This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4fb44912-e767-32d5-8550-3f525c1e7a59.roa File: 4fb44912-e767-32d5-8550-3f525c1e7a59.roa (raw, json) Hash identifier: 4FyM+hpEB91nf1fmBgXgSCF8ONLEh/VuI5zPg0M4fbk= Subject key identifier: 3D:52:36:81:2E:46:7E:13:3A:D3:51:7C:AB:FB:4B:9E:E3:9B:E4:0C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871D8966C49EF1A67C6D840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4fb44912-e767-32d5-8550-3f525c1e7a59.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d8:96:6c:49:ef:1a:67:c6:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=f6602a85-3b67-485a-973d-6fa84038e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:14:82:8e:7d:7c:c9:41:62:44:89:ca:1f: 08:71:15:3a:67:66:36:d7:03:fb:a3:67:fc:ca:77: cc:6b:95:3a:2d:84:7b:99:ef:9d:6a:26:f2:f9:ce: 09:a3:b8:e0:7b:48:18:d9:49:0c:9c:61:ee:2f:b8: 1d:ff:88:b8:40:7f:e7:12:03:06:86:83:ed:06:19: 1b:17:0b:85:61:4a:4e:5a:23:5e:2c:4d:93:ab:bd: 84:7a:c6:a4:40:cd:62:59:b1:3f:0d:87:54:5c:78: c5:d1:28:22:78:95:ef:56:2e:29:4e:dc:40:70:9b: c6:e7:a3:4c:41:70:63:62:16:95:dc:8e:6a:01:e2: b6:fd:8c:b7:9b:12:43:19:a6:24:45:6a:b5:ed:34: d7:84:fb:16:b2:95:c6:6b:a0:22:d2:1b:19:99:a1: 10:ea:cd:6d:0c:49:9d:db:35:f9:7b:93:37:d1:cb: 02:4b:eb:54:ed:6f:07:5f:77:e6:0a:4a:f1:b9:11: 15:53:6a:cd:62:c2:c5:4f:14:ae:46:8f:a9:fc:29: 74:29:1b:63:3b:95:83:d0:a4:44:58:ab:c1:e8:a2: 88:e9:9a:e9:65:06:1a:bc:0e:dd:5d:d5:3c:62:26: d6:b3:ba:15:91:79:60:ec:3e:52:52:1a:ae:4f:fb: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:52:36:81:2E:46:7E:13:3A:D3:51:7C:AB:FB:4B:9E:E3:9B:E4:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4fb44912-e767-32d5-8550-3f525c1e7a59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:00:f6:f2:d0:e0:70:9d:7a:47:34:05:c3:a8:e1:3f:4b:d9: 5f:8e:70:0f:cb:25:b1:71:05:e5:b5:1b:14:b8:18:f3:15:05: ae:11:a8:b7:c0:5e:05:50:d0:12:38:68:0c:1a:65:13:2c:3e: c1:ea:2d:4c:d8:1e:5e:cd:54:0f:27:59:b8:5d:27:b8:d4:55: 7f:0a:72:89:12:18:84:df:9e:8e:c4:9e:86:7c:5e:c9:d2:fe: 70:96:0d:1e:4d:f7:9a:fd:8e:48:d9:8f:dc:45:5c:8f:04:9b: f5:67:38:4a:b8:04:e8:60:8f:79:a2:a2:70:1d:4e:3d:c6:ee: a9:e6:60:f1:d1:34:db:40:2f:cf:c9:8b:ef:e8:e2:52:7f:cd: 61:11:84:31:f2:09:f6:f1:5c:40:bb:d6:82:49:3f:93:8a:2f: 53:cb:9c:2a:39:0e:bd:40:ed:b3:ea:9a:16:d3:8b:6e:18:08: 04:b9:b3:6d:8c:79:fc:f2:1a:d3:8b:d2:db:e4:cd:97:37:a0: 7a:fd:19:a0:50:83:db:3c:83:32:10:28:53:27:73:15:0c:bf: 96:13:8f:5e:c8:3b:03:1d:bc:39:02:91:09:bb:d8:de:f1:c3: 94:99:44:ea:36:da:a3:ae:97:60:09:af:80:9c:9d:86:ed:7c: a9:fb:7f:fa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcdiWbEnvGmfG2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZjY2MDJhODUtM2I2Ny00ODVhLTk3M2QtNmZhODQwMzhlNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqwUgo59fMlBYkSJyh8IcRU6Z2Y21wP7o2f8 ynfMa5U6LYR7me+daiby+c4Jo7jge0gY2UkMnGHuL7gd/4i4QH/nEgMGhoPtBhkb FwuFYUpOWiNeLE2Tq72EesakQM1iWbE/DYdUXHjF0SgieJXvVi4pTtxAcJvG56NM QXBjYhaV3I5qAeK2/Yy3mxJDGaYkRWq17TTXhPsWspXGa6Ai0hsZmaEQ6s1tDEmd 2zX5e5M30csCS+tU7W8HX3fmCkrxuREVU2rNYsLFTxSuRo+p/Cl0KRtjO5WD0KRE WKvB6KKI6ZrpZQYavA7dXdU8YibWs7oVkXlg7D5SUhquT/tOyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD1SNoEuRn4TOtNRfKv7S57jm+QMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGZiNDQ5MTItZTc2Ny0z MmQ1LTg1NTAtM2Y1MjVjMWU3YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujjww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaQD28tDgcJ16RzQFw6jhP0vZX45wD8slsXEF5bUbFLgY8xUFrhGo t8BeBVDQEjhoDBplEyw+weotTNgeXs1UDydZuF0nuNRVfwpyiRIYhN+ejsSehnxe ydL+cJYNHk33mv2OSNmP3EVcjwSb9Wc4SrgE6GCPeaKicB1OPcbuqeZg8dE020Av z8mL7+jiUn/NYRGEMfIJ9vFcQLvWgkk/k4ovU8ucKjkOvUDts+qaFtOLbhgIBLmz bYx5/PIa04vS2+TNlzegev0ZoFCD2zyDMhAoUydzFQy/lhOPXsg7Ax28OQKRCbvY 3vHDlJlE6jbao66XYAmvgJydhu18qft/+g== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:33 2026 by rpki-client