This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5783f8fa-89c8-368a-810b-0e7d3de32468.roa File: 5783f8fa-89c8-368a-810b-0e7d3de32468.roa (raw, json) Hash identifier: Kc4GhpHpp/FqqGMxdkmFCoQxWN0s2vOa5BM5DkmJDHY= Subject key identifier: C5:9D:BE:59:78:AC:E6:28:3B:44:E9:2F:1F:B9:2A:28:0D:5C:CD:91 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BF1E5F445D3B2AD14790B3340 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5783f8fa-89c8-368a-810b-0e7d3de32468.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e87:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:f4:45:d3:b2:ad:14:79:0b:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=737ae56e-d860-444b-a763-19d99e1b5780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:ec:49:41:9c:32:0e:9b:1b:37:7b:d2:bf: ac:36:9a:af:d4:f3:ad:fd:16:77:82:2f:fb:9c:38: b3:5a:cf:ac:84:30:80:1e:85:f4:60:84:3a:82:f3: e3:b8:52:2d:d5:c4:97:85:cd:e6:08:4e:5c:49:b2: 7d:e5:35:e8:70:28:e8:84:bb:bf:1a:7f:34:32:6b: 1c:71:c5:84:91:f3:04:1e:c8:2c:d2:d7:55:0b:74: db:e0:1d:16:fb:c5:4b:06:ce:89:5f:53:67:34:a2: 32:a9:15:f6:ac:17:1f:17:c1:2e:8f:82:82:48:cc: db:44:a6:8a:41:46:1c:09:3c:6a:88:9a:b2:17:b9: d8:83:5a:a9:80:b0:d2:4c:8c:b2:f5:17:1e:c9:21: 91:0d:ba:f6:63:aa:4c:3d:0c:12:a7:93:5c:25:da: 2b:8c:b0:92:62:f4:8a:4e:b9:0c:a8:3c:65:72:82: 4c:5c:e5:22:6d:34:27:e1:9f:a7:56:f3:20:c2:6d: 2a:cf:af:e4:7c:3c:e6:2a:10:c3:a4:23:2b:ba:1b: e4:e2:11:d1:14:21:8e:6e:cd:9f:2a:f9:fc:04:78: 56:48:4c:97:27:25:96:15:91:2a:e4:27:1d:d5:1c: df:dd:4c:c6:81:c3:73:d6:e9:22:5d:b6:a2:2a:21: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:BE:59:78:AC:E6:28:3B:44:E9:2F:1F:B9:2A:28:0D:5C:CD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5783f8fa-89c8-368a-810b-0e7d3de32468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d1:b9:7c:80:67:95:91:84:87:23:dd:a4:45:ba:df:7f:c0: 7a:62:33:aa:f0:7c:38:78:8a:36:a8:bb:e1:b8:e8:84:2b:fe: 1d:58:c1:8a:64:27:2f:c4:15:5e:23:44:8d:59:80:fb:e2:b4: ff:f8:97:c8:ee:9d:54:fe:7f:ee:32:77:a4:28:08:80:51:0d: b6:54:ab:51:e8:90:8b:e0:ef:22:84:ca:e2:53:fd:65:36:d3: 50:74:57:72:2e:a9:01:e1:62:09:5c:30:3d:8f:41:a7:a0:12: 3c:1d:3d:c8:f1:44:17:d1:dd:f5:8c:e1:02:c0:b2:4c:20:ef: e3:d7:04:68:94:5f:98:d9:1b:43:19:14:b5:51:59:25:0a:79: 6f:19:95:f0:14:cb:2f:01:07:49:e3:c1:78:f4:b5:0c:84:57: 7f:ca:26:63:29:de:1b:d4:d3:4a:bf:e4:03:e5:db:bd:54:b9: d3:0b:5d:ef:ed:cb:52:8b:ca:5e:ec:bc:ef:1c:09:02:26:77: 1e:3d:1c:c4:29:4a:44:06:47:ba:d3:47:40:f8:0b:5b:7a:5a: 78:51:1e:3a:47:6b:e4:5f:af:a5:7e:8b:29:6f:d4:d8:92:86: 63:48:e0:e1:d9:44:44:37:1a:d4:41:d2:38:bd:5d:2a:56:3c: 2c:af:97:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvx5fRF07KtFHkLM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk NzM3YWU1NmUtZDg2MC00NDRiLWE3NjMtMTlkOTllMWI1NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/sSUGcMg6bGzd70r+sNpqv1POt/RZ3gi/7 nDizWs+shDCAHoX0YIQ6gvPjuFIt1cSXhc3mCE5cSbJ95TXocCjohLu/Gn80Mmsc ccWEkfMEHsgs0tdVC3Tb4B0W+8VLBs6JX1NnNKIyqRX2rBcfF8Euj4KCSMzbRKaK QUYcCTxqiJqyF7nYg1qpgLDSTIyy9RceySGRDbr2Y6pMPQwSp5NcJdorjLCSYvSK TrkMqDxlcoJMXOUibTQn4Z+nVvMgwm0qz6/kfDzmKhDDpCMruhvk4hHRFCGObs2f Kvn8BHhWSEyXJyWWFZEq5Ccd1Rzf3UzGgcNz1ukiXbaiKiFPewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMWdvll4rOYoO0TpLx+5KigNXM2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTc4M2Y4ZmEtODljOC0z NjhhLTgxMGItMGU3ZDNkZTMyNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU9G5fIBnlZGEhyPdpEW633/AemIzqvB8OHiKNqi74bjohCv+HVjB imQnL8QVXiNEjVmA++K0//iXyO6dVP5/7jJ3pCgIgFENtlSrUeiQi+DvIoTK4lP9 ZTbTUHRXci6pAeFiCVwwPY9Bp6ASPB09yPFEF9Hd9YzhAsCyTCDv49cEaJRfmNkb QxkUtVFZJQp5bxmV8BTLLwEHSePBePS1DIRXf8omYyneG9TTSr/kA+XbvVS50wtd 7+3LUovKXuy87xwJAiZ3Hj0cxClKRAZHutNHQPgLW3paeFEeOkdr5F+vpX6LKW/U 2JKGY0jg4dlERDca1EHSOL1dKlY8LK+XTw== -----END CERTIFICATE-----Generated at Tue Nov 25 14:00:35 2025 by rpki-client