This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa File: 386697e9-daff-344a-823d-ac4db132b4d8.roa (raw, json) Hash identifier: 5+n+eKKC6FMwZylGb7kpejjRRkzpbikE9klxR39aMoI= Subject key identifier: F2:D4:0A:AB:58:CE:7D:7E:83:67:87:43:50:BC:CD:61:80:8B:27:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A66536A7D19634B819B600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:65:36:a7:d1:96:34:b8:19:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=2afa85bd-a490-4131-9edb-bb68e31e3cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:15:42:41:c0:08:4c:36:7a:4b:36:4b:ea: 4a:b5:aa:53:52:10:91:19:47:a8:98:9b:64:ee:fe: ca:c2:62:c6:74:ce:4e:80:02:59:cf:19:4e:41:4c: 95:dd:ff:82:15:9e:f4:30:7c:62:35:61:c6:7e:8e: ba:34:a5:c9:1e:04:1b:b5:16:78:63:04:fd:e9:78: e8:6c:29:b0:3a:c3:43:f2:62:d2:eb:e6:f4:2f:e4: 10:43:c2:9f:8e:59:8b:95:b4:54:cc:70:83:b4:e9: c2:ac:3b:df:f1:66:95:64:ad:ce:67:13:01:df:53: e8:cf:76:25:ee:30:36:f4:65:9b:2a:f6:e8:50:9b: 92:65:e2:e0:a8:83:e9:90:cf:74:5e:33:78:21:5f: f3:7e:b2:88:7c:86:38:3a:fa:06:ac:53:9e:56:f1: 6e:78:cc:e6:ff:00:5f:c6:44:3b:f7:6e:df:44:5d: 8b:07:06:45:22:61:b8:e3:87:59:a4:e5:74:37:d8: 5d:5e:a6:fc:33:3b:ae:6e:a7:ef:5b:f4:8a:2f:8f: 81:d1:93:ae:df:43:1a:5a:9a:03:2f:7d:04:9a:f5: 3a:7a:19:50:88:2b:90:74:61:9a:06:1d:a0:3f:7d: 86:5b:1a:7f:cb:d7:48:9e:00:d3:dd:2e:2a:e3:95: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D4:0A:AB:58:CE:7D:7E:83:67:87:43:50:BC:CD:61:80:8B:27:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d3:06:b6:60:52:54:41:ac:7f:1c:46:ee:a2:03:dc:c3:dc: 6f:47:49:10:cb:69:68:b8:d6:a7:da:ee:8c:68:9c:64:2d:2d: 48:56:b4:d8:86:16:a9:a0:fc:d2:7e:12:61:a3:7b:3a:f8:d7: 07:e6:53:98:d2:1d:45:88:a1:30:d4:42:b9:7f:6e:26:50:cb: 1a:0d:3f:55:04:4a:03:2e:f4:54:d1:ce:4d:ef:d6:cf:d4:6d: d9:6f:f1:d4:ba:5e:17:80:ee:53:39:d6:58:66:6a:81:c4:ac: 9e:00:50:9a:72:72:45:93:d2:f8:a0:c5:53:54:40:eb:b8:0c: 34:b0:56:41:1b:c3:fe:29:2a:f7:cf:6a:f2:cc:9f:2e:1d:16: 45:72:a9:02:67:b5:59:b2:de:7e:16:9e:59:6b:76:34:3a:d7: 28:3c:d8:f0:13:7b:0e:d3:82:29:91:51:1a:a7:5d:cd:3e:6d: 93:77:a2:e9:96:8b:4d:2f:ec:98:a2:d4:6a:94:2a:12:f0:fc: ea:a0:4e:4a:33:1d:5f:e8:cd:80:c4:23:bf:a6:6b:82:b4:24: fe:99:0c:a4:5c:b8:1f:7e:e8:27:d6:2c:53:17:ed:20:8b:84: 3a:72:28:ea:a5:fc:5b:f8:83:2f:f0:37:26:7a:20:e0:6a:59: 12:39:26:ee -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpmU2p9GWNLgZtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MmFmYTg1YmQtYTQ5MC00MTMxLTllZGItYmI2OGUzMWUzY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsEVQkHACEw2eks2S+pKtapTUhCRGUeomJtk 7v7KwmLGdM5OgAJZzxlOQUyV3f+CFZ70MHxiNWHGfo66NKXJHgQbtRZ4YwT96Xjo bCmwOsND8mLS6+b0L+QQQ8KfjlmLlbRUzHCDtOnCrDvf8WaVZK3OZxMB31Poz3Yl 7jA29GWbKvboUJuSZeLgqIPpkM90XjN4IV/zfrKIfIY4OvoGrFOeVvFueMzm/wBf xkQ7927fRF2LBwZFImG444dZpOV0N9hdXqb8MzuubqfvW/SKL4+B0ZOu30MaWpoD L30EmvU6ehlQiCuQdGGaBh2gP32GWxp/y9dIngDT3S4q45W7MwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPLUCqtYzn1+g2eHQ1C8zWGAiycDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzg2Njk3ZTktZGFmZi0z NDRhLTgyM2QtYWM0ZGIxMzJiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALNMGtmBSVEGsfxxG7qID3MPcb0dJEMtpaLjWp9rujGicZC0tSFa0 2IYWqaD80n4SYaN7OvjXB+ZTmNIdRYihMNRCuX9uJlDLGg0/VQRKAy70VNHOTe/W z9Rt2W/x1LpeF4DuUznWWGZqgcSsngBQmnJyRZPS+KDFU1RA67gMNLBWQRvD/ikq 989q8syfLh0WRXKpAme1WbLefhaeWWt2NDrXKDzY8BN7DtOCKZFRGqddzT5tk3ei 6ZaLTS/smKLUapQqEvD86qBOSjMdX+jNgMQjv6ZrgrQk/pkMpFy4H37oJ9YsUxft IIuEOnIo6qX8W/iDL/A3Jnog4GpZEjkm7g== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:18 2026 by rpki-client