This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa File: 3d5a4791-0867-39ae-aad3-f703055da2e1.roa (raw, json) Hash identifier: UzQj3jwbxRe1j+mRFIO3Uxtb1AoeY7HbJxoRdU1v/tI= Subject key identifier: 0D:38:6D:63:18:90:65:8D:B5:EE:B5:90:FC:10:63:41:B9:CE:FC:EE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBE0D94C29B236465DB800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e0:d9:4c:29:b2:36:46:5d:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=fc340632-5e6b-4457-9f6d-4bc6b6447388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:ad:d6:45:b2:3a:d6:23:39:fd:48:e6:fe: 17:31:7a:06:43:2b:6e:03:04:05:68:d0:fb:ed:b1: e6:43:45:70:b8:c0:4b:f0:43:5a:6a:7a:5b:98:64: a6:e0:c4:46:bb:d2:c0:d4:c3:a5:d1:9d:5f:ee:58: a3:fa:39:8b:8d:37:93:09:dd:2a:0a:1a:90:eb:b7: 65:d4:68:98:86:0d:b9:ab:a2:19:b2:4c:7e:59:fc: d5:08:cd:19:2f:72:41:72:f1:35:cc:f0:25:41:42: 7f:f2:82:56:b7:ce:28:ec:56:e2:a9:ba:83:3e:f5: a0:cd:a0:e8:eb:72:c1:64:0f:f4:59:40:5f:f1:ee: 2c:e8:47:fe:ff:4e:19:39:9e:11:4d:3c:b0:9a:75: 8f:55:1f:98:b3:07:1e:9e:ed:5e:f8:3c:ab:da:81: 0e:25:34:3a:1c:5c:bc:69:48:2d:6f:67:c8:d0:48: a3:3b:7c:e7:34:52:43:c4:ba:ca:8d:15:79:86:10: 46:69:04:b3:44:d9:37:b9:2c:b5:be:da:56:b8:bc: 2e:ca:91:e2:3a:31:d2:ab:bf:f3:93:be:1b:ca:09: f8:65:71:90:18:b1:e4:50:fa:72:33:8e:fd:c8:8f: 47:3c:69:f5:e8:57:4b:ab:49:b9:83:ac:60:59:7f: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:6D:63:18:90:65:8D:B5:EE:B5:90:FC:10:63:41:B9:CE:FC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ed:10:c4:6f:5a:47:67:d3:3f:46:41:3f:35:22:45:17:dd: 97:44:b9:4f:a9:8f:15:bc:12:80:34:00:f2:62:0e:dd:55:fe: 0a:8c:e6:a8:c3:8d:b4:f4:33:65:18:42:51:02:c0:19:51:77: 23:6f:3a:c7:09:e0:3c:b4:4f:1e:ca:77:bf:2c:32:27:26:bd: 3e:10:04:e4:e8:62:d9:32:cf:d1:1f:39:45:66:66:50:67:2b: 6b:58:e3:33:85:6a:59:71:85:0a:01:ef:98:4c:7e:80:1a:e0: 1f:73:21:f5:39:ca:0f:07:64:34:00:e4:d5:c7:1a:5b:b5:88: 65:65:0a:3f:0c:0f:48:f1:70:b3:76:f2:f6:5c:50:99:d0:59: 8e:ab:97:1f:49:ad:69:32:5b:a4:0b:65:af:04:97:89:ee:bc: fb:f3:63:6e:31:f4:15:7c:c0:cf:0e:71:d3:a1:bf:fb:12:4b: cd:c1:87:47:75:aa:63:03:64:70:5c:81:51:e4:ed:a9:d7:1a: 0d:ab:b5:61:2b:8e:8e:d7:a4:41:80:cf:42:82:94:d2:d0:80: 0d:40:45:d8:dd:e4:66:e1:e9:6b:38:f8:a5:91:30:2f:1f:64: 3a:c2:b8:5d:0a:82:dd:1f:ab:93:46:7f:fb:70:67:52:6a:b2: 12:6f:21:6e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2+DZTCmyNkZduAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmMzNDA2MzItNWU2Yi00NDU3LTlmNmQtNGJjNmI2NDQ3Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUut1kWyOtYjOf1I5v4XMXoGQytuAwQFaND7 7bHmQ0VwuMBL8ENaanpbmGSm4MRGu9LA1MOl0Z1f7lij+jmLjTeTCd0qChqQ67dl 1GiYhg25q6IZskx+WfzVCM0ZL3JBcvE1zPAlQUJ/8oJWt84o7FbiqbqDPvWgzaDo 63LBZA/0WUBf8e4s6Ef+/04ZOZ4RTTywmnWPVR+Yswcenu1e+Dyr2oEOJTQ6HFy8 aUgtb2fI0EijO3znNFJDxLrKjRV5hhBGaQSzRNk3uSy1vtpWuLwuypHiOjHSq7/z k74bygn4ZXGQGLHkUPpyM479yI9HPGn16FdLq0m5g6xgWX85wQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA04bWMYkGWNte61kPwQY0G5zvzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Q1YTQ3OTEtMDg2Ny0z OWFlLWFhZDMtZjcwMzA1NWRhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANO0QxG9aR2fTP0ZBPzUiRRfdl0S5T6mPFbwSgDQA8mIO3VX+Cozm qMONtPQzZRhCUQLAGVF3I286xwngPLRPHsp3vywyJya9PhAE5Ohi2TLP0R85RWZm UGcra1jjM4VqWXGFCgHvmEx+gBrgH3Mh9TnKDwdkNADk1ccaW7WIZWUKPwwPSPFw s3by9lxQmdBZjquXH0mtaTJbpAtlrwSXie68+/NjbjH0FXzAzw5x06G/+xJLzcGH R3WqYwNkcFyBUeTtqdcaDau1YSuOjtekQYDPQoKU0tCADUBF2N3kZuHpazj4pZEw Lx9kOsK4XQqC3R+rk0Z/+3BnUmqyEm8hbg== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:35 2026 by rpki-client