This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3141a0a5-989f-3641-b184-b04ea941f87c.roa File: 3141a0a5-989f-3641-b184-b04ea941f87c.roa (raw, json) Hash identifier: 7AFxLt1xtfhxNX2s7WKWERu/27YCf1gF5wpjsRtAAxo= Subject key identifier: 96:AE:53:C5:FE:E2:F6:EC:86:5B:2F:BD:66:62:00:79:D0:FB:25:29 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBE071BD5DF56E8EC54BC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3141a0a5-989f-3641-b184-b04ea941f87c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e8e:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e0:71:bd:5d:f5:6e:8e:c5:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=448bbe38-8a11-476e-9215-80a88dc4f9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5c:1a:b7:c1:e2:d5:bd:3a:af:ed:c0:fc:1f: cd:cd:a8:06:d2:ea:aa:1f:a5:c3:8c:c1:a5:60:3e: 2b:6c:79:da:67:9d:eb:71:2c:b5:c2:a7:e6:a7:1b: e6:15:a5:62:b6:8e:c6:ac:eb:09:82:12:f3:98:4d: c1:0b:27:21:ec:14:e3:05:e4:77:39:09:13:1e:d6: 8c:3c:d5:92:d5:64:03:87:3d:e1:b6:85:6a:11:33: dd:b0:35:20:38:ec:b2:18:2e:c6:de:17:89:3b:c6: 60:15:26:74:cd:70:8c:ca:08:e5:01:cb:32:74:3e: 77:76:16:df:fa:f9:5b:d2:00:ee:34:57:c5:d2:38: e8:bd:89:0a:6a:7d:77:6d:19:b6:52:c0:36:a4:b3: a5:ff:00:b6:8d:ba:60:e2:29:f8:41:d7:34:e7:f1: c9:f6:69:ab:52:d6:a8:e4:20:30:83:82:f1:53:c1: 27:3a:cd:9d:85:d0:84:8d:2e:63:1d:77:2d:73:28: 31:5e:b1:a4:23:f1:0e:e6:0c:1a:07:b8:d8:2c:3c: 03:53:2d:48:bd:f3:da:e9:92:f7:32:31:ea:57:8e: 8a:34:98:76:bf:0a:70:b4:e8:1e:79:2f:33:ed:38: cc:d0:c5:ee:30:cc:8d:a6:67:8b:4b:e5:ad:f3:4b: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:53:C5:FE:E2:F6:EC:86:5B:2F:BD:66:62:00:79:D0:FB:25:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3141a0a5-989f-3641-b184-b04ea941f87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d1:82:cc:70:67:c6:5a:d6:c0:b4:ea:a2:8e:09:a8:bc:17: ad:0a:6a:0e:38:de:d0:97:2a:28:d6:dd:2d:02:ef:5b:a8:1c: f4:8a:64:1e:b8:68:48:ac:3d:76:39:40:6e:2c:45:da:aa:52: 27:44:9a:7b:4f:0c:df:a6:6d:85:d7:ab:f1:fa:a3:c4:74:23: d7:44:2d:b5:c1:9f:a0:d3:6c:70:24:62:21:db:4d:8f:94:08: 63:3b:ae:cd:a5:9d:60:39:d3:e3:be:47:8f:ce:f6:5b:57:f1: 81:94:22:7e:b2:36:fe:2b:ac:96:81:b8:8e:1e:dc:ac:ab:34: bf:b3:2f:89:70:65:6c:29:8c:49:d8:33:e3:5c:94:7d:96:3d: fa:16:1d:11:73:33:cb:23:57:96:b7:c1:c5:cd:df:a1:6a:a9: 99:0d:ac:c4:a5:52:33:b9:16:37:0d:ea:2a:85:66:c2:1f:43: 74:a4:44:3c:4e:d2:66:01:22:38:e4:9c:b1:c5:77:db:73:70: b1:cc:80:19:8f:0f:8a:c3:4b:4d:c6:78:2a:1c:68:56:de:ba: e9:41:87:c7:9f:3d:b3:c9:b2:2c:af:ab:b4:2a:09:79:a4:90: d2:19:64:81:c3:b7:e5:10:1e:cb:d1:39:42:98:eb:11:cd:12: 5b:ed:09:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2+BxvV31bo7FS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NDQ4YmJlMzgtOGExMS00NzZlLTkyMTUtODBhODhkYzRmOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1wat8Hi1b06r+3A/B/NzagG0uqqH6XDjMGl YD4rbHnaZ53rcSy1wqfmpxvmFaVito7GrOsJghLzmE3BCych7BTjBeR3OQkTHtaM PNWS1WQDhz3htoVqETPdsDUgOOyyGC7G3heJO8ZgFSZ0zXCMygjlAcsydD53dhbf +vlb0gDuNFfF0jjovYkKan13bRm2UsA2pLOl/wC2jbpg4in4Qdc05/HJ9mmrUtao 5CAwg4LxU8EnOs2dhdCEjS5jHXctcygxXrGkI/EO5gwaB7jYLDwDUy1IvfPa6ZL3 MjHqV46KNJh2vwpwtOgeeS8z7TjM0MXuMMyNpmeLS+Wt80t7lwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJauU8X+4vbshlsvvWZiAHnQ+yUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzE0MWEwYTUtOTg5Zi0z NjQxLWIxODQtYjA0ZWE5NDFmODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujggw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjtGCzHBnxlrWwLTqoo4JqLwXrQpqDjje0JcqKNbdLQLvW6gc9Ipk HrhoSKw9djlAbixF2qpSJ0Sae08M36Zthder8fqjxHQj10QttcGfoNNscCRiIdtN j5QIYzuuzaWdYDnT475Hj872W1fxgZQifrI2/iusloG4jh7crKs0v7MviXBlbCmM Sdgz41yUfZY9+hYdEXMzyyNXlrfBxc3foWqpmQ2sxKVSM7kWNw3qKoVmwh9DdKRE PE7SZgEiOOScscV323NwscyAGY8PisNLTcZ4KhxoVt666UGHx589s8myLK+rtCoJ eaSQ0hlkgcO35RAey9E5QpjrEc0SW+0J6w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:55 2026 by rpki-client