This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/712a4ece-1b50-3388-a219-3d20cfc75f94.roa File: 712a4ece-1b50-3388-a219-3d20cfc75f94.roa (raw, json) Hash identifier: 5n3rLVSZGk3zZFVgx+hYa9hEwLnHGlWlOe5+ATTz8FQ= Subject key identifier: B8:89:3E:33:6D:04:C0:0E:06:F2:69:B0:9E:9D:60:7C:CF:36:83:A4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A66FE01D81EA8042A6DDF0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/712a4ece-1b50-3388-a219-3d20cfc75f94.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:6f:e0:1d:81:ea:80:42:a6:dd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5044526a-00d6-4efb-80bb-99509054a7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:87:6a:6e:4a:ef:9d:30:e8:47:69:dd:46: c1:51:4c:25:8d:e3:35:c0:a2:da:a1:a3:e0:06:a8: 66:c9:32:59:ea:36:80:51:d1:1b:ba:55:b6:f1:93: f7:7e:f8:ee:f1:61:5c:50:9f:f7:4a:16:42:4c:61: 2e:4a:fd:c8:b1:2d:f2:2a:b6:41:1b:c0:37:19:80: a0:56:84:af:f7:36:c5:7b:9a:cc:5e:cf:66:31:b6: c2:2d:c3:e6:67:b1:f6:bc:fe:bb:72:95:f2:91:23: 6b:ad:b4:ba:77:d9:1c:eb:2a:6f:23:63:d3:2a:1c: be:02:df:6d:81:dd:44:1f:9a:3f:79:af:48:28:c5: 2b:53:da:a1:43:42:f7:4f:e4:de:fb:66:f6:0a:df: 91:86:70:76:db:37:c7:56:87:bd:68:4b:f3:f4:db: 39:2c:6a:52:37:34:31:0e:06:92:87:7c:ba:cc:a5: 78:61:9a:14:c1:7c:be:ef:1b:fd:9e:33:4d:5f:45: e1:31:21:3a:1e:1f:9a:07:44:7a:22:9a:ee:c8:a9: cb:7e:27:27:2b:05:e2:7c:41:e8:8f:52:f3:c7:6f: a8:31:b6:a8:ef:3b:ea:7d:41:60:04:89:60:e9:35: 76:92:84:3c:3b:92:75:74:9b:2f:e3:e6:9e:af:32: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:3E:33:6D:04:C0:0E:06:F2:69:B0:9E:9D:60:7C:CF:36:83:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/712a4ece-1b50-3388-a219-3d20cfc75f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1d:e7:a5:a9:ed:f9:cd:7d:d5:c4:28:be:66:74:72:89:70: 72:27:6a:c2:e6:0c:71:a3:fc:dc:61:b8:c2:93:43:76:c6:78: 9d:a8:54:62:3d:6c:cf:8f:18:6e:bf:99:9e:41:0e:ee:db:2e: 3e:f7:b9:5c:dc:67:38:d8:03:aa:9e:47:c8:1a:6c:0c:b2:02: 3b:27:c7:8b:c3:8a:fe:21:a3:13:e4:9e:ca:12:1e:03:c4:d7: 68:24:60:2e:40:04:07:e2:5c:aa:16:05:d2:34:75:22:ba:0a: 3a:f3:9d:22:e6:bd:15:25:23:b2:e0:0f:82:63:af:c7:34:fe: c8:e6:c9:ed:85:14:6f:2d:da:48:3b:dc:3e:22:c3:0d:a0:87: 6c:f5:2b:e4:72:78:d7:33:fc:71:c2:2a:12:04:1f:25:cb:dc: 65:1a:5f:58:17:1f:11:60:73:e5:48:4a:aa:bb:87:72:4e:77: 45:4d:2b:ac:ee:f8:87:01:4c:3c:bc:8b:7f:f2:9f:fd:ef:8b: df:57:6b:3e:ab:6b:72:b6:2d:40:2a:d9:28:c1:d3:3e:9d:fe: 99:4c:de:05:15:d0:39:86:75:85:67:53:e8:ab:f9:dc:88:dc: 0e:d2:95:d7:50:2b:c0:d4:8f:20:21:e0:91:83:0c:3c:3c:18: 42:14:f3:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpm/gHYHqgEKm3fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTA0NDUyNmEtMDBkNi00ZWZiLTgwYmItOTk1MDkwNTRhN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ+Ham5K750w6Edp3UbBUUwljeM1wKLaoaPg BqhmyTJZ6jaAUdEbulW28ZP3fvju8WFcUJ/3ShZCTGEuSv3IsS3yKrZBG8A3GYCg VoSv9zbFe5rMXs9mMbbCLcPmZ7H2vP67cpXykSNrrbS6d9kc6ypvI2PTKhy+At9t gd1EH5o/ea9IKMUrU9qhQ0L3T+Te+2b2Ct+RhnB22zfHVoe9aEvz9Ns5LGpSNzQx DgaSh3y6zKV4YZoUwXy+7xv9njNNX0XhMSE6Hh+aB0R6IpruyKnLficnKwXifEHo j1Lzx2+oMbao7zvqfUFgBIlg6TV2koQ8O5J1dJsv4+aerzLBkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLiJPjNtBMAOBvJpsJ6dYHzPNoOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzEyYTRlY2UtMWI1MC0z Mzg4LWEyMTktM2QyMGNmYzc1Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuilAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQR3npant+c191cQovmZ0colwcidqwuYMcaP83GG4wpNDdsZ4nahU Yj1sz48Ybr+ZnkEO7tsuPve5XNxnONgDqp5HyBpsDLICOyfHi8OK/iGjE+SeyhIe A8TXaCRgLkAEB+JcqhYF0jR1IroKOvOdIua9FSUjsuAPgmOvxzT+yObJ7YUUby3a SDvcPiLDDaCHbPUr5HJ41zP8ccIqEgQfJcvcZRpfWBcfEWBz5UhKqruHck53RU0r rO74hwFMPLyLf/Kf/e+L31drPqtrcrYtQCrZKMHTPp3+mUzeBRXQOYZ1hWdT6Kv5 3IjcDtKV11ArwNSPICHgkYMMPDwYQhTz5A== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:32 2026 by rpki-client