This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa File: 32cf1c42-4bc7-304c-80fc-25ca24305072.roa (raw, json) Hash identifier: FgjXZ3hH7CggLAR2u8GO3p7StApzlwI/Pg90pbx1VGI= Subject key identifier: 68:34:52:0D:B0:C7:F2:DF:68:E0:CD:85:40:DB:9C:97:9A:9C:E0:6C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBC9809848EF6A6375E57C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c9:80:98:48:ef:6a:63:75:e5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=a01b91d7-6c91-4bfa-b763-74b9d30840d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:ae:94:32:dc:c5:c5:66:2e:ab:2a:b0:74: 32:fd:88:4e:f6:92:1c:28:c6:39:a5:f3:41:dd:d9: c8:5d:99:33:bc:25:d3:8a:22:51:10:36:7a:2e:57: f7:35:7f:0c:92:4c:39:2a:8f:c4:03:91:8f:72:cb: d7:2f:10:a5:af:7e:58:44:0c:dc:25:b5:09:dd:04: 8d:06:a9:16:04:3a:0b:44:0a:e1:21:ac:86:73:5a: 51:61:d5:85:db:82:64:e3:a1:5e:47:ca:bd:94:11: fa:14:fa:14:aa:61:67:ab:d6:58:61:e2:7d:bc:58: b3:61:71:ce:6d:3e:19:3a:55:36:70:cc:aa:3e:54: 4f:4f:99:f1:4e:83:0a:cc:e6:7e:31:eb:ad:2b:c3: 2f:c2:d2:6b:54:9f:72:90:80:71:29:3b:4a:28:cf: 3c:99:7e:29:93:8e:7e:99:4c:99:71:d5:a7:0e:32: d1:f8:bf:49:d7:48:11:46:8c:4f:d9:50:56:24:f7: 04:57:c5:77:8d:17:f1:44:ad:8d:eb:a0:51:b3:90: 54:81:a8:6e:75:77:7f:fb:4e:d5:42:64:96:e3:33: da:8d:0c:1e:67:8c:29:62:7f:ea:a6:2a:22:15:29: df:ff:65:5c:4d:5d:18:c8:04:fa:28:da:70:72:5d: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:34:52:0D:B0:C7:F2:DF:68:E0:CD:85:40:DB:9C:97:9A:9C:E0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9d:4d:a2:0e:fa:69:0e:e0:3c:af:34:9d:25:6b:07:9d:b7: d8:98:2a:e8:a6:bc:80:fe:5c:7c:f4:93:3d:f4:cf:d5:95:ce: b1:4a:de:de:3e:21:d6:7e:6e:80:4d:45:d0:ea:d7:80:02:0e: 87:b5:0b:9c:d8:5f:51:bd:fc:fe:0f:39:27:b9:33:17:e6:1a: d2:63:a2:5b:fa:89:99:32:5f:07:18:f9:51:94:3c:dc:b5:9e: 39:07:d7:60:6b:46:b1:24:cf:65:6c:6e:34:fe:48:30:32:2e: 85:70:84:48:db:66:eb:bc:cf:51:c6:8c:04:92:00:8b:d8:6d: c2:64:55:12:cd:76:f5:8e:b7:c4:13:12:3f:57:10:f1:eb:ca: 4d:6f:40:d2:c1:25:0c:92:00:5a:c7:dc:db:d9:2a:34:5a:d5: 49:e0:4b:dc:8a:5b:98:63:26:dd:00:36:70:cf:9b:64:ce:f9: b3:1e:05:4b:0b:80:12:ad:df:e6:3a:85:d0:d2:30:f4:7e:9a: fc:cb:72:c7:1d:52:e7:5f:ab:b1:9c:98:19:7b:fd:5d:9d:f2: c9:16:f9:b2:02:06:fa:bc:4d:4c:c4:60:c5:88:f3:b7:38:52: 6d:f1:4c:12:ac:7d:34:b2:65:77:6f:a1:70:72:fb:69:e5:c2: cd:8b:56:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC28mAmEjvamN15XwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YTAxYjkxZDctNmM5MS00YmZhLWI3NjMtNzRiOWQzMDg0MGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYCulDLcxcVmLqsqsHQy/YhO9pIcKMY5pfNB 3dnIXZkzvCXTiiJREDZ6Llf3NX8Mkkw5Ko/EA5GPcsvXLxClr35YRAzcJbUJ3QSN BqkWBDoLRArhIayGc1pRYdWF24Jk46FeR8q9lBH6FPoUqmFnq9ZYYeJ9vFizYXHO bT4ZOlU2cMyqPlRPT5nxToMKzOZ+MeutK8MvwtJrVJ9ykIBxKTtKKM88mX4pk45+ mUyZcdWnDjLR+L9J10gRRoxP2VBWJPcEV8V3jRfxRK2N66BRs5BUgahudXd/+07V QmSW4zPajQweZ4wpYn/qpioiFSnf/2VcTV0YyAT6KNpwcl1kCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGg0Ug2wx/LfaODNhUDbnJeanOBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzJjZjFjNDItNGJjNy0z MDRjLTgwZmMtMjVjYTI0MzA1MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX51Nog76aQ7gPK80nSVrB5232Jgq6Ka8gP5cfPSTPfTP1ZXOsUre 3j4h1n5ugE1F0OrXgAIOh7ULnNhfUb38/g85J7kzF+Ya0mOiW/qJmTJfBxj5UZQ8 3LWeOQfXYGtGsSTPZWxuNP5IMDIuhXCESNtm67zPUcaMBJIAi9htwmRVEs129Y63 xBMSP1cQ8evKTW9A0sElDJIAWsfc29kqNFrVSeBL3IpbmGMm3QA2cM+bZM75sx4F SwuAEq3f5jqF0NIw9H6a/Mtyxx1S51+rsZyYGXv9XZ3yyRb5sgIG+rxNTMRgxYjz tzhSbfFMEqx9NLJld2+hcHL7aeXCzYtWeg== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:28 2026 by rpki-client