This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa File: 4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa (raw, json) Hash identifier: zxrbiBRQTyE9qQYciAOGnlniWzj0cCgxu68nSbHqTt8= Subject key identifier: C2:7E:8E:53:D0:49:4A:93:32:4A:86:3C:92:C2:B3:92:5A:11:60:35 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C725E89D0BC10E4EC49A9C580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa Signing time: Wed 07 Jan 2026 14:27:16 +0000 ROA not before: Wed 07 Jan 2026 14:27:16 +0000 ROA not after: Tue 07 Apr 2026 13:27:16 +0000 asID: 19905 IP address blocks: 2604:2e8f:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:5e:89:d0:bc:10:e4:ec:49:a9:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 7 14:27:16 2026 GMT Not After : Apr 7 13:27:16 2026 GMT Subject: CN=08b301e4-544e-4912-a18c-bbecc8c19ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:33:2b:30:63:6f:d9:3e:8f:f4:ad:88:88: df:5d:99:3f:71:22:51:e8:2e:07:16:56:62:0c:4a: cc:12:37:7e:5d:2d:a7:4f:2f:96:24:57:7e:fa:89: c6:cb:24:8d:42:54:7a:35:9e:fd:6c:e6:6a:f2:f4: a2:3c:28:20:7a:9f:ea:68:5c:82:9d:15:75:ff:f9: 0e:df:45:96:de:ac:f0:aa:37:f5:12:2c:46:93:89: bd:ab:51:d5:a5:8a:c5:55:26:d3:2f:87:50:ac:c2: 39:01:54:4f:57:f9:a7:e9:f0:36:5a:bc:a6:37:80: d2:19:40:f9:b2:b6:25:18:de:3c:48:77:a1:fd:e9: 09:01:93:94:09:ba:dd:16:b6:f4:3b:0b:29:c6:6a: a0:d8:f7:16:8f:aa:c2:d3:85:89:8f:04:9e:1b:b6: da:6b:0c:1a:86:d0:fe:c3:29:a2:32:4c:84:52:48: 7c:ac:04:92:82:8a:25:c1:fb:68:63:e2:70:f6:c6: 21:24:54:ed:5a:70:da:ba:d0:1c:be:f7:0c:ac:07: b4:27:e1:ab:fa:a9:21:8a:01:c0:f6:4d:08:63:dc: 3a:da:f1:a6:0c:42:f1:ac:3e:8a:8a:a8:05:ab:b3: 6e:e6:30:86:5b:02:7c:37:7a:6f:5f:86:6a:23:89: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:8E:53:D0:49:4A:93:32:4A:86:3C:92:C2:B3:92:5A:11:60:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3c:5d:03:5e:ab:3a:3a:37:ae:ad:0f:7a:2b:4d:5c:39:e0: 5f:66:bb:4a:ad:ae:24:7f:d7:75:dc:d8:01:f3:0a:c7:42:42: 09:5c:55:fb:74:8a:b5:e4:83:c3:b7:02:46:2f:b9:9c:fb:a7: 6b:5e:06:95:7d:2c:ac:e9:0b:84:ce:f4:e0:29:5a:db:7d:81: aa:81:f5:bb:65:66:e9:c3:68:cc:26:32:31:bb:f2:16:07:18: 93:bb:47:57:53:14:4e:03:a8:c9:e7:e0:b6:91:66:98:f3:16: c3:88:0b:ac:fc:f8:37:31:bb:c5:d3:b1:29:78:32:95:e7:2c: 15:27:1d:12:8c:45:4d:ba:45:af:04:d0:16:02:f3:ff:ab:f0: e9:da:c3:76:56:f5:85:ae:ca:80:7e:2a:99:34:ca:84:de:6a: da:9b:22:f2:64:66:cc:e5:9c:ff:93:41:95:96:6f:ae:4d:95: e3:c6:a0:4b:df:b0:1a:6f:f9:f3:90:dc:ea:d6:5b:cd:86:31: f8:ba:8e:7f:91:e9:27:7c:25:f1:dc:bb:99:8b:5c:03:0b:06: 65:96:a5:f8:f3:c2:0e:30:b9:4e:6f:bb:07:f8:cd:bf:07:43: 4b:5a:5d:cb:3a:b9:27:ae:70:e1:7a:55:05:35:f5:da:39:6d: 8f:b9:8a:7f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExyXonQvBDk7EmpxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwNzE0MjcxNloXDTI2MDQwNzEzMjcxNlowLzEtMCsGA1UEAxMk MDhiMzAxZTQtNTQ0ZS00OTEyLWExOGMtYmJlY2M4YzE5ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunkzKzBjb9k+j/StiIjfXZk/cSJR6C4HFlZi DErMEjd+XS2nTy+WJFd++onGyySNQlR6NZ79bOZq8vSiPCggep/qaFyCnRV1//kO 30WW3qzwqjf1EixGk4m9q1HVpYrFVSbTL4dQrMI5AVRPV/mn6fA2WrymN4DSGUD5 srYlGN48SHeh/ekJAZOUCbrdFrb0Owspxmqg2PcWj6rC04WJjwSeG7baawwahtD+ wymiMkyEUkh8rASSgoolwftoY+Jw9sYhJFTtWnDautAcvvcMrAe0J+Gr+qkhigHA 9k0IY9w62vGmDELxrD6KiqgFq7Nu5jCGWwJ8N3pvX4ZqI4nlbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMJ+jlPQSUqTMkqGPJLCs5JaEWA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDIxNjczOWMtMGNlMi0z NmZiLTljN2YtZGE4M2FjYmU3YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj/Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANTxdA16rOjo3rq0PeitNXDngX2a7Sq2uJH/XddzYAfMKx0JCCVxV +3SKteSDw7cCRi+5nPuna14GlX0srOkLhM704Cla232BqoH1u2Vm6cNozCYyMbvy FgcYk7tHV1MUTgOoyefgtpFmmPMWw4gLrPz4NzG7xdOxKXgylecsFScdEoxFTbpF rwTQFgLz/6vw6drDdlb1ha7KgH4qmTTKhN5q2psi8mRmzOWc/5NBlZZvrk2V48ag S9+wGm/585Dc6tZbzYYx+LqOf5HpJ3wl8dy7mYtcAwsGZZal+PPCDjC5Tm+7B/jN vwdDS1pdyzq5J65w4XpVBTX12jltj7mKfw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:24:42 2026 by rpki-client