This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/768094aa-10ff-3ea8-ad48-46aa2617fe3c.roa File: 768094aa-10ff-3ea8-ad48-46aa2617fe3c.roa (raw, json) Hash identifier: pKp/7viCtkO4nrINEblGePBcXqGtnlyaf9oYmv9FnmI= Subject key identifier: 25:7D:CD:1B:8D:C9:D7:46:F4:39:D9:BA:1D:B6:C7:56:51:63:C6:8B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82503B7A5BB6F48489A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/768094aa-10ff-3ea8-ad48-46aa2617fe3c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:25:03:b7:a5:bb:6f:48:48:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b48d88a9-d1b5-40df-8e48-06959f3d9fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:73:98:2f:24:6f:f1:60:c1:e1:2e:1e:7b: 3a:94:85:8a:49:23:9b:d4:e6:c5:8f:30:22:20:0e: ea:5c:52:4c:5d:1c:9b:8e:65:a4:11:bf:f1:0e:25: 1f:3e:d9:2c:dc:96:8c:f3:b8:d6:77:2d:e9:f5:a2: e0:d1:b1:94:b6:17:75:90:5d:a0:5d:59:c0:d9:f1: 9f:9b:46:6a:0a:1f:05:b9:63:59:bf:eb:a5:58:e6: 63:02:43:03:be:96:4f:2e:95:74:26:c7:78:e6:e7: 82:c0:20:69:ab:ef:45:07:23:03:d6:c3:50:64:20: 40:f5:86:50:e3:ac:a0:6f:b2:9f:0e:29:dd:d7:28: 4d:3a:92:9e:d8:59:9d:43:6a:50:69:1d:05:cb:b9: 97:e3:0e:4f:d8:90:15:52:92:70:74:d8:4e:4d:a7: d7:78:c2:a1:9f:b3:16:69:ae:a9:32:31:16:1f:91: 2f:b0:f3:47:09:a6:13:03:76:e0:86:eb:5c:a5:43: ed:62:f5:91:ae:49:af:7e:49:a4:64:75:68:c8:7e: 71:50:c9:a2:1f:af:0c:bc:a5:59:29:3f:b6:3c:7e: 3b:7e:da:d5:3d:4e:85:fb:47:0f:71:f9:5d:54:66: c7:1b:a8:02:e5:ba:58:51:1d:4c:f6:da:ac:ca:0d: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7D:CD:1B:8D:C9:D7:46:F4:39:D9:BA:1D:B6:C7:56:51:63:C6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/768094aa-10ff-3ea8-ad48-46aa2617fe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c4:8e:6d:67:63:9c:77:5a:af:d2:76:e2:63:ba:25:4d:69: b1:d4:e1:d3:fa:d6:66:50:3c:57:62:17:b2:7a:af:40:7f:b9: e6:89:16:d3:eb:55:7c:41:40:1c:18:01:6e:87:d5:64:3a:00: fb:ec:27:1b:23:70:79:fe:3e:03:eb:d2:2c:ab:81:d8:d1:76: d0:f5:bf:28:bd:cf:ff:58:cc:88:6f:4f:7a:5a:4c:9d:e7:e7: 45:e0:47:44:90:ca:f8:21:f0:33:e0:a7:8c:6a:ee:1a:4b:d8: 2c:53:8a:7f:71:23:3a:09:fc:7c:78:99:e4:ef:86:a9:10:aa: ce:47:b8:2b:58:dd:d1:d2:a5:c1:7e:d1:f2:6e:cc:ce:0d:ea: fa:6d:0e:df:bc:0f:87:6c:c2:a7:a1:e1:1c:51:32:b1:f7:18: 97:42:72:4f:84:7d:08:0d:5d:65:d4:a5:4c:0c:b0:9a:c0:b2: c8:a3:df:a1:20:f2:a5:9f:55:2b:89:24:9c:1b:53:3e:3a:9e: 8a:1e:1d:38:62:d1:e5:35:b6:6d:72:c1:9b:62:14:9a:63:e0: 7c:a9:c1:34:44:4a:61:d6:bc:af:5c:5d:ec:b6:23:d3:ad:57: 1d:ad:f1:28:96:1b:62:28:f4:9a:c1:3a:14:73:3e:73:0b:e8: 51:c9:e0:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCUDt6W7b0hImoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YjQ4ZDg4YTktZDFiNS00MGRmLThlNDgtMDY5NTlmM2Q5ZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygJzmC8kb/FgweEuHns6lIWKSSOb1ObFjzAi IA7qXFJMXRybjmWkEb/xDiUfPtks3JaM87jWdy3p9aLg0bGUthd1kF2gXVnA2fGf m0ZqCh8FuWNZv+ulWOZjAkMDvpZPLpV0Jsd45ueCwCBpq+9FByMD1sNQZCBA9YZQ 46ygb7KfDind1yhNOpKe2FmdQ2pQaR0Fy7mX4w5P2JAVUpJwdNhOTafXeMKhn7MW aa6pMjEWH5EvsPNHCaYTA3bghutcpUPtYvWRrkmvfkmkZHVoyH5xUMmiH68MvKVZ KT+2PH47ftrVPU6F+0cPcfldVGbHG6gC5bpYUR1M9tqsyg2GtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCV9zRuNyddG9DnZuh22x1ZRY8aLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzY4MDk0YWEtMTBmZi0z ZWE4LWFkNDgtNDZhYTI2MTdmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujbAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGMSObWdjnHdar9J24mO6JU1psdTh0/rWZlA8V2IXsnqvQH+55okW 0+tVfEFAHBgBbofVZDoA++wnGyNwef4+A+vSLKuB2NF20PW/KL3P/1jMiG9PelpM nefnReBHRJDK+CHwM+CnjGruGkvYLFOKf3EjOgn8fHiZ5O+GqRCqzke4K1jd0dKl wX7R8m7Mzg3q+m0O37wPh2zCp6HhHFEysfcYl0JyT4R9CA1dZdSlTAywmsCyyKPf oSDypZ9VK4kknBtTPjqeih4dOGLR5TW2bXLBm2IUmmPgfKnBNERKYda8r1xd7LYj 061XHa3xKJYbYij0msE6FHM+cwvoUcngKw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:28 2026 by rpki-client