This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa File: 342a0229-47cb-3dad-968f-aea82e2e4558.roa (raw, json) Hash identifier: P9C0KcyYEsbVjgRqpIQjhd0cQgxLoOBtnNSr79idWEw= Subject key identifier: 09:CC:90:63:3D:07:24:AC:B0:F1:35:3B:E5:2D:58:6B:C0:E3:2F:9A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A68DAEBA8F8DDB2AA6BEE8 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:8d:ae:ba:8f:8d:db:2a:a6:be:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=40938374-1cf9-4787-afcc-5f5515309e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:3b:a2:e1:a9:4d:f8:f8:4f:3e:29:48:ec: d5:05:ae:f8:e8:98:7a:53:4b:0f:30:28:90:b7:93: 2e:ba:10:22:de:99:01:51:05:c5:b1:cf:67:47:2d: e0:54:06:7e:ea:43:b0:00:16:de:d0:3f:56:23:2f: e0:20:dd:85:51:83:23:38:da:cf:43:9e:df:6b:b0: 6c:5a:ea:a5:6e:6c:1d:68:6a:4e:f8:cd:86:9f:72: 65:d9:dc:1b:14:7f:54:21:a8:36:77:04:87:99:eb: 79:10:ba:74:d5:c8:dd:1d:1b:4d:2b:71:7a:9e:62: fc:5a:c5:45:a1:29:00:25:9a:ee:cd:3a:30:89:5c: f9:20:30:bc:6d:3a:e1:9f:76:fb:eb:75:fc:b2:9f: 0d:0c:a8:bb:73:64:77:17:e5:9d:fe:59:bc:5d:5c: b7:80:e1:a7:ca:ff:79:6b:be:bb:26:50:37:9a:d8: 17:d2:5e:db:2c:a8:c2:ee:2e:61:d5:56:73:3b:b5: ab:e9:66:d7:81:fe:76:88:0d:15:b7:18:33:08:35: 49:61:a4:e7:12:68:ae:18:6b:d7:53:f4:6b:c7:7d: 38:b8:d1:9a:40:6f:50:b3:f0:12:a5:19:e7:f2:36: c1:9e:0c:d2:5b:92:67:15:28:ce:cb:66:53:ea:62: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CC:90:63:3D:07:24:AC:B0:F1:35:3B:E5:2D:58:6B:C0:E3:2F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4b:ca:f4:73:dc:9b:fd:45:0f:9e:48:9d:5e:a2:e6:db:26: 9b:d9:55:ae:0b:0a:1d:52:74:9b:0c:96:17:c9:4b:ce:d1:00: 48:fc:e6:0b:0f:07:04:7b:6d:0b:3a:8b:1d:3a:2c:e6:4e:b6: c1:f2:14:f9:40:f5:bb:ac:7e:f8:61:b6:41:31:90:c3:ab:d0: 91:b5:46:1f:83:63:94:33:56:22:34:99:4c:00:b8:ab:13:e7: e4:e4:7f:b4:c7:67:52:ae:b0:ac:ac:68:5a:9c:00:64:8e:0e: b7:f6:ab:cd:ba:d2:32:e1:96:03:96:49:97:49:f8:6b:d2:60: 1e:2a:c9:d4:bc:36:61:c3:6e:ef:96:5b:1c:44:6d:76:31:97: d7:84:12:7b:c0:7e:24:86:33:9e:bc:0c:2d:bc:5c:95:be:9e: ce:0a:9e:51:42:c1:25:70:00:ad:42:d5:76:58:f2:85:89:29: 8e:94:cb:7c:7b:dc:7d:7f:e6:ab:92:9d:81:6e:5f:be:48:b9: cd:9d:35:e6:4c:e2:b0:e8:07:2e:c5:a2:1b:d4:0f:29:4a:03: 03:bc:cc:6c:64:fd:75:4e:e2:69:bb:bb:8b:da:8a:c6:0c:39: a0:1c:45:c8:67:b7:2e:8a:d1:d8:ff:7a:be:cf:f8:2c:54:8a: b0:f9:01:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpo2uuo+N2yqmvugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NDA5MzgzNzQtMWNmOS00Nzg3LWFmY2MtNWY1NTE1MzA5ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbg7ouGpTfj4Tz4pSOzVBa746Jh6U0sPMCiQ t5MuuhAi3pkBUQXFsc9nRy3gVAZ+6kOwABbe0D9WIy/gIN2FUYMjONrPQ57fa7Bs WuqlbmwdaGpO+M2Gn3Jl2dwbFH9UIag2dwSHmet5ELp01cjdHRtNK3F6nmL8WsVF oSkAJZruzTowiVz5IDC8bTrhn3b763X8sp8NDKi7c2R3F+Wd/lm8XVy3gOGnyv95 a767JlA3mtgX0l7bLKjC7i5h1VZzO7Wr6WbXgf52iA0VtxgzCDVJYaTnEmiuGGvX U/Rrx304uNGaQG9Qs/ASpRnn8jbBngzSW5JnFSjOy2ZT6mJqeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAnMkGM9BySssPE1O+UtWGvA4y+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzQyYTAyMjktNDdjYi0z ZGFkLTk2OGYtYWVhODJlMmU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujoQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAT0vK9HPcm/1FD55InV6i5tsmm9lVrgsKHVJ0mwyWF8lLztEASPzm Cw8HBHttCzqLHTos5k62wfIU+UD1u6x++GG2QTGQw6vQkbVGH4NjlDNWIjSZTAC4 qxPn5OR/tMdnUq6wrKxoWpwAZI4Ot/arzbrSMuGWA5ZJl0n4a9JgHirJ1Lw2YcNu 75ZbHERtdjGX14QSe8B+JIYznrwMLbxclb6ezgqeUULBJXAArULVdljyhYkpjpTL fHvcfX/mq5KdgW5fvki5zZ015kzisOgHLsWiG9QPKUoDA7zMbGT9dU7iabu7i9qK xgw5oBxFyGe3LorR2P96vs/4LFSKsPkB9Q== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:25 2026 by rpki-client