This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa File: 4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa (raw, json) Hash identifier: 9ljxQ2Iqvrpy4wwHAi6ba5410qudRYWf/2/qf3DVBdw= Subject key identifier: CA:CF:B6:1A:2E:A5:E7:76:72:CD:BB:79:BD:51:CE:B4:F6:8F:91:6D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C5BFBDEBC2F989A7FBCAAF800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 19905 IP address blocks: 2604:2e87:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:de:bc:2f:98:9a:7f:bc:aa:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=d99650d3-f509-42f5-869b-8657cd8d6a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:98:d8:3e:34:0b:71:5b:82:19:93:01:eb:d4: 0d:a2:36:76:80:58:ed:b2:2c:5a:3e:75:1d:76:9e: 76:e9:7e:5e:ba:55:7b:8f:5e:df:16:81:d2:00:24: 7b:e3:1a:6a:7d:da:3b:18:c1:b4:b7:a0:e1:a6:0e: df:6e:20:6b:a3:e2:c0:fe:4c:be:ff:93:3c:53:a8: 82:58:a4:8a:2f:e9:3f:b8:06:24:28:30:6e:6f:9b: 47:c9:b0:c5:dc:e9:91:bc:73:3f:9b:31:c3:8b:04: a6:13:47:12:6c:22:6d:9c:75:6d:d2:ff:5b:2c:99: ce:60:5e:c3:67:77:92:20:94:bf:37:0e:07:35:cc: 4b:67:51:54:ea:fd:cd:d4:03:cf:46:8f:9f:b7:ac: 1b:d0:3c:31:e0:41:34:0f:59:7b:fe:54:06:50:e6: 59:6d:b5:b6:e4:30:dd:80:11:84:14:94:1b:e7:36: 6b:6c:14:c8:db:16:d9:72:93:d5:7a:8e:75:0a:a4: 6a:1c:24:15:2a:c8:3d:be:b7:82:21:a0:54:19:fc: 0d:0d:fb:49:c5:2d:ae:82:58:ec:5b:af:67:c0:45: 5d:27:64:f2:a8:94:cd:21:b4:ab:30:07:f8:6a:84: 23:32:72:5a:63:39:cd:70:24:f0:04:bc:b6:f7:8c: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:B6:1A:2E:A5:E7:76:72:CD:BB:79:BD:51:CE:B4:F6:8F:91:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3b:e8:1a:e8:9e:e8:a4:60:68:0c:27:5d:78:27:65:8f:3f: 82:67:e4:f1:c4:92:b8:fb:9f:16:bf:69:4e:01:b5:1a:94:14: a1:20:85:70:15:09:5d:3e:9c:36:79:da:be:be:f3:88:b6:ef: 19:aa:b0:f8:7f:a5:9b:b3:62:40:68:bb:61:fa:85:3b:f9:96: 2c:1f:cd:cc:b7:29:f4:3b:be:b9:c6:7c:3d:d5:55:75:41:0e: 3d:fb:16:ae:c1:0c:d5:17:17:a5:01:8b:ee:7e:51:c7:63:eb: 2e:1a:40:18:ef:b6:fc:cf:a9:a4:fd:86:b6:83:ad:2a:c6:5a: 5b:d8:64:2a:78:58:5b:5a:e6:0e:6a:72:62:3d:71:18:50:46: fb:78:b4:3a:01:2c:d9:8a:4f:57:ac:32:0e:6f:2b:75:bc:bc: 66:20:5f:de:10:e1:ff:0f:ba:68:3c:33:d3:f7:0f:b2:80:40: cb:c0:00:38:2e:51:81:3e:c5:99:e3:1c:65:1e:f7:55:3b:e3: cb:b7:34:7a:11:fa:75:48:39:6c:54:5b:49:c0:98:2f:59:d1: d5:82:b2:88:95:87:6d:89:24:8a:93:89:ca:c9:ae:bc:22:63: 23:93:b7:3c:3b:91:18:42:7b:35:30:07:d0:82:4d:cc:8f:e8: 82:75:ca:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExb+968L5iaf7yq+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk ZDk5NjUwZDMtZjUwOS00MmY1LTg2OWItODY1N2NkOGQ2YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85jYPjQLcVuCGZMB69QNojZ2gFjtsixaPnUd dp526X5eulV7j17fFoHSACR74xpqfdo7GMG0t6Dhpg7fbiBro+LA/ky+/5M8U6iC WKSKL+k/uAYkKDBub5tHybDF3OmRvHM/mzHDiwSmE0cSbCJtnHVt0v9bLJnOYF7D Z3eSIJS/Nw4HNcxLZ1FU6v3N1APPRo+ft6wb0Dwx4EE0D1l7/lQGUOZZbbW25DDd gBGEFJQb5zZrbBTI2xbZcpPVeo51CqRqHCQVKsg9vreCIaBUGfwNDftJxS2ugljs W69nwEVdJ2TyqJTNIbSrMAf4aoQjMnJaYznNcCTwBLy294zzVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMrPthouped2cs27eb1RzrT2j5FtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGEwNWU1ZDgtZDAxOC0z NmQ0LWEwNmQtM2NhY2ZiMWQ4ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhxQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdDvoGuie6KRgaAwnXXgnZY8/gmfk8cSSuPufFr9pTgG1GpQUoSCF cBUJXT6cNnnavr7ziLbvGaqw+H+lm7NiQGi7YfqFO/mWLB/NzLcp9Du+ucZ8PdVV dUEOPfsWrsEM1RcXpQGL7n5Rx2PrLhpAGO+2/M+ppP2GtoOtKsZaW9hkKnhYW1rm DmpyYj1xGFBG+3i0OgEs2YpPV6wyDm8rdby8ZiBf3hDh/w+6aDwz0/cPsoBAy8AA OC5RgT7FmeMcZR73VTvjy7c0ehH6dUg5bFRbScCYL1nR1YKyiJWHbYkkipOJysmu vCJjI5O3PDuRGEJ7NTAH0IJNzI/ognXKcA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:12 2026 by rpki-client