:15:61: 80:f0:db:7e:7d:f4:41:4d:87:01:f0:db:0a:19:db: 47:47:5d:9f:d6:6c:33:ae:78:ac:2b:fd:aa:0d:13: 12:78:01:83:c3:cb:0f:2b:bd:00:66:b0:0d:ef:75: a8:8a:e7:1c:13:4d:0a:17:ce:d8:f9:b8:2b:3d:a4: 6b:dc:62:42:a8:53:20:1b:ae:4d:cc:e2:18:fe:d3: b9:06:3d:f8:b7:84:e0:bf:be:5c:c1:7b:23:ba:d8: df:b7:7c:ee:eb:da:9e:44:13:48:4f:97:a1:8a:26: f7:3d:00:6c:6a:b2:1b:44:10:fe:e1:58:3b:53:ca: ab:76:7f:74:e2:07:fa:53:12:4f:fc:57:ca:fd:92: 1c:21:39:42:58:74:84:9a:a9:db:b7:96:8e:6d:84: 7d:78:8b:93:b3:b7:1b:a3:6c:84:0b:f2:3c:94:5c: 3b:3d:fe:76:e8:e3:28:b5:8b:6f:86:02:6a:2f:75: 12:b4:2b:48:c2:26:40:c1:5d:cf:e9:1a:05:a0:34: 80:23:31:a5:ed:cd:b1:64:31:8c:86:d8:a3:75:74: 83:21:77:a5:a0:9f:77:05:13:ab:b8:a3:35:09:20: 4a:0a:18:9c:a8:87:5e:0a:93:57:5c:65:93:67:96: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:13:24:93:49:B9:FE:A8:47:2E:09:93:56:57:01:BB:C1:84:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ffc1c6f-2542-31b9-8a23-a2acf6f0dbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:ac00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ae:0d:d9:86:fa:16:6e:a3:f6:e3:d1:68:bc:91:be:9a:ae: 3f:11:21:6a:14:f6:30:c7:a6:06:cd:be:9b:32:a8:6b:fe:2e: 5d:b9:46:36:b2:c1:14:9e:48:d7:f4:91:71:94:29:af:68:48: 09:b7:ad:21:bd:ab:c6:b6:69:ee:62:f9:9c:8f:cb:ff:af:07: 60:be:8a:fc:d1:d9:a3:8a:73:0e:4d:2a:7d:67:55:95:71:0a: 81:33:86:53:90:e8:51:18:6c:f4:ac:19:9b:c4:38:73:fb:a9: 48:64:11:ab:2f:17:ab:a5:ad:2d:94:d8:8b:0a:9c:06:85:54: bb:79:2d:ed:aa:46:a7:05:8c:e2:3e:a7:7f:84:e3:05:c7:52: dc:2a:68:a2:c8:68:9b:92:b4:f8:b7:ae:60:e7:e0:ab:3d:48: c3:df:bc:0c:98:8d:4c:a5:ed:f4:f5:32:89:fd:fc:6f:02:cb: 12:76:d5:91:ad:2e:61:f3:cb:3c:6a:f7:93:c4:ef:a8:b2:3a: f1:3a:43:bc:9e:cf:b1:03:34:2a:b6:63:6e:be:56:aa:3c:af: 1a:fc:1b:09:da:a2:23:b6:3c:49:fe:7e:77:55:97:6a:dc:03: cc:45:7b:4c:f2:8d:24:75:65:69:2e:f2:7b:d3:ae:54:94:e8: 42:23:78:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvj0rIJ4wWuRP4ZwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExNzEzMDA0M1oXDTI2MDIxNTEzMDA0M1owLzEtMCsGA1UEAxMk MjNjMmEyMGYtNzQzMS00Nzg0LWIyZTAtODNkNDg4ZWNmYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWxzJNs+td0yYXHTFWGA8Nt+ffRBTYcB8NsK GdtHR12f1mwzrnisK/2qDRMSeAGDw8sPK70AZrAN73WoiuccE00KF87Y+bgrPaRr 3GJCqFMgG65NzOIY/tO5Bj34t4Tgv75cwXsjutjft3zu69qeRBNIT5ehiib3PQBs arIbRBD+4Vg7U8qrdn904gf6UxJP/FfK/ZIcITlCWHSEmqnbt5aObYR9eIuTs7cb o2yEC/I8lFw7Pf526OMotYtvhgJqL3UStCtIwiZAwV3P6RoFoDSAIzGl7c2xZDGM htijdXSDIXeloJ93BROruKM1CSBKChicqIdeCpNXXGWTZ5b+NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFASKEySTSbn+qEcuCZNWVwG7wYQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZmYzFjNmYtMjU0Mi0z MWI5LThhMjMtYTJhY2Y2ZjBkYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH64N2Yb6Fm6j9uPRaLyRvpquPxEhahT2MMemBs2+mzKoa/4uXblG NrLBFJ5I1/SRcZQpr2hICbetIb2rxrZp7mL5nI/L/68HYL6K/NHZo4pzDk0qfWdV lXEKgTOGU5DoURhs9KwZm8Q4c/upSGQRqy8Xq6WtLZTYiwqcBoVUu3kt7apGpwWM 4j6nf4TjBcdS3Cpooshom5K0+LeuYOfgqz1Iw9+8DJiNTKXt9PUyif38bwLLEnbV ka0uYfPLPGr3k8TvqLI68TpDvJ7PsQM0KrZjbr5WqjyvGvwbCdqiI7Y8Sf5+d1WX atwDzEV7TPKNJHVlaS7ye9OuVJToQiN4vA== -----END CERTIFICATE-----Generated at Tue Nov 25 17:02:14 2025 by rpki-client