This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7cc0ce-a374-3c2b-96cc-3a1227685d57.roa File: 4a7cc0ce-a374-3c2b-96cc-3a1227685d57.roa (raw, json) Hash identifier: QyTpnxGPGCzf6mhn6CE2PbYjCGF0Q8+FZZf2XpvzIVM= Subject key identifier: F3:1A:24:8D:FB:F7:77:5A:E5:FA:AD:6F:06:73:D4:84:05:68:5E:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BF74678F82A3C3333F2C137E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7cc0ce-a374-3c2b-96cc-3a1227685d57.roa Signing time: Mon 24 Nov 2025 12:14:21 +0000 ROA not before: Mon 24 Nov 2025 12:14:21 +0000 ROA not after: Sun 22 Feb 2026 12:14:21 +0000 asID: 30036 IP address blocks: 2604:2e88:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:46:78:f8:2a:3c:33:33:f2:c1:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 24 12:14:21 2025 GMT Not After : Feb 22 12:14:21 2026 GMT Subject: CN=bea07548-0c80-4dbf-940c-ae275643f580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:db:13:68:28:5c:09:9c:3b:c1:c6:f2:f1: db:82:f3:13:89:55:0a:1d:fe:61:10:3e:ab:e7:4c: d5:bc:96:f3:66:aa:51:95:9e:34:f9:50:a0:50:cb: 9e:84:0d:32:88:87:1c:e1:88:52:e2:ff:37:d8:e5: d3:ac:35:96:8d:24:49:55:04:6e:4e:3d:11:dc:57: 51:c0:67:eb:ae:c3:46:e4:79:9f:17:f6:2e:bf:d8: 43:fc:bc:94:cb:d3:c7:0d:4b:12:77:16:a2:12:77: 5c:cc:f3:6f:16:cd:81:c2:ff:76:48:40:1f:4e:2f: 61:5d:8b:6d:1e:7c:fd:37:7d:8e:c6:37:aa:87:bb: 32:ef:65:bf:2a:28:28:64:2b:8f:e4:60:04:b9:6c: 1b:97:37:5d:08:f2:2d:8c:1d:a3:0c:80:88:e9:43: f0:74:f7:9d:f3:b1:ba:0a:42:f9:d9:50:7a:6d:5e: 8c:20:78:3c:82:a5:a7:a9:b0:53:2a:51:ac:c4:22: 1f:11:ac:ce:5e:03:bd:7e:cc:5e:62:d6:ac:0a:e0: bd:ae:e6:2f:cb:55:a4:97:ce:60:bb:3e:89:bb:05: 0c:f4:08:62:b3:f9:17:01:e8:0f:00:cc:f9:bc:70: ca:b3:36:5f:9a:5c:98:bf:75:1e:fd:fb:c1:de:a6: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1A:24:8D:FB:F7:77:5A:E5:FA:AD:6F:06:73:D4:84:05:68:5E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7cc0ce-a374-3c2b-96cc-3a1227685d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:87:b8:e6:17:06:8b:d2:f8:0c:24:14:cc:2d:0d:73:a3:67: f8:93:66:0a:12:c1:21:a8:f8:7f:e0:6c:d5:0d:44:53:e5:b1: 4f:c1:2b:81:e8:07:c3:7c:2c:5e:38:eb:89:d6:69:6a:56:36: 7d:91:96:b1:19:74:f2:08:56:b0:3a:47:8f:92:ac:cf:16:4b: c8:9a:42:2e:ff:e7:4b:93:ba:70:82:4d:27:c4:0c:be:ac:87: ca:40:ea:f7:84:a4:42:0b:37:92:b7:5f:31:05:6d:1b:4e:0e: e5:a0:b0:49:9b:81:48:b5:76:59:28:0e:c5:8d:d2:81:5a:ac: 55:70:4b:ac:fc:f6:e2:13:0c:06:67:f3:ee:45:f7:43:b1:43: 49:f9:d4:23:f6:f3:ab:5b:6d:30:08:58:0c:ad:e2:31:73:cc: ec:d6:5f:39:e7:36:cb:2f:51:2b:90:44:1f:78:d4:d8:61:09: 0c:e0:ac:0d:eb:ea:1b:d0:78:e7:ac:91:4d:5d:23:62:aa:36: c3:06:86:22:fe:6c:3f:38:a3:18:20:d2:67:0b:5c:8b:5c:a7: 4b:b8:d4:33:9d:34:c2:a7:81:28:94:6c:56:d7:dc:e4:9b:f8: 1e:ff:1b:2c:e3:62:36:65:dd:5e:4e:62:9a:58:da:18:9e:55: af:74:3e:bd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEv3Rnj4KjwzM/LBN+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEyNDEyMTQyMVoXDTI2MDIyMjEyMTQyMVowLzEtMCsGA1UEAxMk YmVhMDc1NDgtMGM4MC00ZGJmLTk0MGMtYWUyNzU2NDNmNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF7bE2goXAmcO8HG8vHbgvMTiVUKHf5hED6r 50zVvJbzZqpRlZ40+VCgUMuehA0yiIcc4YhS4v832OXTrDWWjSRJVQRuTj0R3FdR wGfrrsNG5HmfF/Yuv9hD/LyUy9PHDUsSdxaiEndczPNvFs2Bwv92SEAfTi9hXYtt Hnz9N32Oxjeqh7sy72W/KigoZCuP5GAEuWwblzddCPItjB2jDICI6UPwdPed87G6 CkL52VB6bV6MIHg8gqWnqbBTKlGsxCIfEazOXgO9fsxeYtasCuC9ruYvy1Wkl85g uz6JuwUM9Ahis/kXAegPAMz5vHDKszZfmlyYv3Ue/fvB3qaszQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPMaJI3793da5fqtbwZz1IQFaF5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE3Y2MwY2UtYTM3NC0z YzJiLTk2Y2MtM2ExMjI3Njg1ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkoe45hcGi9L4DCQUzC0Nc6Nn+JNmChLBIaj4f+Bs1Q1EU+WxT8Er gegHw3wsXjjridZpalY2fZGWsRl08ghWsDpHj5KszxZLyJpCLv/nS5O6cIJNJ8QM vqyHykDq94SkQgs3krdfMQVtG04O5aCwSZuBSLV2WSgOxY3SgVqsVXBLrPz24hMM Bmfz7kX3Q7FDSfnUI/bzq1ttMAhYDK3iMXPM7NZfOec2yy9RK5BEH3jU2GEJDOCs DevqG9B456yRTV0jYqo2wwaGIv5sPzijGCDSZwtci1ynS7jUM500wqeBKJRsVtfc 5Jv4Hv8bLONiNmXdXk5imljaGJ5Vr3Q+vQ== -----END CERTIFICATE-----Generated at Tue Nov 25 13:55:26 2025 by rpki-client