This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa File: 68d99f85-b937-338f-9406-78fc948e527c.roa (raw, json) Hash identifier: gMDXDMno3lR7D/0W4tvdNQ0nCwdTWsled6clqknXQVU= Subject key identifier: D6:3A:0F:5E:8E:F8:92:98:03:13:06:F8:7B:87:1A:5F:03:C7:AF:8E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BCC35B51798F388DFC81EE100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e87:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:b5:17:98:f3:88:df:c8:1e:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=a317692d-8a0a-4aef-b1b9-375a755d9323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:db:57:7b:b0:40:1a:9f:47:6f:af:06:4c: 47:0d:38:fb:e8:5b:ca:f7:f4:9f:3e:d0:17:e6:ec: fd:b9:3e:3a:33:93:0f:20:d3:7f:1f:10:da:cc:fd: 43:69:7c:48:12:dc:23:8b:3d:52:c4:0b:4a:74:8f: af:cf:07:c9:83:06:80:f8:0a:c0:21:5a:a7:c7:34: 41:65:09:f4:a0:ef:e9:d0:5b:29:32:fe:03:88:88: 9f:76:0f:12:43:47:e4:bd:35:0f:21:54:e1:a2:96: 32:f3:56:e5:7f:bc:50:1d:cb:cb:0b:d7:48:0c:f0: d0:4c:00:ee:98:fd:2b:08:66:64:72:9f:6d:b3:d0: 14:f0:37:8f:6f:d8:dd:05:b1:74:fd:0b:2c:17:35: a4:b1:bd:97:48:f0:52:36:19:b5:41:ed:6c:66:86: ae:4a:52:d8:36:f1:91:1e:b8:4b:82:37:11:a8:61: b5:52:83:86:f7:c7:5c:90:ca:19:c6:31:47:6b:39: 14:08:df:94:0b:8a:8b:22:0e:ce:7a:b7:87:5b:fa: 03:2a:89:27:2f:6b:a4:bf:03:88:e6:f4:a7:7c:e9: c5:7a:7b:bb:cc:4e:f5:3e:75:6b:42:26:e4:1a:c9: d7:92:ec:c6:c4:0b:d6:1c:ee:e9:27:bc:f4:77:05: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3A:0F:5E:8E:F8:92:98:03:13:06:F8:7B:87:1A:5F:03:C7:AF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:94:49:9e:f9:43:a9:74:cd:8f:5a:50:7f:e1:7d:6e:1d:bb: 5a:ed:c8:c8:36:f1:07:30:f4:a9:5e:2c:1c:b6:ec:43:48:8f: 8b:56:c6:ad:da:9c:07:9b:53:a4:69:aa:11:b8:8e:63:5c:ac: 64:dd:94:31:d4:4d:e9:5d:ad:0a:09:45:13:35:6b:ff:ea:ff: b4:57:e4:ed:9f:4d:13:39:b0:b3:df:ef:10:4d:88:e2:59:16: 4a:f2:ad:86:f1:a8:24:17:a1:aa:b1:83:d6:0c:32:4e:87:c1: 6e:bc:ce:11:36:69:15:ca:10:44:f9:af:8e:42:1d:c4:00:db: f2:a5:63:4f:76:d3:d3:43:6f:4c:2d:58:e4:67:a1:e5:7a:4e: be:89:d0:60:15:d3:3f:61:52:7c:c8:3b:81:d7:39:9f:12:d8: af:56:8d:3a:2f:67:59:a9:b0:77:0a:08:cb:ff:bf:4c:b1:1b: 74:80:cf:2a:cc:8a:86:99:46:2c:e8:57:f0:3e:d2:99:8c:73: a9:a7:52:bf:99:ab:d4:87:d2:fe:e6:db:3e:7f:ed:ca:41:bb: ba:37:14:74:84:78:7c:85:42:7f:51:d2:2c:47:a5:d4:ad:4e: a5:b6:aa:06:f6:24:27:b8:dd:e7:da:31:55:d2:99:f3:22:5f: 0e:88:28:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvMNbUXmPOI38ge4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk YTMxNzY5MmQtOGEwYS00YWVmLWIxYjktMzc1YTc1NWQ5MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbbV3uwQBqfR2+vBkxHDTj76FvK9/SfPtAX 5uz9uT46M5MPINN/HxDazP1DaXxIEtwjiz1SxAtKdI+vzwfJgwaA+ArAIVqnxzRB ZQn0oO/p0FspMv4DiIifdg8SQ0fkvTUPIVThopYy81blf7xQHcvLC9dIDPDQTADu mP0rCGZkcp9ts9AU8DePb9jdBbF0/QssFzWksb2XSPBSNhm1Qe1sZoauSlLYNvGR HrhLgjcRqGG1UoOG98dckMoZxjFHazkUCN+UC4qLIg7OereHW/oDKoknL2ukvwOI 5vSnfOnFenu7zE71PnVrQibkGsnXkuzGxAvWHO7pJ7z0dwVDXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNY6D16O+JKYAxMG+HuHGl8Dx6+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhkOTlmODUtYjkzNy0z MzhmLTk0MDYtNzhmYzk0OGU1MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcZRJnvlDqXTNj1pQf+F9bh27Wu3IyDbxBzD0qV4sHLbsQ0iPi1bG rdqcB5tTpGmqEbiOY1ysZN2UMdRN6V2tCglFEzVr/+r/tFfk7Z9NEzmws9/vEE2I 4lkWSvKthvGoJBehqrGD1gwyTofBbrzOETZpFcoQRPmvjkIdxADb8qVjT3bT00Nv TC1Y5Geh5XpOvonQYBXTP2FSfMg7gdc5nxLYr1aNOi9nWamwdwoIy/+/TLEbdIDP KsyKhplGLOhX8D7SmYxzqadSv5mr1IfS/ubbPn/tykG7ujcUdIR4fIVCf1HSLEel 1K1OpbaqBvYkJ7jd59oxVdKZ8yJfDogo/Q== -----END CERTIFICATE-----Generated at Tue Nov 25 17:08:40 2025 by rpki-client