This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aa3564b-c669-3beb-9087-c2da0f4b82e9.roa
File: 4aa3564b-c669-3beb-9087-c2da0f4b82e9.roa (raw, json)
Hash identifier: Clpw6X1pnz0grn63yTeu69xTF3y1IAAgIq0UabVx9Ao=
Subject key identifier: 6A:C5:8C:18:C1:B2:41:2B:3F:FC:30:3C:C7:AF:15:30:E0:D4:FE:6D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BE7BF0CEE5AF1B951ADF94F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aa3564b-c669-3beb-9087-c2da0f4b82e9.roa
Signing time: Tue 18 Nov 2025 22:44:22 +0000
ROA not before: Tue 18 Nov 2025 22:44:22 +0000
ROA not after: Mon 16 Feb 2026 22:44:22 +0000
asID: 19905
IP address blocks: 2604:2e8f:d800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e7:bf:0c:ee:5a:f1:b9:51:ad:f9:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Nov 18 22:44:22 2025 GMT
Not After : Feb 16 22:44:22 2026 GMT
Subject: CN=57ad566e-1601-4309-b76c-83ed7c765a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:b7:0d:65:de:5a:b1:b5:e1:40:b5:4a:01:
db:32:28:61:a3:b7:63:91:3f:10:eb:dd:c3:ee:65:
d4:a4:c8:f1:d2:03:3b:0c:84:e1:af:ce:42:8b:18:
28:4c:8d:cc:a4:1c:67:4a:e4:cc:af:60:4f:74:6f:
6c:b3:82:14:d2:90:9d:99:5f:fe:ea:d5:b0:cc:48:
c6:93:94:5b:f7:81:58:1c:41:03:d5:36:17:73:0b:
60:6a:95:8e:eb:18:d0:fc:a8:e2:ac:fd:84:77:80:
92:16:4c:6e:ff:33:db:7e:c7:3b:be:64:96:57:7a:
fd:67:fb:d8:34:83:59:b5:c8:38:03:d2:bd:29:00:
09:01:e7:a9:93:c3:ae:dd:71:46:05:8d:be:4e:6d:
73:24:42:51:55:41:f5:87:68:59:05:cf:67:88:a6:
8e:f0:db:88:f9:3b:65:0f:f1:0e:6e:06:22:77:a0:
f5:bb:80:19:75:67:0d:04:40:da:59:50:1f:5f:2c:
87:c2:eb:c8:fc:42:be:3c:52:68:df:56:b7:8f:b7:
e7:97:dc:b0:c3:1e:bc:2a:2a:b7:a5:ff:90:53:32:
7e:0f:f1:f5:3f:98:71:f9:26:da:65:fa:3f:88:65:
2e:b5:05:7c:88:63:48:f2:92:f6:53:2a:35:53:bf:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:8C:18:C1:B2:41:2B:3F:FC:30:3C:C7:AF:15:30:E0:D4:FE:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aa3564b-c669-3beb-9087-c2da0f4b82e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:d800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:b6:52:a8:96:73:58:5c:bf:e6:43:9f:c3:01:1b:c9:80:2a:
98:b4:34:9e:73:9e:fc:b2:90:ee:39:be:3d:93:1c:36:51:99:
a3:77:b1:28:c3:d9:7f:65:0b:85:21:22:f3:42:3f:e9:65:80:
1f:71:83:b2:22:29:3a:dc:e6:3b:ba:dd:4b:6e:34:1c:73:cb:
f4:ed:38:13:94:f5:cd:47:c5:aa:e6:df:d4:0a:df:91:80:ae:
e2:e7:4f:97:6e:65:f5:91:b4:2e:a9:e2:d8:9e:00:d4:ea:4f:
c1:1f:08:fd:e6:62:05:a9:2e:1f:ba:8c:14:9d:a3:5d:ae:81:
29:d0:b9:ff:99:a6:ea:2f:18:19:70:1e:f7:85:89:25:a5:ec:
68:a2:d9:fa:03:97:f7:75:a4:6e:c3:9d:4e:f3:1b:12:c8:99:
00:87:eb:82:b2:91:82:c7:3c:69:2e:fd:3b:4b:a3:cf:ac:7d:
b5:ed:10:68:2e:25:cf:07:0d:51:a3:fe:14:08:54:5c:b2:84:
e0:44:c3:aa:9b:b8:92:69:c5:f0:3a:57:cc:2f:c7:48:44:9b:
e5:20:92:69:80:25:75:3b:f3:12:37:fc:c6:95:4d:ca:02:27:
6e:bb:86:d8:5c:7e:1b:e9:b1:5f:7e:b4:5b:a6:71:d5:e7:52:
f6:96:b0:35
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvnvwzuWvG5Ua35TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTExODIyNDQyMloXDTI2MDIxNjIyNDQyMlowLzEtMCsGA1UEAxMk
NTdhZDU2NmUtMTYwMS00MzA5LWI3NmMtODNlZDdjNzY1YTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH23DWXeWrG14UC1SgHbMihho7djkT8Q693D
7mXUpMjx0gM7DIThr85CixgoTI3MpBxnSuTMr2BPdG9ss4IU0pCdmV/+6tWwzEjG
k5Rb94FYHEED1TYXcwtgapWO6xjQ/KjirP2Ed4CSFkxu/zPbfsc7vmSWV3r9Z/vY
NINZtcg4A9K9KQAJAeepk8Ou3XFGBY2+Tm1zJEJRVUH1h2hZBc9niKaO8NuI+Ttl
D/EObgYid6D1u4AZdWcNBEDaWVAfXyyHwuvI/EK+PFJo31a3j7fnl9ywwx68Kiq3
pf+QUzJ+D/H1P5hx+SbaZfo/iGUutQV8iGNI8pL2Uyo1U7/VDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGrFjBjBskErP/wwPMevFTDg1P5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGFhMzU2NGItYzY2OS0z
YmViLTkwODctYzJkYTBmNGI4MmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj9gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAl7ZSqJZzWFy/5kOfwwEbyYAqmLQ0nnOe/LKQ7jm+PZMcNlGZo3ex
KMPZf2ULhSEi80I/6WWAH3GDsiIpOtzmO7rdS240HHPL9O04E5T1zUfFqubf1Arf
kYCu4udPl25l9ZG0Lqni2J4A1OpPwR8I/eZiBakuH7qMFJ2jXa6BKdC5/5mm6i8Y
GXAe94WJJaXsaKLZ+gOX93WkbsOdTvMbEsiZAIfrgrKRgsc8aS79O0ujz6x9te0Q
aC4lzwcNUaP+FAhUXLKE4ETDqpu4kmnF8DpXzC/HSESb5SCSaYAldTvzEjf8xpVN
ygInbruG2Fx+G+mxX360W6Zx1edS9pawNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:02:12 2025 by rpki-client