This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa File: 683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa (raw, json) Hash identifier: w+tXCnvmFHxeM6tq8fBVtrbiGTZCcXNiWVYca8GaEz8= Subject key identifier: 30:EF:0A:37:7B:C1:70:C9:0B:AD:12:59:63:4E:18:E1:30:D4:29:2A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A81BAD971B0E9970552A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:b800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1b:ad:97:1b:0e:99:70:55:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e929e60d-bc43-4252-98ae-4d90864f62c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:23:a4:22:a7:38:f7:af:17:16:f2:e3:c2: da:bf:4c:7d:44:80:fd:d1:52:d6:f7:d1:07:fe:e7: e5:dc:be:c6:53:b1:5a:d9:bf:10:d3:3f:7e:22:0b: b0:9d:e3:89:86:a3:37:da:ce:01:b1:d1:bf:c9:8f: b4:7f:7a:d9:0a:bc:98:5e:b8:c9:56:7d:04:02:79: 8f:50:36:9d:b7:12:9b:c1:9d:48:81:ce:11:2a:ae: d4:a5:69:d0:e3:51:33:60:48:e4:34:06:a9:d4:92: df:fc:99:bb:12:08:74:48:c0:99:6d:7e:2f:a2:d9: 8b:a7:40:aa:c8:d8:51:a2:91:00:45:39:a9:47:f4: af:c2:94:01:a7:71:ad:6f:11:5b:5c:a1:1d:ba:d3: 01:2e:06:31:87:88:de:b7:0e:ce:7d:dd:1d:25:10: f0:5a:1d:49:95:8c:d5:89:de:8a:36:b9:f2:af:b7: 23:01:f0:8b:4a:9a:b9:c9:1d:5d:46:1c:45:f3:0b: 7d:da:64:68:00:d3:50:b8:db:17:78:ac:45:b4:97: 96:31:1e:13:f9:37:58:28:38:76:6b:06:b4:26:f2: ab:54:45:5b:fe:84:e3:e0:f1:cf:b9:39:46:32:b0: 16:47:a0:df:3b:13:ca:5c:c3:b6:e3:9f:8d:83:33: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EF:0A:37:7B:C1:70:C9:0B:AD:12:59:63:4E:18:E1:30:D4:29:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:b800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ad:b4:93:ff:5d:c2:ac:70:ee:c8:eb:36:e4:39:2f:4c:6c: da:bf:5e:42:b1:36:58:eb:ce:17:1e:51:ec:98:e0:a8:99:f7: 56:7b:fa:e7:c7:50:e0:b7:ee:7a:e7:6e:c3:2c:ba:8a:22:ad: 3d:cd:74:73:c1:59:be:54:0f:7f:11:a9:03:e8:f9:c2:b0:91: 64:aa:1a:00:84:32:a5:01:47:b8:65:84:da:eb:b8:72:27:7f: fe:22:2b:10:8a:b8:af:61:69:ae:05:e0:88:1a:3d:2c:9c:15: 8d:45:c4:f7:ab:5b:55:f1:68:a5:19:6e:03:e5:6d:e7:64:39: 59:52:34:53:1c:f2:36:2e:5c:e1:08:e7:d5:26:52:02:6d:9e: 49:4b:75:cf:51:f0:d3:98:f6:e7:ff:b7:38:c3:b9:af:48:c8: 26:b4:23:ae:99:44:af:75:3d:6a:fb:d6:d7:59:41:56:0c:70: f5:fc:1c:08:b2:8c:3a:85:dd:f5:a7:e5:c7:c7:28:53:70:f1: ad:af:8b:94:87:96:bf:34:33:78:d7:4b:64:1d:b7:1e:4a:3f: 9b:90:d1:19:1e:97:dc:b7:68:eb:fa:4d:3b:f9:8c:72:a1:e5: 4b:e7:22:fd:2e:c8:c8:27:c6:85:83:22:cd:8e:39:fd:b3:31: c9:c0:7f:8b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqButlxsOmXBVKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTkyOWU2MGQtYmM0My00MjUyLTk4YWUtNGQ5MDg2NGY2MmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8jpCKnOPevFxby48Lav0x9RID90VLW99EH /ufl3L7GU7Fa2b8Q0z9+IguwneOJhqM32s4BsdG/yY+0f3rZCryYXrjJVn0EAnmP UDadtxKbwZ1Igc4RKq7UpWnQ41EzYEjkNAap1JLf/Jm7Egh0SMCZbX4votmLp0Cq yNhRopEARTmpR/SvwpQBp3GtbxFbXKEdutMBLgYxh4jetw7Ofd0dJRDwWh1JlYzV id6KNrnyr7cjAfCLSpq5yR1dRhxF8wt92mRoANNQuNsXeKxFtJeWMR4T+TdYKDh2 awa0JvKrVEVb/oTj4PHPuTlGMrAWR6DfOxPKXMO245+NgzMS2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDDvCjd7wXDJC60SWWNOGOEw1CkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjgzYWQ1OGMtY2RkYy0z YzVhLWIxZjQtOWRhMWQxZDAxNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui7gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH620k/9dwqxw7sjrNuQ5L0xs2r9eQrE2WOvOFx5R7JjgqJn3Vnv6 58dQ4Lfueuduwyy6iiKtPc10c8FZvlQPfxGpA+j5wrCRZKoaAIQypQFHuGWE2uu4 cid//iIrEIq4r2FprgXgiBo9LJwVjUXE96tbVfFopRluA+Vt52Q5WVI0UxzyNi5c 4Qjn1SZSAm2eSUt1z1Hw05j25/+3OMO5r0jIJrQjrplEr3U9avvW11lBVgxw9fwc CLKMOoXd9aflx8coU3Dxra+LlIeWvzQzeNdLZB23Hko/m5DRGR6X3Ldo6/pNO/mM cqHlS+ci/S7IyCfGhYMizY45/bMxycB/iw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:54 2026 by rpki-client