This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c5dd696-ac75-3193-a864-3cc775e2761b.roa File: 5c5dd696-ac75-3193-a864-3cc775e2761b.roa (raw, json) Hash identifier: k00jiWahPvhYbHpkVdtWuJDWLoFJQgTitA95M6++r0E= Subject key identifier: 7E:93:23:C0:95:AB:C4:EB:49:5C:6C:B3:7F:D7:B3:D0:0A:4E:66:0B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C417685B85A1E3F54390A9A94 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c5dd696-ac75-3193-a864-3cc775e2761b.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8b:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:85:b8:5a:1e:3f:54:39:0a:9a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=8ec9a66c-8d5f-4941-ac9b-224dd6c30800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:6b:f7:20:78:14:a2:a8:b3:95:6b:e9:00: 00:73:41:e2:2a:09:54:dc:09:16:c0:e1:79:8a:ee: 55:49:51:05:6c:f4:be:58:e3:5d:50:a6:6a:cd:73: 76:33:ad:94:2a:48:e8:17:6f:6c:1e:db:7c:4f:de: 20:fa:f9:e9:03:a0:e8:0b:8b:b7:4f:66:e5:47:e0: 65:9d:fe:57:ee:bd:a2:05:88:ca:cd:58:0a:ce:fe: 3f:59:d5:73:ac:b3:fe:49:94:23:b9:7d:dd:c5:a9: 97:2e:3b:8a:ee:36:12:dc:75:22:35:03:27:ea:af: d0:51:22:54:65:3a:f7:dc:91:b2:90:79:24:99:44: 29:c1:4a:e2:46:dd:61:36:8f:04:f5:b4:37:26:e1: ee:d5:36:2d:26:94:16:54:8a:23:78:fa:35:5f:57: 09:b6:f7:fe:d1:a8:bb:45:b7:c1:9c:d6:57:6f:fa: 86:19:7d:d1:06:d3:1e:5e:1a:f8:67:c3:84:b3:68: 9a:b8:13:d8:bc:ec:1d:b0:97:85:a5:8f:e6:30:19: f7:1b:7e:39:aa:38:1c:4c:66:3f:52:ff:e4:69:b1: 87:49:8f:34:2d:dc:a3:62:34:f9:d0:34:9d:a7:29: 76:ca:d6:64:c7:11:10:e1:34:d7:d5:b7:56:1e:c9: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:23:C0:95:AB:C4:EB:49:5C:6C:B3:7F:D7:B3:D0:0A:4E:66:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c5dd696-ac75-3193-a864-3cc775e2761b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:79:f4:bb:8e:43:43:ab:d4:18:e9:d2:df:4c:3b:65:10: 75:f2:b3:a1:e9:88:eb:4c:9e:ea:76:57:96:91:fa:10:e4:ad: 71:5a:9a:23:1b:62:4b:32:16:5a:ee:2a:95:2e:b6:d2:eb:08: 07:39:2d:36:38:a6:00:3e:4e:f6:8c:16:bf:d8:da:a4:1d:96: 39:87:4b:7f:57:ee:7e:2c:a0:55:12:ac:52:89:b6:08:1c:d4: dc:81:85:91:4c:36:c7:59:d5:85:d6:12:4f:71:78:94:25:68: 64:1e:f6:42:90:63:48:df:61:c9:60:f4:2c:51:bc:ee:cc:2f: d6:4b:09:d5:c0:58:bd:5c:a4:a2:f0:97:f3:49:99:81:d2:5b: e5:24:08:d1:e4:93:d8:31:aa:32:ab:05:44:e9:60:83:7a:da: 56:fd:5d:95:83:87:38:68:27:2b:53:3d:c1:e7:7d:6f:a9:92: cb:74:dc:c1:79:16:a5:5b:4e:6c:44:99:d4:46:09:24:ba:cd: de:1a:2a:d5:18:f6:19:fb:d5:f1:48:7d:62:f2:f5:19:1b:47: ee:2c:6c:d7:b7:3f:6f:38:ca:db:9c:1d:0f:6a:bf:7b:94:5d: ca:d1:7a:f3:0b:fb:c1:2f:c6:74:46:9f:75:e5:d9:fc:71:36: 20:22:dc:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoW4Wh4/VDkKmpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk OGVjOWE2NmMtOGQ1Zi00OTQxLWFjOWItMjI0ZGQ2YzMwODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvhr9yB4FKKos5Vr6QAAc0HiKglU3AkWwOF5 iu5VSVEFbPS+WONdUKZqzXN2M62UKkjoF29sHtt8T94g+vnpA6DoC4u3T2blR+Bl nf5X7r2iBYjKzVgKzv4/WdVzrLP+SZQjuX3dxamXLjuK7jYS3HUiNQMn6q/QUSJU ZTr33JGykHkkmUQpwUriRt1hNo8E9bQ3JuHu1TYtJpQWVIojePo1X1cJtvf+0ai7 RbfBnNZXb/qGGX3RBtMeXhr4Z8OEs2iauBPYvOwdsJeFpY/mMBn3G345qjgcTGY/ Uv/kabGHSY80LdyjYjT50DSdpyl2ytZkxxEQ4TTX1bdWHsnLSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH6TI8CVq8TrSVxss3/Xs9AKTmYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWM1ZGQ2OTYtYWM3NS0z MTkzLWE4NjQtM2NjNzc1ZTI3NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJkx59LuOQ0Or1Bjp0t9MO2UQdfKzoemI60ye6nZXlpH6EOStcVqa IxtiSzIWWu4qlS620usIBzktNjimAD5O9owWv9japB2WOYdLf1fufiygVRKsUom2 CBzU3IGFkUw2x1nVhdYST3F4lCVoZB72QpBjSN9hyWD0LFG87swv1ksJ1cBYvVyk ovCX80mZgdJb5SQI0eST2DGqMqsFROlgg3raVv1dlYOHOGgnK1M9wed9b6mSy3Tc wXkWpVtObESZ1EYJJLrN3hoq1Rj2GfvV8Uh9YvL1GRtH7ixs17c/bzjK25wdD2q/ e5RdytF68wv7wS/GdEafdeXZ/HE2ICLc/w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:46 2026 by rpki-client