This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa File: 3602582a-a894-32a0-8f9b-5cc020d56039.roa (raw, json) Hash identifier: EA95IAjrKbTpuQiN++IVrPwXmhxElhaaIDXrDqtsLBs= Subject key identifier: 67:0C:B5:48:7F:DA:C3:E9:4E:D6:88:A6:99:A4:C7:FD:F2:67:5F:F4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C48712492F2DE67BF3F99EDC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:24:92:f2:de:67:bf:3f:99:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=ca2e7159-a1ff-4604-88ea-dfe6031a12c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:3f:a7:e2:27:93:fa:5b:6a:94:5b:dc:f6: c1:ef:c9:d1:b5:06:87:fa:d5:de:25:54:d2:91:ae: 49:33:5f:dd:4c:32:5a:0e:50:8c:18:dc:e0:be:2a: 80:fe:e4:5d:27:e7:06:85:2e:af:c8:a5:fe:95:8d: b3:8b:25:30:17:d8:5a:1c:a1:ad:f9:6d:c8:81:f9: fd:17:e1:1c:a4:4f:b8:d2:01:39:4e:b0:f9:0b:d6: 1a:ef:4f:d4:2c:42:4b:cf:59:6f:8a:ee:f2:e5:e1: 52:80:3c:e6:81:6c:10:cc:c3:55:ef:e7:bb:1c:fb: 34:4c:19:2d:66:6d:e8:f2:29:e4:e2:0c:b6:00:43: da:10:8c:f9:15:9a:b2:67:c8:0f:17:01:b1:09:97: aa:cc:b9:65:da:cf:38:d7:9a:bd:ed:62:30:04:77: 3c:b0:ff:e1:fd:65:f1:e6:cc:d6:a9:14:41:8c:cf: e3:61:b4:bb:fd:02:fd:31:e8:51:4d:b6:8f:c3:f2: 1b:92:f0:77:4a:cf:5e:c3:13:83:52:1f:3a:d6:d9: ae:5b:55:12:28:85:20:12:03:b3:3a:78:e7:7c:23: 9e:8c:34:06:83:40:47:46:85:a1:21:2c:16:65:a5: 42:2a:66:52:7e:f2:45:92:1f:ce:ec:44:bb:48:a2: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:B5:48:7F:DA:C3:E9:4E:D6:88:A6:99:A4:C7:FD:F2:67:5F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:21:a3:0a:14:ef:89:4d:f2:7d:7d:6c:8f:1d:87:f3:a5:bf: 02:f0:8e:58:bc:3b:4e:26:ab:b3:9c:a0:3a:43:de:41:50:f3: e9:ee:7a:3f:70:d4:c4:32:3f:d2:d2:b1:f3:6f:7e:33:6a:75: 0c:1d:23:57:94:c2:51:0f:af:bb:85:1d:28:9f:77:80:87:85: 38:12:de:1b:ee:db:5b:c4:fa:37:71:ee:c5:f4:a4:c6:50:dc: 5d:9f:93:63:ff:e4:cc:43:ab:e4:c4:ae:88:42:89:4a:de:89: af:bf:2f:db:b3:75:46:89:a8:6e:22:d1:ae:af:a2:75:50:f2: 00:5a:88:c5:b3:ce:8f:0e:97:fe:2f:92:81:ae:9d:30:52:ec: 0b:e8:5f:22:c3:39:af:ea:53:64:ae:d7:30:1a:51:39:3e:31: 6b:0f:b7:05:7f:58:ed:5a:6c:c0:b5:4c:ed:6e:4f:b2:e3:f8: 36:0b:0c:45:48:96:b7:e1:c1:b5:da:6c:64:41:54:ce:3b:2f: be:61:98:77:d8:57:c8:1a:89:2a:63:50:ba:48:68:76:27:e2: 8a:25:17:1a:7e:da:77:73:0e:48:d6:d9:c9:1f:49:66:fe:47: 5d:40:18:86:98:53:4d:0e:6a:5d:d8:d3:c0:ba:6a:2a:20:d6: 8b:8a:0f:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcSSS8t5nvz+Z7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk Y2EyZTcxNTktYTFmZi00NjA0LTg4ZWEtZGZlNjAzMWExMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXo/p+Ink/pbapRb3PbB78nRtQaH+tXeJVTS ka5JM1/dTDJaDlCMGNzgviqA/uRdJ+cGhS6vyKX+lY2ziyUwF9haHKGt+W3Igfn9 F+EcpE+40gE5TrD5C9Ya70/ULEJLz1lviu7y5eFSgDzmgWwQzMNV7+e7HPs0TBkt Zm3o8ink4gy2AEPaEIz5FZqyZ8gPFwGxCZeqzLll2s8415q97WIwBHc8sP/h/WXx 5szWqRRBjM/jYbS7/QL9MehRTbaPw/IbkvB3Ss9ewxODUh861tmuW1USKIUgEgOz OnjnfCOejDQGg0BHRoWhISwWZaVCKmZSfvJFkh/O7ES7SKLf2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGcMtUh/2sPpTtaIppmkx/3yZ1/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzYwMjU4MmEtYTg5NC0z MmEwLThmOWItNWNjMDIwZDU2MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIiGjChTviU3yfX1sjx2H86W/AvCOWLw7Tiars5ygOkPeQVDz6e56 P3DUxDI/0tKx829+M2p1DB0jV5TCUQ+vu4UdKJ93gIeFOBLeG+7bW8T6N3HuxfSk xlDcXZ+TY//kzEOr5MSuiEKJSt6Jr78v27N1RomobiLRrq+idVDyAFqIxbPOjw6X /i+Sga6dMFLsC+hfIsM5r+pTZK7XMBpROT4xaw+3BX9Y7VpswLVM7W5PsuP4NgsM RUiWt+HBtdpsZEFUzjsvvmGYd9hXyBqJKmNQukhodifiiiUXGn7ad3MOSNbZyR9J Zv5HXUAYhphTTQ5qXdjTwLpqKiDWi4oPMg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:29:12 2026 by rpki-client