This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa File: 6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa (raw, json) Hash identifier: XYrIJJkJnM7Wi2WUDF5qMSNhF91QwjBVQFt8I9iAvgs= Subject key identifier: 95:FD:1F:41:D6:B1:1B:31:48:EB:35:0A:3A:9B:8C:3D:2E:DC:CE:6F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C50D126A5457BACA9EB9D0F40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e87:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:26:a5:45:7b:ac:a9:eb:9d:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=3954726d-caad-4b5b-b108-9e83927fed13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:11:5c:1c:3f:77:ce:9a:bd:b5:9b:2c:63: f6:ec:e0:ed:6f:ce:46:26:51:af:22:94:0a:4c:20: d1:7e:6c:71:8d:3d:35:68:0a:14:36:16:71:6c:96: f2:b0:8f:b6:a0:f9:66:1f:bc:7f:e1:71:00:6c:12: c7:10:b1:8b:68:f1:7d:ae:a7:d7:4a:5c:e3:b4:f2: 2a:57:af:7c:55:43:9b:fb:9d:19:19:82:95:7f:8d: 45:23:d1:ba:c6:67:27:da:4e:9f:e0:e0:fc:56:de: d5:db:e3:48:14:b6:ba:cf:c8:99:54:6b:4b:aa:cc: 95:3c:b0:9e:a4:50:37:e5:7e:29:6e:3e:36:8c:96: e3:0e:35:46:a8:80:2f:4a:e1:27:74:a1:b1:8f:57: eb:b5:50:ff:1b:53:3a:b8:17:99:9c:92:3a:47:55: ee:64:27:f8:ae:8e:a5:90:23:3c:51:38:fe:39:45: 61:56:49:5e:c7:fa:cb:6a:b7:52:6b:18:86:73:e4: df:08:eb:ff:cf:47:cd:7b:39:40:d6:c5:98:57:9c: 60:14:31:41:e7:f6:e1:98:88:dc:64:b1:e0:c6:f4: c9:16:ba:ab:4f:d5:cd:d0:d3:12:9d:aa:1b:2c:ec: 8f:50:e3:59:04:25:47:78:22:f9:9d:ae:23:39:a9: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:1F:41:D6:B1:1B:31:48:EB:35:0A:3A:9B:8C:3D:2E:DC:CE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cc:3f:39:bf:86:1e:e5:11:1a:97:b8:d2:c6:fd:be:06:ad: ff:f3:94:b0:da:3d:8e:68:03:41:7b:11:2e:93:1d:6f:d5:93: b7:d3:ba:c4:b1:d7:cb:f2:45:c2:0c:e0:44:29:62:09:7c:9c: d4:e2:46:88:dd:94:05:f1:61:69:7d:bf:87:85:8a:e2:3e:c7: aa:c6:67:48:db:6f:14:ac:bb:3a:b9:eb:57:c5:a0:eb:8e:45: e2:7e:da:b3:a9:cd:37:b8:85:be:e7:09:d1:f0:9f:0d:55:a2: 31:33:43:09:f6:6f:d7:88:01:3f:ff:73:ce:a8:ef:71:f4:e1: d9:77:13:5c:da:e7:3d:61:25:47:50:1d:69:e6:cd:6e:1d:e5: 4f:1e:81:60:ea:22:94:62:10:6d:42:5b:d7:58:24:54:5d:f6: 7b:4d:d9:df:26:fa:33:3f:7f:22:b3:8c:da:32:64:ea:56:41: 18:45:4d:49:61:12:c0:75:10:3e:8f:1c:72:96:a3:33:e2:a4: a1:46:9a:e2:70:cc:88:fa:aa:4f:2a:9e:46:01:b7:4c:ca:60: 60:b0:dd:7f:fe:05:1a:64:d8:b1:b9:9f:7d:c7:38:52:0b:51: ef:b9:33:cc:6a:5a:33:22:b1:1f:75:2c:f5:28:04:1e:ac:62: a0:38:a6:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0SalRXusqeudD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk Mzk1NDcyNmQtY2FhZC00YjViLWIxMDgtOWU4MzkyN2ZlZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcARXBw/d86avbWbLGP27ODtb85GJlGvIpQK TCDRfmxxjT01aAoUNhZxbJbysI+2oPlmH7x/4XEAbBLHELGLaPF9rqfXSlzjtPIq V698VUOb+50ZGYKVf41FI9G6xmcn2k6f4OD8Vt7V2+NIFLa6z8iZVGtLqsyVPLCe pFA35X4pbj42jJbjDjVGqIAvSuEndKGxj1frtVD/G1M6uBeZnJI6R1XuZCf4ro6l kCM8UTj+OUVhVklex/rLardSaxiGc+TfCOv/z0fNezlA1sWYV5xgFDFB5/bhmIjc ZLHgxvTJFrqrT9XN0NMSnaobLOyPUONZBCVHeCL5na4jOakfZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJX9H0HWsRsxSOs1CjqbjD0u3M5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmFiMmE1NDMtOGUzNC0z ZTUwLWJkYmUtYTMwZTc3ZDYxYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXsw/Ob+GHuURGpe40sb9vgat//OUsNo9jmgDQXsRLpMdb9WTt9O6 xLHXy/JFwgzgRCliCXyc1OJGiN2UBfFhaX2/h4WK4j7HqsZnSNtvFKy7OrnrV8Wg 645F4n7as6nNN7iFvucJ0fCfDVWiMTNDCfZv14gBP/9zzqjvcfTh2XcTXNrnPWEl R1AdaebNbh3lTx6BYOoilGIQbUJb11gkVF32e03Z3yb6Mz9/IrOM2jJk6lZBGEVN SWESwHUQPo8ccpajM+KkoUaa4nDMiPqqTyqeRgG3TMpgYLDdf/4FGmTYsbmffcc4 UgtR77kzzGpaMyKxH3Us9SgEHqxioDimaw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:34 2026 by rpki-client