This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/445df420-abae-3f06-b713-3014f76701b3.roa File: 445df420-abae-3f06-b713-3014f76701b3.roa (raw, json) Hash identifier: EKDUJmJNopcdzHwb8dXgQgjNHy2e6M6hT4Xr82N9CO4= Subject key identifier: 24:14:9C:35:91:77:46:B4:A5:04:DF:5F:C1:91:42:B0:52:F5:6F:D7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BF7F926937FDF9546F2B27A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/445df420-abae-3f06-b713-3014f76701b3.roa Signing time: Mon 24 Nov 2025 18:14:22 +0000 ROA not before: Mon 24 Nov 2025 18:14:22 +0000 ROA not after: Sun 22 Feb 2026 18:14:22 +0000 asID: 30036 IP address blocks: 2604:2e89:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:f9:26:93:7f:df:95:46:f2:b2:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 24 18:14:22 2025 GMT Not After : Feb 22 18:14:22 2026 GMT Subject: CN=850f876f-8fe3-49ee-8b87-12c37ad05f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:e0:2b:ba:18:88:5d:46:1e:0b:b3:8c:58: 10:8b:ff:8d:f0:2d:be:32:6b:f1:03:97:ab:91:ee: 38:a2:30:1d:92:d2:99:1a:9d:2e:d1:6a:08:54:32: f2:7f:76:44:85:15:13:6d:4c:79:b6:16:c6:d5:fd: 9b:7c:f9:58:fe:4f:22:97:dd:51:d0:b0:f3:19:97: db:02:af:79:38:a2:0a:33:97:87:3a:9b:59:85:fa: 7f:83:da:65:d8:86:f1:bc:8f:68:72:cd:00:be:2b: 76:fa:53:92:2b:62:e1:26:1b:e0:a3:f7:8b:d5:39: 24:97:90:ba:3f:dd:26:53:11:7a:b8:b7:35:12:84: 5d:0a:6e:70:44:72:49:a8:f8:78:98:83:4d:f2:c7: 27:b7:db:e7:c2:35:55:ce:eb:a1:64:f5:09:cf:5b: 51:43:5d:d9:c8:4f:86:35:e2:fa:49:96:9b:4c:70: 26:23:16:ff:70:72:ee:97:51:7b:b2:6a:50:f5:91: c0:da:cd:b4:91:28:a6:a9:34:23:54:cc:ca:1b:f6: d5:08:a6:16:08:8c:b4:7c:e1:3c:f0:56:0b:f0:ec: f5:ca:da:a1:72:6f:67:d8:0e:57:a4:76:cd:f6:46: f3:31:e0:00:46:08:41:23:9b:d9:44:56:3d:68:53: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:14:9C:35:91:77:46:B4:A5:04:DF:5F:C1:91:42:B0:52:F5:6F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/445df420-abae-3f06-b713-3014f76701b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:26:e0:11:a3:e9:18:e6:a5:07:0c:0f:94:5f:70:30:63:fd: d0:d1:44:1a:8d:1b:4e:bf:93:6f:f6:bf:52:4c:ba:5e:46:6a: 0e:0c:cf:d5:b8:5d:a1:4e:54:b7:58:26:26:a7:90:9f:37:39: d5:b6:03:ad:32:74:32:a2:c1:46:5b:d1:aa:98:17:74:bb:07: 6e:1d:1c:fb:67:1d:e8:02:bf:fa:31:54:a9:6c:ab:ec:00:33: 6b:fe:b8:71:96:0e:d0:23:4a:00:5f:6c:f3:aa:09:6a:fa:1b: b5:5e:ce:fc:f8:77:4d:f5:6d:e4:6c:ed:bd:b0:d5:0d:3b:b8: fe:09:61:a7:bf:1f:2b:bd:7d:43:02:48:4c:d1:7d:59:40:9b: 21:eb:ca:0c:17:5d:ee:8a:51:a8:3e:e4:62:d3:3c:40:86:6c: 67:67:5a:cc:78:80:ad:94:07:7e:6b:9e:f2:de:9d:38:fd:b0: 5b:1f:fc:31:ee:8b:f8:14:2f:0e:94:a9:29:ab:e8:81:c1:db: 3a:9b:d2:34:4e:5c:74:da:76:68:04:67:68:37:3a:4f:92:2e: a6:c7:b8:b7:47:d7:43:a0:20:12:e2:fa:66:0e:3f:5b:5c:8d: b3:76:7a:9b:b7:04:15:b7:43:fb:89:15:b9:20:0c:f5:e0:71: 05:aa:df:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEv3+SaTf9+VRvKyeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEyNDE4MTQyMloXDTI2MDIyMjE4MTQyMlowLzEtMCsGA1UEAxMk ODUwZjg3NmYtOGZlMy00OWVlLThiODctMTJjMzdhZDA1ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSrgK7oYiF1GHguzjFgQi/+N8C2+MmvxA5er ke44ojAdktKZGp0u0WoIVDLyf3ZEhRUTbUx5thbG1f2bfPlY/k8il91R0LDzGZfb Aq95OKIKM5eHOptZhfp/g9pl2IbxvI9ocs0Avit2+lOSK2LhJhvgo/eL1Tkkl5C6 P90mUxF6uLc1EoRdCm5wRHJJqPh4mINN8scnt9vnwjVVzuuhZPUJz1tRQ13ZyE+G NeL6SZabTHAmIxb/cHLul1F7smpQ9ZHA2s20kSimqTQjVMzKG/bVCKYWCIy0fOE8 8FYL8Oz1ytqhcm9n2A5XpHbN9kbzMeAARghBI5vZRFY9aFNfEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCQUnDWRd0a0pQTfX8GRQrBS9W/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDQ1ZGY0MjAtYWJhZS0z ZjA2LWI3MTMtMzAxNGY3NjcwMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWCbgEaPpGOalBwwPlF9wMGP90NFEGo0bTr+Tb/a/Uky6XkZqDgzP 1bhdoU5Ut1gmJqeQnzc51bYDrTJ0MqLBRlvRqpgXdLsHbh0c+2cd6AK/+jFUqWyr 7AAza/64cZYO0CNKAF9s86oJavobtV7O/Ph3TfVt5GztvbDVDTu4/glhp78fK719 QwJITNF9WUCbIevKDBdd7opRqD7kYtM8QIZsZ2dazHiArZQHfmue8t6dOP2wWx/8 Me6L+BQvDpSpKavogcHbOpvSNE5cdNp2aARnaDc6T5Iupse4t0fXQ6AgEuL6Zg4/ W1yNs3Z6m7cEFbdD+4kVuSAM9eBxBarf1A== -----END CERTIFICATE-----Generated at Tue Nov 25 13:55:22 2025 by rpki-client