This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa File: 54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa (raw, json) Hash identifier: Cebyo3LKm71aebNY/plFU2Kkrt/132dpqXArU5ydZQs= Subject key identifier: F5:74:BD:11:DB:8F:37:A1:4E:26:61:8E:8D:DB:AB:C6:17:2A:43:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A69A81B6EAEF55A3191BC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:9a:81:b6:ea:ef:55:a3:19:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=7ad48114-27b7-451a-abea-87b84f473429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:5a:40:34:de:01:33:7b:2a:ed:15:d2:2f: cb:ed:93:58:92:00:84:0e:10:7d:3c:ed:ca:67:3f: e1:ba:88:b5:77:c9:9e:d9:9f:58:a0:f3:ef:76:5d: 8a:1e:52:46:df:b3:fa:54:75:c8:ea:43:b0:c1:a4: 50:6f:90:f2:e6:23:78:ea:d7:75:ee:05:1e:b3:ea: 95:2c:97:4c:fc:82:33:88:11:0b:c3:53:62:3b:75: 13:5c:e7:d1:be:e8:21:17:6f:c2:25:c8:6e:57:84: 68:03:eb:63:5b:32:78:7e:ca:75:4a:58:54:23:1c: 73:48:18:f3:ba:9a:72:c1:7d:00:ea:ff:ef:e3:72: ae:b3:e2:70:8f:92:47:42:3c:49:39:e9:10:c4:39: ac:1e:83:65:66:63:6b:19:18:de:a6:51:04:c7:56: 8b:c7:f3:f4:9e:73:a6:4f:95:ca:5a:79:22:4b:d1: ff:e5:ff:e2:85:19:17:8f:89:f9:f4:6c:ee:31:28: fb:c0:c2:28:2b:97:a1:02:7c:8f:3f:8f:a5:2d:42: c5:f2:5e:7d:4c:88:e5:61:41:95:65:0b:3b:ed:f2: ea:a3:2f:c6:e6:43:6e:a6:1a:97:33:59:2f:25:b1: 56:58:bd:97:3d:a3:ce:e1:63:76:d8:52:ac:4a:d0: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:BD:11:DB:8F:37:A1:4E:26:61:8E:8D:DB:AB:C6:17:2A:43:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:f1:ee:3f:e1:02:25:8f:e9:23:f1:b5:2e:b0:39:fa:8e: 47:c3:43:00:6b:48:a5:2a:c0:4b:fc:d6:ed:8a:30:a4:45:c0: 94:0d:85:d3:6d:d1:a7:6a:7d:41:68:a9:7d:85:1b:94:e1:a5: f5:89:63:aa:cb:ba:de:0f:84:ec:97:2f:74:45:6a:f7:dd:c3: 28:71:7a:c7:3e:a1:94:24:ab:e6:d2:f2:4c:70:ed:32:8e:22: b1:04:4c:3b:f8:4d:46:cc:14:17:fe:b0:38:f4:b4:26:1a:23: 2f:03:a4:04:cf:06:5f:cf:16:ce:7b:67:a7:f5:98:95:3f:9b: 43:0b:6a:b0:cb:85:bb:94:20:f4:49:75:0d:d7:08:36:1d:6a: ce:a5:e1:81:cb:08:86:45:c4:4b:60:14:86:73:2e:a8:b6:03: fb:42:0d:30:a5:c9:d4:f3:da:02:8d:4a:95:a4:68:25:e9:60: 92:70:a4:80:eb:bc:4f:a7:98:3e:28:0f:4b:f4:b5:12:4a:b8: 1a:47:c2:1c:98:02:ed:7e:77:2b:ce:30:23:69:9f:7f:d6:18: f7:f1:83:b2:a1:7a:3e:5a:6d:04:3d:1d:d0:d7:19:b9:d2:56: 26:71:ee:66:75:f2:13:7c:7f:7b:7d:6c:a9:0b:25:a8:b7:ad: ea:23:45:2f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppqBturvVaMZG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk N2FkNDgxMTQtMjdiNy00NTFhLWFiZWEtODdiODRmNDczNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiClaQDTeATN7Ku0V0i/L7ZNYkgCEDhB9PO3K Zz/huoi1d8me2Z9YoPPvdl2KHlJG37P6VHXI6kOwwaRQb5Dy5iN46td17gUes+qV LJdM/IIziBELw1NiO3UTXOfRvughF2/CJchuV4RoA+tjWzJ4fsp1SlhUIxxzSBjz uppywX0A6v/v43Kus+Jwj5JHQjxJOekQxDmsHoNlZmNrGRjeplEEx1aLx/P0nnOm T5XKWnkiS9H/5f/ihRkXj4n59GzuMSj7wMIoK5ehAnyPP4+lLULF8l59TIjlYUGV ZQs77fLqoy/G5kNuphqXM1kvJbFWWL2XPaPO4WN22FKsStAt8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPV0vRHbjzehTiZhjo3bq8YXKkPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTRhM2I1OWItYzgxMS0z ZTNmLTkzNDctOWVhZGI2NWM0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujYww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHVHx7j/hAiWP6SPxtS6wOfqOR8NDAGtIpSrAS/zW7YowpEXAlA2F 023Rp2p9QWipfYUblOGl9Yljqsu63g+E7JcvdEVq993DKHF6xz6hlCSr5tLyTHDt Mo4isQRMO/hNRswUF/6wOPS0JhojLwOkBM8GX88Wzntnp/WYlT+bQwtqsMuFu5Qg 9El1DdcINh1qzqXhgcsIhkXES2AUhnMuqLYD+0INMKXJ1PPaAo1KlaRoJelgknCk gOu8T6eYPigPS/S1Ekq4GkfCHJgC7X53K84wI2mff9YY9/GDsqF6PlptBD0d0NcZ udJWJnHuZnXyE3x/e31sqQslqLet6iNFLw== -----END CERTIFICATE-----Generated at Sun Jan 11 08:24:32 2026 by rpki-client