This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa File: 713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa (raw, json) Hash identifier: i9qNqSrBwsNLpm69XsMvvqXNWCdQvFPaKR2mtVMcOT8= Subject key identifier: 9D:0F:C2:56:C1:1D:EF:31:F4:73:A1:C3:37:97:EE:7A:9E:7E:BC:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871DB7C8D6BC5A9D4080E10 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:db:7c:8d:6b:c5:a9:d4:08:0e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=11484f2a-26fc-4b60-b58b-23eafd41676d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:23:4e:fa:5c:4b:b5:43:8b:98:d7:3b:da: 37:eb:45:d4:fe:61:9e:03:c4:04:6b:02:7d:27:f2: 5b:fb:89:65:68:ef:cf:25:5a:3f:68:ac:ac:23:4d: 8b:17:cc:7b:a0:27:83:84:e3:2d:dd:78:02:60:1d: 20:45:61:68:4a:a3:26:54:84:70:a9:00:2c:e7:c2: a7:88:76:da:73:8c:af:81:f5:06:76:aa:1c:67:b5: ff:e8:04:2e:9f:e2:f5:85:37:f7:63:d7:db:2c:ff: 4e:51:75:21:01:7c:7c:3a:ea:b3:ba:39:8d:8b:0a: da:ef:d3:4c:a7:b6:d2:e8:24:b3:c1:38:e0:1c:15: 92:96:2d:a1:3d:12:7e:c1:94:f6:6a:9f:2e:00:db: bb:66:1c:6c:cf:51:e8:c7:ca:86:23:28:4d:c5:fc: c2:ed:97:cf:fc:e9:51:2a:88:f9:11:16:70:b0:8d: 9e:40:6b:ce:e7:65:c1:b9:53:18:ed:20:ff:bb:4b: 64:fc:04:1b:d8:9e:e1:bf:2a:d1:4d:e1:24:85:33: 11:f6:da:b8:e0:e3:51:c5:1d:42:e1:f1:f8:5a:ee: f0:fb:6a:cd:64:6a:2e:29:de:31:d6:df:1a:42:cb: 32:93:01:dc:ab:47:6c:53:63:3e:27:3b:43:53:0d: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:C2:56:C1:1D:EF:31:F4:73:A1:C3:37:97:EE:7A:9E:7E:BC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a0:c2:98:f0:25:99:c1:fe:40:34:5a:24:7e:9b:af:47:a0: 32:9e:5e:f4:da:d6:f3:14:28:55:2c:81:e7:8a:ef:10:f9:df: d0:f7:58:b7:43:43:2e:d2:d4:62:34:62:18:8d:a8:db:7d:4d: 7c:88:8d:1b:91:bb:b4:f5:b4:9b:80:aa:57:d4:4a:9f:d5:1d: e0:e0:ff:3c:21:0c:b7:78:2b:d9:aa:f8:76:fa:2b:c5:50:0c: 42:9f:0b:70:59:dd:10:51:ea:20:b2:80:98:70:e1:9f:b3:8b: 33:ad:d3:9e:ac:02:2d:70:2b:22:1b:d3:0a:3b:39:93:b3:44: b9:b8:f4:c3:e4:d8:90:45:d1:13:c3:bd:a9:81:c1:0f:df:33: 02:f3:69:c9:4a:ab:6f:fb:23:5d:46:5b:90:c2:56:4b:2d:6c: 35:6d:26:9e:b4:11:5c:6d:44:ae:f3:50:a0:91:f6:3f:58:b1: 89:82:f6:b7:07:eb:8f:c2:17:09:80:08:af:5a:5b:39:21:1d: 9d:55:24:5b:8a:d6:ce:62:06:f4:5e:86:a4:7c:11:aa:d7:43: 8a:47:27:0e:8d:ce:d8:20:a2:0f:e3:c3:7a:66:da:80:0b:dd: 78:6e:44:73:66:73:c2:75:18:6a:72:97:72:b0:78:e2:c5:56: 67:67:84:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcdt8jWvFqdQIDhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MTE0ODRmMmEtMjZmYy00YjYwLWI1OGItMjNlYWZkNDE2NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKwjTvpcS7VDi5jXO9o360XU/mGeA8QEawJ9 J/Jb+4llaO/PJVo/aKysI02LF8x7oCeDhOMt3XgCYB0gRWFoSqMmVIRwqQAs58Kn iHbac4yvgfUGdqocZ7X/6AQun+L1hTf3Y9fbLP9OUXUhAXx8OuqzujmNiwra79NM p7bS6CSzwTjgHBWSli2hPRJ+wZT2ap8uANu7Zhxsz1Hox8qGIyhNxfzC7ZfP/OlR Koj5ERZwsI2eQGvO52XBuVMY7SD/u0tk/AQb2J7hvyrRTeEkhTMR9tq44ONRxR1C 4fH4Wu7w+2rNZGouKd4x1t8aQssykwHcq0dsU2M+JztDUw10hwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ0PwlbBHe8x9HOhwzeX7nqefrxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzEzZWYwNGYtMWZjZS0z NmI4LThmODItYWExZjFkYzU2NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFKDCmPAlmcH+QDRaJH6br0egMp5e9NrW8xQoVSyB54rvEPnf0PdY t0NDLtLUYjRiGI2o231NfIiNG5G7tPW0m4CqV9RKn9Ud4OD/PCEMt3gr2ar4dvor xVAMQp8LcFndEFHqILKAmHDhn7OLM63TnqwCLXArIhvTCjs5k7NEubj0w+TYkEXR E8O9qYHBD98zAvNpyUqrb/sjXUZbkMJWSy1sNW0mnrQRXG1ErvNQoJH2P1ixiYL2 twfrj8IXCYAIr1pbOSEdnVUkW4rWzmIG9F6GpHwRqtdDikcnDo3O2CCiD+PDemba gAvdeG5Ec2ZzwnUYanKXcrB44sVWZ2eEMA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:26 2026 by rpki-client