This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa File: 70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa (raw, json) Hash identifier: Pa4ZHusXLobBoq4balADL98dMXdv4HsFYVv8mbW+4nM= Subject key identifier: BB:C2:FE:38:F6:9B:68:0F:DA:F2:E7:AF:A4:1A:C6:6C:A6:9A:C0:34 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C417685CBE50E55B9881D4180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:85:cb:e5:0e:55:b9:88:1d:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=6bbff342-f03c-490a-beab-9e766fe36fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:d8:e3:b4:70:e5:13:42:aa:e8:24:7d:f1: e2:4e:66:8d:41:cc:41:bf:ba:4a:15:a4:54:31:74: e3:f9:95:9e:60:a2:4f:37:89:eb:e5:c5:a1:db:27: 9e:fd:bc:4e:83:3b:a7:23:bd:0d:43:99:95:34:4e: 0e:9a:19:fc:f6:55:83:7f:68:e3:bb:e6:6e:02:d9: 35:dd:fe:f1:c4:70:74:ff:32:93:c7:08:5a:2b:4d: c1:cf:c5:1e:fd:8b:d2:07:78:60:bc:61:00:d9:a6: 42:dd:d7:aa:1b:e9:5a:f7:ab:fe:43:fb:88:43:86: 29:ce:ac:84:da:2e:47:69:14:b1:75:9a:71:16:02: 3d:27:02:4c:bc:d4:d1:eb:c2:71:d8:48:85:88:ec: 14:35:4b:4d:d0:51:e7:2f:e3:69:a5:cb:3a:24:ec: e7:da:1a:1e:cf:d3:b4:3e:ee:be:5a:6c:e9:1b:b3: 3a:ea:25:99:e1:d6:39:ed:54:5b:18:c2:cb:9d:bc: 58:d7:c3:50:10:04:e9:c8:fe:7a:df:c7:e5:1b:55: 9f:6e:ab:37:e2:4d:da:36:d3:91:9f:85:fd:e4:fd: 8e:7f:05:6f:4c:d7:18:d6:33:e7:4b:0b:d9:0c:8a: 79:20:5d:34:7d:ce:bf:b9:1c:fa:66:6d:e2:a1:0b: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:FE:38:F6:9B:68:0F:DA:F2:E7:AF:A4:1A:C6:6C:A6:9A:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9f:19:21:f8:cb:32:6f:82:e1:22:38:75:c4:fd:54:7c:e5: 73:4a:66:65:39:b1:a2:8c:6b:c7:ef:42:6e:fe:25:86:de:59: a6:49:29:d5:51:ff:ab:34:21:ec:6e:3f:75:3e:d5:57:e7:38: 97:04:a6:ae:ab:31:c5:ba:0f:3b:3f:90:38:43:7b:eb:31:69: 8c:b1:6f:1b:bc:48:50:ab:d6:cd:c6:ec:23:61:15:b7:ee:40: 5b:cf:04:6e:d9:11:04:69:15:4f:0b:cc:89:4e:e0:0f:99:70: df:65:61:31:f9:14:29:3f:3a:ba:b8:1a:64:7e:d6:99:a6:a5: 61:14:1d:dc:b5:dc:52:24:cd:d6:45:e0:bb:cb:77:b6:41:87: 34:27:17:b7:71:f4:16:07:0f:23:77:d2:84:7f:eb:62:88:05: dd:01:51:f5:24:ff:87:8e:e3:b9:a7:dc:01:d5:54:fd:25:29: 72:ec:61:61:f6:c8:9c:93:93:51:01:5b:95:5d:bc:3c:e3:85: 3c:11:fb:c4:36:b5:77:e6:71:b4:13:d9:b1:f1:77:57:6a:72: ca:e5:b1:38:24:c6:ab:05:5d:19:0d:35:8d:58:be:17:e0:4f: 64:7e:e3:ff:fe:90:8d:75:48:d5:41:6e:45:90:a9:25:cf:84: 29:6b:1d:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoXL5Q5VuYgdQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NmJiZmYzNDItZjAzYy00OTBhLWJlYWItOWU3NjZmZTM2ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusjY47Rw5RNCqugkffHiTmaNQcxBv7pKFaRU MXTj+ZWeYKJPN4nr5cWh2yee/bxOgzunI70NQ5mVNE4Omhn89lWDf2jju+ZuAtk1 3f7xxHB0/zKTxwhaK03Bz8Ue/YvSB3hgvGEA2aZC3deqG+la96v+Q/uIQ4YpzqyE 2i5HaRSxdZpxFgI9JwJMvNTR68Jx2EiFiOwUNUtN0FHnL+Nppcs6JOzn2hoez9O0 Pu6+WmzpG7M66iWZ4dY57VRbGMLLnbxY18NQEATpyP5638flG1Wfbqs34k3aNtOR n4X95P2OfwVvTNcY1jPnSwvZDIp5IF00fc6/uRz6Zm3ioQuLrwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLvC/jj2m2gP2vLnr6QaxmymmsA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzBlNjZlMjYtNWJjZi0z MTI1LTgxZTUtZjYwYzM4ZGIwZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABZ8ZIfjLMm+C4SI4dcT9VHzlc0pmZTmxooxrx+9Cbv4lht5Zpkkp 1VH/qzQh7G4/dT7VV+c4lwSmrqsxxboPOz+QOEN76zFpjLFvG7xIUKvWzcbsI2EV t+5AW88EbtkRBGkVTwvMiU7gD5lw32VhMfkUKT86urgaZH7WmaalYRQd3LXcUiTN 1kXgu8t3tkGHNCcXt3H0FgcPI3fShH/rYogF3QFR9ST/h47juafcAdVU/SUpcuxh YfbInJOTUQFblV28POOFPBH7xDa1d+ZxtBPZsfF3V2pyyuWxOCTGqwVdGQ01jVi+ F+BPZH7j//6QjXVI1UFuRZCpJc+EKWsdXA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:36 2026 by rpki-client