This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
File: 68c68e79-1c47-3078-9917-47c5d37abb24.roa (raw, json)
Hash identifier: 6cinLDDbcOKv0Ttef2A852WYU8TuRZyj5ZdcsxSmHJM=
Subject key identifier: 50:5D:BB:14:1A:F3:62:D4:2D:9C:C0:E9:D4:1D:76:2A:6B:7D:27:81
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C42DBE1744EC42B00B974FB40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e89:f000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:e1:74:4e:c4:2b:00:b9:74:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=5b0907b4-0b6f-4062-ba60-9c26e57f5273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:78:15:96:b2:90:21:17:39:1b:f3:18:d7:
3e:5e:23:31:df:84:7c:a9:a3:da:24:7b:20:0b:43:
94:c4:3b:62:df:25:f0:cc:4b:c1:d3:92:7a:2e:a9:
b1:8d:74:e7:97:65:16:4f:8e:7e:53:e7:e7:d5:d4:
ca:81:c3:62:d7:7e:ee:bd:9e:53:23:5d:0c:f2:4c:
92:da:c6:77:0f:21:c7:dd:d9:05:44:e7:44:c4:9a:
05:2b:1a:8f:08:b7:0e:c4:ba:74:3b:ee:d3:55:e4:
77:ba:9d:26:17:09:e5:4d:f1:03:a0:e6:43:68:73:
f9:c4:df:f6:56:3d:1e:1c:4f:56:17:0d:59:45:19:
2c:2b:6c:44:de:5a:cf:89:b4:71:d5:f1:c1:0c:a1:
c7:59:f6:c6:27:2c:fc:4c:39:23:53:ec:c1:57:08:
29:b8:32:19:72:f7:12:0d:dc:d2:46:0f:55:11:26:
67:a0:68:f3:63:2c:9f:18:9b:56:a9:03:28:7d:c0:
5f:c1:f6:74:c9:c3:6b:11:16:41:21:3f:79:a9:90:
f8:cc:4b:5c:7d:81:c6:83:33:f6:14:b0:4d:86:aa:
29:c9:38:07:46:22:01:11:49:cd:42:c6:db:78:bf:
62:6b:6b:1d:36:03:59:62:fc:b9:9b:e8:3d:80:63:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:BB:14:1A:F3:62:D4:2D:9C:C0:E9:D4:1D:76:2A:6B:7D:27:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:f000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:67:d5:17:1b:35:1a:4e:2d:86:a7:4a:a9:5d:62:0f:f6:c4:
d2:0a:92:db:c5:3a:92:ac:d1:06:3d:f8:4b:40:32:4d:2c:85:
4e:1e:de:ee:a9:31:95:91:ef:e5:b8:30:39:a5:1e:ec:78:93:
9a:2a:fa:a0:2c:8c:6c:1b:46:85:f1:a8:21:d0:f8:c2:ca:93:
48:6f:06:96:3c:3c:77:da:59:45:66:37:ae:6c:17:f0:13:16:
94:1e:9d:df:26:17:af:d9:4d:a6:ba:cc:0d:39:24:87:da:79:
1e:43:6e:04:2e:ab:1a:ce:da:8c:2f:69:0d:f5:db:fa:68:aa:
63:43:ce:a6:4c:25:34:b0:e3:7b:86:6e:d8:6f:3f:92:fa:9b:
55:62:c0:3f:d3:24:63:7b:4f:fe:81:be:8d:57:cf:4d:64:be:
6d:79:90:a2:8a:30:1f:c2:54:22:e2:3c:c0:35:3d:6a:b1:e0:
98:b1:70:7e:57:ad:76:49:ef:93:21:80:39:ed:5d:fe:ec:cb:
2b:c3:e9:34:65:c6:14:8f:87:e3:da:24:a9:67:de:18:4a:77:
99:2d:a8:81:a3:8e:e8:af:e4:ee:07:d7:65:6c:5c:86:1e:90:
97:bc:54:17:91:83:5e:c2:cf:d3:e1:6b:eb:e6:62:ff:c8:48:
87:7b:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:28:48 2026 by rpki-client