This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa
File: 43340026-ff0a-331b-b876-5b9d48e15d12.roa (raw, json)
Hash identifier: qVUXisoaYn9f0ZZEuGqLTlMxOzBqa6NzfUslX/HON50=
Subject key identifier: 58:1F:8F:44:6B:2F:C5:ED:21:43:34:15:36:5E:20:C9:A6:8C:13:27
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BC96B12497E60BC98C7749600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 30036
IP address blocks: 2604:2e87:a800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:12:49:7e:60:bc:98:c7:74:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=af290b55-1906-4f47-a1dd-b3024cf82929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:c0:ce:6e:c2:d6:99:88:fc:94:17:db:0a:
f4:89:13:88:20:3e:1a:98:45:d7:87:00:74:cb:13:
7a:51:d0:09:bf:1d:55:ac:9e:e3:a3:34:7c:6f:01:
4d:c8:d7:d9:88:28:58:c4:3d:ff:1b:c2:dd:04:5a:
60:23:53:7f:13:3e:f6:ad:35:1b:b1:d6:75:79:4e:
cf:20:4d:87:70:4a:84:f5:be:25:e6:75:6f:11:4f:
4a:55:96:95:70:f7:62:fa:5e:2e:6d:83:2c:44:ed:
fe:e1:26:bb:40:ca:c7:e3:78:c1:33:68:e1:48:e8:
7c:94:1b:30:e5:97:d1:76:5a:44:ce:47:b9:f7:f6:
9b:ac:e8:5e:5b:a7:35:99:28:b6:81:52:91:29:5e:
4e:b7:ba:76:e7:c3:ff:d8:5b:79:7f:8c:c4:17:2a:
49:b6:f8:a7:cd:ee:23:48:4a:e6:8e:50:e8:11:ad:
4c:a8:f7:5b:11:fd:75:d1:20:b2:d7:b7:bd:15:46:
cb:d1:69:04:c8:58:25:4f:d1:43:8f:bf:39:f8:fd:
91:a2:3a:08:15:5e:e5:07:96:02:08:ad:d8:10:a8:
3c:bf:eb:25:3d:0f:d0:8a:23:ae:31:c7:c6:72:be:
f5:28:62:58:63:62:4b:28:bb:09:2a:c3:07:53:98:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:8F:44:6B:2F:C5:ED:21:43:34:15:36:5E:20:C9:A6:8C:13:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:a800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:cc:e5:71:26:6d:3f:94:3e:53:f3:87:6b:a6:f2:be:24:41:
09:f6:94:63:63:a4:ba:b7:3f:af:ba:23:5b:5a:e3:92:b8:d1:
ca:5d:db:25:11:24:5c:f4:9b:4d:59:24:e1:ea:2b:f3:df:dc:
c3:76:49:77:f0:e5:b7:4d:89:17:5f:9b:75:1e:bf:10:40:e8:
45:80:95:da:8e:bd:ed:0a:c6:4b:1c:7c:ea:85:64:6c:5e:dd:
5d:e9:22:6f:70:ea:a7:7b:86:b2:66:4c:f2:2b:90:9e:da:70:
22:e2:6f:09:ec:c3:52:93:a1:f8:58:9a:14:5d:5a:2a:75:55:
e9:df:9d:36:23:65:fc:40:9b:53:2d:26:67:05:b2:22:3f:28:
5c:67:77:d5:c5:e0:1d:01:cb:af:20:aa:2f:28:47:a2:19:4b:
70:78:60:23:32:2d:d4:6d:a6:76:7e:4b:54:4a:68:0d:39:03:
5a:33:22:90:35:78:82:50:26:d1:69:2b:63:b2:48:a5:ec:0f:
d3:d4:79:8c:3b:d1:d5:d1:93:41:29:92:ab:01:ef:58:99:17:
b4:49:a0:66:cf:cc:84:fa:b9:ac:38:8c:f3:2a:ec:10:01:c4:
2a:ba:2e:31:64:81:ee:66:1f:8d:9b:9a:f2:a5:44:46:79:b1:
29:d7:dc:d1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvJaxJJfmC8mMd0lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk
YWYyOTBiNTUtMTkwNi00ZjQ3LWExZGQtYjMwMjRjZjgyOTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAnAzm7C1pmI/JQX2wr0iROIID4amEXXhwB0
yxN6UdAJvx1VrJ7jozR8bwFNyNfZiChYxD3/G8LdBFpgI1N/Ez72rTUbsdZ1eU7P
IE2HcEqE9b4l5nVvEU9KVZaVcPdi+l4ubYMsRO3+4Sa7QMrH43jBM2jhSOh8lBsw
5ZfRdlpEzke59/abrOheW6c1mSi2gVKRKV5Ot7p258P/2Ft5f4zEFypJtvinze4j
SErmjlDoEa1MqPdbEf110SCy17e9FUbL0WkEyFglT9FDj785+P2RojoIFV7lB5YC
CK3YEKg8v+slPQ/QiiOuMcfGcr71KGJYY2JLKLsJKsMHU5j9TQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFgfj0RrL8XtIUM0FTZeIMmmjBMnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDMzNDAwMjYtZmYwYS0z
MzFiLWI4NzYtNWI5ZDQ4ZTE1ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh6gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ8zlcSZtP5Q+U/OHa6byviRBCfaUY2Okurc/r7ojW1rjkrjRyl3b
JREkXPSbTVkk4eor89/cw3ZJd/Dlt02JF1+bdR6/EEDoRYCV2o697QrGSxx86oVk
bF7dXekib3Dqp3uGsmZM8iuQntpwIuJvCezDUpOh+FiaFF1aKnVV6d+dNiNl/ECb
Uy0mZwWyIj8oXGd31cXgHQHLryCqLyhHohlLcHhgIzIt1G2mdn5LVEpoDTkDWjMi
kDV4glAm0WkrY7JIpewP09R5jDvR1dGTQSmSqwHvWJkXtEmgZs/MhPq5rDiM8yrs
EAHEKrouMWSB7mYfjZua8qVERnmxKdfc0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 25 13:56:53 2025 by rpki-client