This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa File: 533733c4-c1ec-3505-a45e-1d154b969824.roa (raw, json) Hash identifier: r2M2JYdpbtCA8PH5g2qGJAVYqLCH5oyHOIEnVjB4PvM= Subject key identifier: 02:68:7F:7B:F8:3D:A8:51:45:67:21:99:3C:94:9E:EF:A9:46:51:78 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BE74806A36070E6C813EB6D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa Signing time: Tue 18 Nov 2025 18:44:33 +0000 ROA not before: Tue 18 Nov 2025 18:44:33 +0000 ROA not after: Mon 16 Feb 2026 18:44:33 +0000 asID: 30036 IP address blocks: 2604:2e8f:d400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:48:06:a3:60:70:e6:c8:13:eb:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 18 18:44:33 2025 GMT Not After : Feb 16 18:44:33 2026 GMT Subject: CN=5fcbde8f-f74f-4c48-9a38-a5ad272a6f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:e9:ab:e3:97:9e:bb:5a:75:92:b0:86:e6: bd:2e:68:ae:52:26:1a:02:67:81:2d:ec:6f:04:b7: e1:ed:a2:88:9d:9a:80:22:20:7a:ba:1a:58:8b:7f: e9:21:0f:97:fd:b8:7d:9a:ff:a5:ae:50:c5:bc:bb: 3f:e2:48:fc:64:99:52:88:b4:3b:fb:7f:b5:53:38: 9f:f4:1c:ee:c8:6a:5f:c9:d9:9d:57:2a:7f:7c:74: e9:68:5e:15:8e:fa:ca:8d:68:00:f9:b6:14:53:36: 2f:b2:fa:41:93:77:e7:cb:93:da:9d:b9:62:64:a9: 90:c3:f9:30:e4:07:be:13:c9:10:b6:3a:f0:a5:99: b8:55:7f:07:98:a4:8c:6a:e5:d1:16:8d:e7:fd:f7: 8c:89:f0:68:2a:89:0c:8d:fa:79:98:28:41:5a:d4: 2b:c4:96:ee:7c:a4:45:de:f5:51:0f:77:55:1b:1f: 09:e4:36:f4:a9:58:c6:53:90:81:03:b5:3b:59:38: b4:6c:16:dc:26:d7:47:cb:fd:ac:00:9b:6a:c2:34: 00:26:72:09:e3:c3:9d:66:69:75:6c:7f:29:cc:f3: c0:fe:78:26:2f:52:2c:82:ff:3d:4a:6b:7f:ea:16: ec:4e:5b:e3:75:a6:0b:85:c3:41:98:c4:a6:80:65: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:7F:7B:F8:3D:A8:51:45:67:21:99:3C:94:9E:EF:A9:46:51:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:d400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:02:23:a9:97:1f:aa:c7:25:d4:e4:3a:ab:3f:8a:75:ce:bf: c9:9f:e1:24:c2:29:b9:56:b2:79:6f:36:6a:3d:9e:b4:3e:55: 71:b6:3e:45:eb:04:89:04:d4:eb:15:f4:13:3c:75:8d:4f:51: 77:89:04:23:3f:f8:38:bb:16:db:3a:11:42:04:2e:72:49:81: f6:1c:5a:6e:67:6b:7e:1f:2a:59:07:66:54:91:46:90:cc:08: 05:f9:55:0c:22:d3:d9:8c:74:76:d1:d5:dd:42:b4:33:ea:a5: f4:5b:37:2d:0f:e3:5c:3a:95:ed:be:4e:67:1d:34:1b:3a:69: d4:5a:36:22:52:f1:8f:b6:c5:69:de:fe:50:71:88:d7:5a:be: 00:ba:51:a2:9e:ef:2a:84:e1:92:02:7f:0a:64:97:2d:63:0a: 9e:ce:f8:7b:bd:01:05:8d:71:8f:23:b7:8d:f8:32:76:be:19: fe:f2:d6:88:d1:4e:b1:44:be:01:f2:41:73:13:d9:38:bb:27: ea:25:b6:8e:d2:51:4a:db:1c:87:56:d2:d3:53:94:c0:b7:30: 8d:de:19:50:ab:6b:8c:ae:8c:23:c0:57:0d:db:af:80:41:4c: f7:2c:87:72:fe:c5:06:b5:12:9d:67:a6:ca:b8:3c:9b:09:11: 00:a2:d6:f7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvnSAajYHDmyBPrbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExODE4NDQzM1oXDTI2MDIxNjE4NDQzM1owLzEtMCsGA1UEAxMk NWZjYmRlOGYtZjc0Zi00YzQ4LTlhMzgtYTVhZDI3MmE2ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rXpq+OXnrtadZKwhua9LmiuUiYaAmeBLexv BLfh7aKInZqAIiB6uhpYi3/pIQ+X/bh9mv+lrlDFvLs/4kj8ZJlSiLQ7+3+1Uzif 9BzuyGpfydmdVyp/fHTpaF4VjvrKjWgA+bYUUzYvsvpBk3fny5PanbliZKmQw/kw 5Ae+E8kQtjrwpZm4VX8HmKSMauXRFo3n/feMifBoKokMjfp5mChBWtQrxJbufKRF 3vVRD3dVGx8J5Db0qVjGU5CBA7U7WTi0bBbcJtdHy/2sAJtqwjQAJnIJ48OdZml1 bH8pzPPA/ngmL1Isgv89Smt/6hbsTlvjdaYLhcNBmMSmgGUrQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAJof3v4PahRRWchmTyUnu+pRlF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTMzNzMzYzQtYzFlYy0z NTA1LWE0NWUtMWQxNTRiOTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj9Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHQIjqZcfqscl1OQ6qz+Kdc6/yZ/hJMIpuVayeW82aj2etD5VcbY+ ResEiQTU6xX0Ezx1jU9Rd4kEIz/4OLsW2zoRQgQuckmB9hxabmdrfh8qWQdmVJFG kMwIBflVDCLT2Yx0dtHV3UK0M+ql9Fs3LQ/jXDqV7b5OZx00Gzpp1Fo2IlLxj7bF ad7+UHGI11q+ALpRop7vKoThkgJ/CmSXLWMKns74e70BBY1xjyO3jfgydr4Z/vLW iNFOsUS+AfJBcxPZOLsn6iW2jtJRStsch1bS01OUwLcwjd4ZUKtrjK6MI8BXDduv gEFM9yyHcv7FBrUSnWemyrg8mwkRAKLW9w== -----END CERTIFICATE-----Generated at Tue Nov 25 13:55:26 2025 by rpki-client