This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa File: 3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa (raw, json) Hash identifier: SsE9MAqa2XIjJLI9UQWpbQNZlrMNKfIuxmEG0W3CA6I= Subject key identifier: 89:AD:82:EB:AB:2B:8A:53:23:70:16:C5:A6:BA:92:72:0C:24:AD:CC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A830CBEBF0A0354D238FE0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:30:cb:eb:f0:a0:35:4d:23:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=f1d484d9-9503-462b-b0dc-5786563b386b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:a7:08:e9:54:44:17:5a:71:e1:7b:98:7f: 9f:2b:5f:39:bf:04:67:f7:43:b8:23:5f:e5:43:2e: ad:cc:33:c0:21:be:e5:06:a2:c4:cd:ec:d1:a2:5f: 56:a2:9f:b4:88:6f:7e:ec:9b:c6:89:80:d1:55:56: a0:d4:20:b5:96:c4:49:3e:89:84:9d:64:97:11:5a: 45:85:09:23:3b:b8:58:71:11:39:5f:04:bd:44:c7: 4d:7f:f8:27:7e:9d:52:08:37:3e:fd:28:40:31:22: 18:2c:78:0a:ba:3d:2c:4c:a6:00:c4:01:be:17:cf: 06:a1:e5:fb:bf:2c:72:77:9f:15:99:75:fa:a1:1b: 2a:cb:b0:5a:ef:32:31:a7:6b:d4:aa:77:61:71:13: 94:ba:97:bd:6a:e5:83:e5:f3:17:fd:cd:c1:1f:eb: 46:c8:eb:bc:60:66:02:65:7e:a7:9a:63:ee:ac:36: 87:fc:c4:b5:84:4a:1f:8c:a9:d1:43:3c:57:f9:40: 14:dd:76:c6:f6:c2:b7:85:6d:8f:c6:06:cf:2b:10: c9:7c:55:a2:30:8f:9f:ec:60:21:e7:c7:c2:58:66: 22:75:7d:9a:a8:c7:24:f9:85:65:b4:90:94:22:0e: 6b:96:5a:bf:4e:d1:1c:b6:5f:d2:30:bf:5c:69:d3: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AD:82:EB:AB:2B:8A:53:23:70:16:C5:A6:BA:92:72:0C:24:AD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f5:f7:b7:27:a8:48:d2:70:61:f4:44:e2:de:f1:f5:95:92: 4e:73:19:d1:94:05:39:b4:c3:45:08:09:a9:6a:cf:2b:6a:53: 1e:a2:bd:7e:e2:90:37:57:45:19:99:4b:f1:30:5c:48:e7:3c: db:e5:5a:25:dd:40:7d:05:df:40:0e:5e:32:48:6c:f8:2f:0a: 3c:0e:00:c9:4e:ca:97:af:53:dd:c5:b8:a1:d8:1f:4e:2e:30: bb:14:bd:05:dc:06:24:1c:df:cd:34:47:61:90:bf:63:3e:ea: 25:51:ad:1c:94:65:46:09:0f:79:c4:4d:45:65:8f:5d:b1:74: cd:66:f9:dd:f1:cc:8e:7d:f4:5d:49:74:7d:91:0b:25:13:fb: 8b:41:f1:d6:99:90:fb:86:09:be:72:44:df:e3:d2:7b:ae:fa: 5d:4b:50:d3:a8:22:9a:99:20:8b:fe:5a:1e:8c:7f:8a:50:0a: 33:ae:8c:a9:e3:ee:86:a1:97:84:10:90:5e:fd:23:34:19:db: f8:c9:26:05:64:87:d5:92:7d:ae:a4:fb:3f:f8:9c:58:e7:9d: d1:0b:3b:ca:22:8a:ab:81:e4:9f:9b:6a:9b:af:2c:28:65:8f: 30:b3:0e:69:35:b6:a0:c3:d9:a7:cf:d7:83:fe:7d:43:ad:0f: e7:33:6b:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDDL6/CgNU0jj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZjFkNDg0ZDktOTUwMy00NjJiLWIwZGMtNTc4NjU2M2IzODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDanCOlURBdaceF7mH+fK185vwRn90O4I1/l Qy6tzDPAIb7lBqLEzezRol9Wop+0iG9+7JvGiYDRVVag1CC1lsRJPomEnWSXEVpF hQkjO7hYcRE5XwS9RMdNf/gnfp1SCDc+/ShAMSIYLHgKuj0sTKYAxAG+F88GoeX7 vyxyd58VmXX6oRsqy7Ba7zIxp2vUqndhcROUupe9auWD5fMX/c3BH+tGyOu8YGYC ZX6nmmPurDaH/MS1hEofjKnRQzxX+UAU3XbG9sK3hW2PxgbPKxDJfFWiMI+f7GAh 58fCWGYidX2aqMck+YVltJCUIg5rllq/TtEctl/SML9cadPXDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFImtguurK4pTI3AWxaa6knIMJK3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0MmExMmEtN2RhZi0z ZmRjLThkNDAtNDFiNzgyN2FhOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuirQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd/X3tyeoSNJwYfRE4t7x9ZWSTnMZ0ZQFObTDRQgJqWrPK2pTHqK9 fuKQN1dFGZlL8TBcSOc82+VaJd1AfQXfQA5eMkhs+C8KPA4AyU7Kl69T3cW4odgf Ti4wuxS9BdwGJBzfzTRHYZC/Yz7qJVGtHJRlRgkPecRNRWWPXbF0zWb53fHMjn30 XUl0fZELJRP7i0Hx1pmQ+4YJvnJE3+PSe676XUtQ06gimpkgi/5aHox/ilAKM66M qePuhqGXhBCQXv0jNBnb+MkmBWSH1ZJ9rqT7P/icWOed0Qs7yiKKq4Hkn5tqm68s KGWPMLMOaTW2oMPZp8/Xg/59Q60P5zNrAQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:01 2026 by rpki-client