This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5439e7ff-23a9-3a45-bb57-5c7bae6e3624.roa File: 5439e7ff-23a9-3a45-bb57-5c7bae6e3624.roa (raw, json) Hash identifier: g0u7O+s1bl/Vi4c1diLXJDZPDoxP8E5NIe/dVUH4UXA= Subject key identifier: ED:C1:18:E1:8A:3D:5F:8F:8F:EF:DD:34:2F:CC:57:DE:5E:72:5B:4D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6A3949D54CD0A7AA10840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5439e7ff-23a9-3a45-bb57-5c7bae6e3624.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:ec00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:a3:94:9d:54:cd:0a:7a:a1:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=863bf61a-6955-4f56-b643-9b6b31abd8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:f1:9a:f6:b9:81:97:e8:ca:cc:c0:59:51: 30:23:b2:62:9c:51:3a:8f:47:55:fb:ed:5d:11:7c: 61:29:ee:2e:7a:e3:fd:77:32:b9:64:15:f8:c3:45: 98:d3:e8:39:5d:31:2f:36:06:f5:ad:99:3a:73:7f: 06:06:85:41:e5:f2:c4:67:8b:cc:12:02:37:8a:d7: 3b:10:8a:ab:9e:58:7c:9f:f2:2d:bf:03:19:2e:46: ba:7b:1e:da:9a:6b:8d:6c:8b:09:b8:c0:06:bb:73: ad:e9:34:43:23:f6:40:2f:a4:77:88:92:47:8a:68: 25:0c:f1:a8:5a:bf:77:95:c0:e2:1e:80:35:80:2b: 16:da:74:0d:f8:d2:0f:07:46:3a:e2:38:03:1a:d7: c3:ef:22:d6:9c:3a:b8:c1:ec:d5:63:c8:c9:7a:87: 67:67:04:81:dd:23:83:29:e5:00:28:17:ba:b6:aa: 51:cf:46:48:09:b5:ab:9a:42:fc:9b:9a:ee:0b:37: 55:92:fe:c6:f7:6b:81:85:e4:f0:5c:b1:35:42:26: 13:ea:ba:e4:48:ac:80:54:cf:38:b9:4b:0f:d5:09: 46:22:ba:b5:c9:19:d9:fd:59:b3:78:2a:8a:f0:7b: fb:62:94:38:c2:01:51:3f:a2:fd:2d:e5:dc:a9:96: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:18:E1:8A:3D:5F:8F:8F:EF:DD:34:2F:CC:57:DE:5E:72:5B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5439e7ff-23a9-3a45-bb57-5c7bae6e3624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:ec00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fc:1c:16:ff:bc:e7:02:98:05:40:aa:2f:e9:e5:bf:14:d1: 15:06:7c:ac:1f:ac:6f:10:8a:b1:4f:b5:7e:14:be:cc:09:5c: 40:33:30:d9:c2:08:6a:1b:ee:71:fe:da:f8:1f:e5:c2:3c:fe: ad:0d:2f:18:92:44:54:35:e9:c0:15:35:c4:e6:a4:c9:8a:f7: 19:71:31:e7:8d:79:22:94:34:22:c0:df:39:4e:78:ec:93:cf: 37:81:97:c9:63:e7:f7:57:10:aa:e8:bf:5f:74:55:11:34:63: c5:25:6b:ab:d4:42:aa:55:d8:f2:7a:be:f7:f1:d2:72:95:28: 8c:15:18:ac:c1:82:78:b8:94:04:bc:ce:7d:13:06:9b:d7:99: f4:8d:d0:4e:4c:e7:0e:45:59:d0:21:ff:84:69:39:72:df:3d: 93:e2:30:d4:42:d3:5a:de:56:58:67:a0:a8:eb:5c:ac:16:72: 07:93:95:b2:bb:da:2e:b5:77:b2:08:58:21:0d:69:b8:27:f7: b3:64:60:38:73:d9:81:44:9a:35:f2:11:c8:0e:da:d9:bf:1c: e6:26:f2:a0:d4:04:58:8b:33:27:95:62:d8:90:48:48:4b:4b: d4:7d:f4:d9:a2:bf:33:5a:11:fb:b4:cb:b6:8e:fe:13:78:4a: 14:66:59:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpqOUnVTNCnqhCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ODYzYmY2MWEtNjk1NS00ZjU2LWI2NDMtOWI2YjMxYWJkOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHXxmva5gZfoyszAWVEwI7JinFE6j0dV++1d EXxhKe4ueuP9dzK5ZBX4w0WY0+g5XTEvNgb1rZk6c38GBoVB5fLEZ4vMEgI3itc7 EIqrnlh8n/ItvwMZLka6ex7ammuNbIsJuMAGu3Ot6TRDI/ZAL6R3iJJHimglDPGo Wr93lcDiHoA1gCsW2nQN+NIPB0Y64jgDGtfD7yLWnDq4wezVY8jJeodnZwSB3SOD KeUAKBe6tqpRz0ZICbWrmkL8m5ruCzdVkv7G92uBheTwXLE1QiYT6rrkSKyAVM84 uUsP1QlGIrq1yRnZ/VmzeCqK8Hv7YpQ4wgFRP6L9LeXcqZa3iwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO3BGOGKPV+Pj+/dNC/MV95ecltNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTQzOWU3ZmYtMjNhOS0z YTQ1LWJiNTctNWM3YmFlNmUzNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiuww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI/wcFv+85wKYBUCqL+nlvxTRFQZ8rB+sbxCKsU+1fhS+zAlcQDMw 2cIIahvucf7a+B/lwjz+rQ0vGJJEVDXpwBU1xOakyYr3GXEx5415IpQ0IsDfOU54 7JPPN4GXyWPn91cQqui/X3RVETRjxSVrq9RCqlXY8nq+9/HScpUojBUYrMGCeLiU BLzOfRMGm9eZ9I3QTkznDkVZ0CH/hGk5ct89k+Iw1ELTWt5WWGegqOtcrBZyB5OV srvaLrV3sghYIQ1puCf3s2RgOHPZgUSaNfIRyA7a2b8c5ibyoNQEWIszJ5Vi2JBI SEtL1H302aK/M1oR+7TLto7+E3hKFGZZOw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:19 2026 by rpki-client