This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa File: 3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa (raw, json) Hash identifier: rg4bfzinlyiJBY8mp5gNMqiviWdT4VFS9EUnDDo5rs4= Subject key identifier: 7F:7E:E1:1B:87:25:09:02:AB:51:18:E3:F9:3D:DA:4C:EF:BE:C3:45 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BDCF5E5DAD35CCC354FFDE100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 19905 IP address blocks: 2604:2e87:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e5:da:d3:5c:cc:35:4f:fd:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=c69aa46c-4869-4805-95c2-406b3757a3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:21:30:89:47:46:87:8b:2b:33:da:eb:7a: 15:b4:f6:d2:1b:17:1b:cb:73:26:8f:c6:f0:b8:28: 26:c2:5a:12:18:d0:1d:eb:bd:f5:3a:13:1c:3f:64: c5:45:7a:8a:0f:48:34:3b:bf:e6:06:b7:8d:87:ad: 58:0d:ea:a1:8f:fb:e6:76:6e:0e:c3:40:98:23:53: a1:33:1e:c3:85:31:3a:2f:d3:d0:ea:f3:05:0b:4e: cd:2b:38:d7:77:d7:30:84:0c:67:58:3a:bd:97:34: 46:c0:2a:72:d8:34:1c:4b:51:45:23:46:0a:ec:32: 21:c4:3b:64:97:ee:19:cb:de:95:8f:31:5a:6b:4e: 35:60:d2:17:ae:d3:23:68:9b:b6:87:60:8f:ed:18: 8b:7e:c3:30:6e:c0:85:84:37:ee:a4:fb:16:c8:43: e7:be:5d:7a:4d:da:7d:0e:d8:be:62:ae:12:cc:01: 38:a6:93:1c:13:da:58:26:a9:46:d8:ac:bc:33:14: 80:48:0c:ba:93:e7:47:e4:5c:85:3f:be:4d:4f:9d: 28:03:9b:da:79:b3:d2:8e:1b:42:fe:e5:19:b3:85: cf:40:e5:21:2c:42:7e:3e:c8:f9:f8:75:90:0d:6a: e4:b3:bb:cb:60:0e:9c:27:d7:08:d4:16:c9:1d:e8: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7E:E1:1B:87:25:09:02:AB:51:18:E3:F9:3D:DA:4C:EF:BE:C3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:cc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ec:2e:f1:5a:a9:e9:5b:9c:45:1a:31:b5:e4:26:8a:c0:a5: 59:a0:a8:2b:fc:89:4e:5b:ce:58:71:23:53:07:e5:b8:4a:3f: 4d:5b:24:cd:f5:f0:10:3d:ba:61:0d:8d:50:98:8d:f2:18:8b: bb:14:0a:d8:02:61:14:55:5a:10:2c:b0:59:84:48:0a:f2:9a: 3b:ac:2d:a5:67:81:bb:10:93:f5:e2:c8:81:42:a4:04:c7:44: 65:d3:32:31:76:c6:99:5e:db:7c:8c:6c:0e:a4:69:d2:1e:e0: 79:05:2e:52:14:5c:3a:ba:82:3e:b8:c0:ff:3d:65:4a:94:17: d1:74:9d:d4:82:f2:a2:d4:19:a8:79:4a:c1:d0:7d:8d:3d:13: 3c:1e:bf:b7:62:a7:9b:86:b0:40:9b:73:be:9c:ee:77:08:89: cb:1e:03:8c:28:35:8a:1d:4a:e0:51:88:a5:75:e9:e8:3f:e8: 59:17:4e:0c:25:50:c4:8b:e7:0b:05:14:3e:36:27:14:7f:1e: f0:eb:40:74:cf:54:b3:17:e7:b3:cf:17:96:e9:32:b9:dd:e3: 61:fb:88:16:f8:da:a2:6a:04:c7:ec:d8:63:53:83:22:f0:a0: 62:80:99:e1:fe:b1:4d:d9:3d:83:b9:0c:45:f8:2d:34:6e:25: a2:9f:66:77 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvc9eXa01zMNU/94QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YzY5YWE0NmMtNDg2OS00ODA1LTk1YzItNDA2YjM3NTdhM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL0hMIlHRoeLKzPa63oVtPbSGxcby3Mmj8bw uCgmwloSGNAd6731OhMcP2TFRXqKD0g0O7/mBreNh61YDeqhj/vmdm4Ow0CYI1Oh Mx7DhTE6L9PQ6vMFC07NKzjXd9cwhAxnWDq9lzRGwCpy2DQcS1FFI0YK7DIhxDtk l+4Zy96VjzFaa041YNIXrtMjaJu2h2CP7RiLfsMwbsCFhDfupPsWyEPnvl16Tdp9 Dti+Yq4SzAE4ppMcE9pYJqlG2Ky8MxSASAy6k+dH5FyFP75NT50oA5vaebPSjhtC /uUZs4XPQOUhLEJ+Psj5+HWQDWrks7vLYA6cJ9cI1BbJHejtzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH9+4RuHJQkCq1EY4/k92kzvvsNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Q5ZWVkMmMtNGI2ZS0z Mzk1LTlhN2ItMmIzZTYzODNjYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbuwu8Vqp6VucRRoxteQmisClWaCoK/yJTlvOWHEjUwfluEo/TVsk zfXwED26YQ2NUJiN8hiLuxQK2AJhFFVaECywWYRICvKaO6wtpWeBuxCT9eLIgUKk BMdEZdMyMXbGmV7bfIxsDqRp0h7geQUuUhRcOrqCPrjA/z1lSpQX0XSd1ILyotQZ qHlKwdB9jT0TPB6/t2Knm4awQJtzvpzudwiJyx4DjCg1ih1K4FGIpXXp6D/oWRdO DCVQxIvnCwUUPjYnFH8e8OtAdM9Usxfns88Xlukyud3jYfuIFvjaomoEx+zYY1OD IvCgYoCZ4f6xTdk9g7kMRfgtNG4lop9mdw== -----END CERTIFICATE-----Generated at Tue Nov 25 17:04:41 2025 by rpki-client