This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa File: 45c81aa7-70d6-3374-8990-ffa452705003.roa (raw, json) Hash identifier: QvqJy2n5Je1leC5NCQZtP2Tq8x/tlfJvb6rmQS0d5L0= Subject key identifier: 40:F2:E3:E5:6C:C9:77:CD:7E:C9:ED:35:9A:BA:7E:72:31:53:D8:DA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BEDB5CF4B0AF700818C1C0600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2e8d:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:cf:4b:0a:f7:00:81:8c:1c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=b807e6bf-1bac-4770-93a4-4e13d05268b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:22:a8:c2:d1:c7:57:93:9b:4b:60:46:b2: 16:61:51:aa:3e:f4:a3:f9:fc:39:5e:93:73:e5:44: e1:d2:78:66:b4:38:7e:48:f8:52:71:73:81:d1:e7: d0:3f:87:51:e3:29:c1:39:d6:a8:19:5c:c3:3e:36: 93:bb:40:e0:f1:dd:1f:79:7a:27:07:47:53:80:e4: a6:40:50:68:de:c3:7b:d3:61:7b:68:cd:12:c8:a4: 76:d7:fc:ff:83:da:7f:f8:94:1a:16:d0:bb:c9:e3: b1:a0:a0:43:57:ec:27:e6:88:56:ac:f0:d5:cb:ae: b7:ad:42:f1:cb:56:5b:88:58:a9:86:88:ad:b0:c0: f0:04:19:35:35:96:be:40:10:2f:b3:fe:19:78:05: ae:87:75:2f:cc:65:56:13:41:7f:e9:d9:d2:f7:b1: c8:28:12:34:05:83:64:52:09:d3:93:2f:67:c5:09: 68:89:19:02:5f:a8:d4:90:1a:04:5a:0a:cd:4a:35: a1:60:92:3f:de:02:3c:a8:10:45:9b:94:b3:94:77: 72:97:87:c0:13:1d:f8:e0:5b:7c:0b:a1:85:69:f2: 6a:f3:3d:fa:5e:af:c6:c6:32:f7:f6:3c:77:b8:21: e6:36:93:b7:db:63:7d:30:5c:2e:48:03:7c:f1:79: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:E3:E5:6C:C9:77:CD:7E:C9:ED:35:9A:BA:7E:72:31:53:D8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2c:1b:5a:c7:7b:9d:a7:21:f5:e2:f0:a4:0e:e1:95:d6:dc: 49:28:b5:40:70:35:5a:63:7a:3c:d1:a4:c9:59:63:4a:51:b8: 03:de:8d:ad:da:e1:a2:93:d9:15:3d:2d:52:b5:7f:ae:66:66: 75:04:1a:a5:9c:38:f8:77:a8:1b:55:26:bf:b6:c5:be:fb:90: 33:2d:12:85:44:6d:88:af:7c:fd:f2:ec:96:75:f3:84:a9:95: d4:07:b2:e1:d6:1e:d7:9f:72:b6:c7:b8:1d:85:a4:94:5d:97: dc:fc:02:5c:c9:38:b6:25:b9:00:5d:9c:99:bc:28:d1:df:b2: 5f:93:f9:99:b8:2f:1d:ce:2a:2d:f0:c0:e5:fd:af:f3:55:ac: aa:aa:bc:4a:88:03:8d:be:b7:66:bd:ce:0f:af:c6:46:a7:c6: f0:15:3e:71:c6:33:17:7e:09:f0:9d:cc:24:ed:2b:d2:6e:f6: 43:32:17:8f:59:20:79:36:f2:77:4a:92:1c:38:0c:ee:48:65: ed:54:93:64:52:35:a0:a1:9e:8b:3c:9c:c3:31:ea:a9:ee:1e: be:80:82:5a:70:c7:00:6b:f4:1c:7e:dd:52:cb:43:80:75:4e: bd:c7:98:92:f3:85:aa:0f:c2:a1:d9:8a:13:90:48:45:c9:59: a1:9b:5f:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvttc9LCvcAgYwcBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YjgwN2U2YmYtMWJhYy00NzcwLTkzYTQtNGUxM2QwNTI2OGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZwiqMLRx1eTm0tgRrIWYVGqPvSj+fw5XpNz 5UTh0nhmtDh+SPhScXOB0efQP4dR4ynBOdaoGVzDPjaTu0Dg8d0feXonB0dTgOSm QFBo3sN702F7aM0SyKR21/z/g9p/+JQaFtC7yeOxoKBDV+wn5ohWrPDVy663rULx y1ZbiFiphoitsMDwBBk1NZa+QBAvs/4ZeAWuh3UvzGVWE0F/6dnS97HIKBI0BYNk UgnTky9nxQloiRkCX6jUkBoEWgrNSjWhYJI/3gI8qBBFm5SzlHdyl4fAEx344Ft8 C6GFafJq8z36Xq/GxjL39jx3uCHmNpO322N9MFwuSAN88XmXmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEDy4+VsyXfNfsntNZq6fnIxU9jaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDVjODFhYTctNzBkNi0z Mzc0LTg5OTAtZmZhNDUyNzA1MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAISwbWsd7nach9eLwpA7hldbcSSi1QHA1WmN6PNGkyVljSlG4A96N rdrhopPZFT0tUrV/rmZmdQQapZw4+HeoG1Umv7bFvvuQMy0ShURtiK98/fLslnXz hKmV1Aey4dYe159ytse4HYWklF2X3PwCXMk4tiW5AF2cmbwo0d+yX5P5mbgvHc4q LfDA5f2v81Wsqqq8SogDjb63Zr3OD6/GRqfG8BU+ccYzF34J8J3MJO0r0m72QzIX j1kgeTbyd0qSHDgM7khl7VSTZFI1oKGeizycwzHqqe4evoCCWnDHAGv0HH7dUstD gHVOvceYkvOFqg/CodmKE5BIRclZoZtf6w== -----END CERTIFICATE-----Generated at Tue Nov 25 13:59:50 2025 by rpki-client