This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f739d7d-8537-35fd-96bc-cb4ecf541ffe.roa File: 4f739d7d-8537-35fd-96bc-cb4ecf541ffe.roa (raw, json) Hash identifier: h7eEPsZPIh1AgbQjWT3l/nmFiTAev5WMZBWWKa0yYxc= Subject key identifier: A0:D7:3A:46:09:D9:D6:C7:01:CF:13:9B:1E:F5:8E:38:03:CB:69:4F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBDF8BEB0AD8172324D980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f739d7d-8537-35fd-96bc-cb4ecf541ffe.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:df:8b:eb:0a:d8:17:23:24:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=bb7df5c7-9ee1-405a-8fb1-97250e46dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:a0:f5:da:98:88:72:13:9c:1f:13:f5:e3: 5e:46:59:3b:56:d4:24:34:9f:cd:3d:bc:a5:8c:73: 30:39:2b:a6:ec:95:3f:1d:bd:b8:61:ad:13:b9:8d: 97:3a:e4:db:87:34:11:a3:26:ba:cc:51:6f:66:d3: bd:f7:e4:4c:3e:3f:74:5c:7c:7b:f6:88:50:50:d5: a9:85:e0:b2:64:a1:c0:a4:6a:cb:bc:3c:81:b8:cf: 00:fe:6b:e1:b1:b4:ca:03:ea:fc:e1:82:6b:4e:4e: 70:d4:63:db:b8:27:ea:8c:22:fd:70:dd:51:22:aa: 52:fa:7c:2d:09:62:16:61:a3:24:8c:b9:a7:87:5a: 53:a3:fb:80:26:ae:e5:23:62:c0:c7:7b:c6:b1:e7: c5:e2:62:7b:01:de:19:89:2b:c1:7c:2b:27:a3:92: ed:47:82:83:b9:9c:b2:a8:02:0e:84:17:c7:6b:4f: b0:1a:92:ed:6d:75:73:41:9f:87:21:16:e8:87:2a: 32:40:78:a9:d6:6b:e0:e6:88:3f:4e:26:c6:cf:18: 54:fb:33:e9:26:db:dc:84:d8:d5:9a:65:a4:f8:7a: 5f:58:8f:cb:b8:39:28:7e:8d:93:49:5e:d6:a4:ef: 02:f1:1a:13:24:df:96:16:81:6c:bc:73:38:ce:0d: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:3A:46:09:D9:D6:C7:01:CF:13:9B:1E:F5:8E:38:03:CB:69:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f739d7d-8537-35fd-96bc-cb4ecf541ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0e:5f:5e:6a:3d:3b:d6:be:4e:8d:43:2e:b0:d7:49:2a:df: d0:10:b9:3c:e0:0e:22:84:4b:25:84:01:62:4b:69:42:ac:6c: 93:e4:64:3a:70:a8:1f:fb:a7:c4:86:48:97:75:d9:e0:f6:4a: be:eb:a4:36:c1:ef:cd:a8:cd:75:dc:0a:b3:40:ad:d1:7a:15: 9a:28:f5:42:36:5f:89:22:1f:8e:0a:70:e7:51:b4:df:74:35: da:ce:b1:55:26:e7:b1:34:9f:5c:f0:af:d4:b8:08:53:80:05: c5:eb:31:db:8f:66:40:ab:4e:b8:93:1d:01:23:2d:8e:e2:e1: 16:2d:a3:e2:73:09:33:bd:b6:18:a9:f8:73:98:c5:a0:b7:94: b4:3b:80:b0:88:6f:ce:54:64:74:f3:c0:01:67:70:6c:67:fe: fa:ab:2b:a3:80:53:6f:c8:3f:0c:55:60:72:20:af:a4:b4:d5: b0:93:d0:dc:51:80:ae:da:f4:7a:a6:2d:ba:83:a1:ef:76:fb: cb:0a:ee:48:e4:6f:af:60:dd:15:98:62:1c:65:2d:65:ac:4d: 73:dc:3b:33:1a:4c:61:6f:00:fa:71:14:f2:c8:46:46:b0:63: f5:3e:9d:e1:0f:b6:79:f9:9a:7f:1f:46:5c:13:c4:de:6c:5f: 77:8b:c1:26 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC29+L6wrYFyMk2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YmI3ZGY1YzctOWVlMS00MDVhLThmYjEtOTcyNTBlNDZkZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4ig9dqYiHITnB8T9eNeRlk7VtQkNJ/NPbyl jHMwOSum7JU/Hb24Ya0TuY2XOuTbhzQRoya6zFFvZtO99+RMPj90XHx79ohQUNWp heCyZKHApGrLvDyBuM8A/mvhsbTKA+r84YJrTk5w1GPbuCfqjCL9cN1RIqpS+nwt CWIWYaMkjLmnh1pTo/uAJq7lI2LAx3vGsefF4mJ7Ad4ZiSvBfCsno5LtR4KDuZyy qAIOhBfHa0+wGpLtbXVzQZ+HIRbohyoyQHip1mvg5og/TibGzxhU+zPpJtvchNjV mmWk+HpfWI/LuDkofo2TSV7WpO8C8RoTJN+WFoFsvHM4zg3RWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKDXOkYJ2dbHAc8Tmx71jjgDy2lPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGY3MzlkN2QtODUzNy0z NWZkLTk2YmMtY2I0ZWNmNTQxZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujlQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUQ5fXmo9O9a+To1DLrDXSSrf0BC5POAOIoRLJYQBYktpQqxsk+Rk OnCoH/unxIZIl3XZ4PZKvuukNsHvzajNddwKs0Ct0XoVmij1QjZfiSIfjgpw51G0 33Q12s6xVSbnsTSfXPCv1LgIU4AFxesx249mQKtOuJMdASMtjuLhFi2j4nMJM722 GKn4c5jFoLeUtDuAsIhvzlRkdPPAAWdwbGf++qsro4BTb8g/DFVgciCvpLTVsJPQ 3FGArtr0eqYtuoOh73b7ywruSORvr2DdFZhiHGUtZaxNc9w7MxpMYW8A+nEU8shG RrBj9T6d4Q+2efmafx9GXBPE3mxfd4vBJg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:56 2026 by rpki-client