This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa File: 7991b3d4-102a-3e92-9a21-d22eda3d7344.roa (raw, json) Hash identifier: h2PpMDkRwW4pz8Kf877D+4kDRBGMRYCA0AxP7bb0buU= Subject key identifier: 83:65:D7:EB:84:E2:F1:45:3A:F6:47:35:A4:95:75:C4:C7:22:CB:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A833F80262745194C81640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:33:f8:02:62:74:51:94:c8:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e976c619-6d4c-45dc-b421-ee08163e2fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:47:07:05:86:88:b7:9f:1c:c2:94:8c:eb: 7a:c4:1c:3d:47:ed:84:93:4c:5a:f6:20:ed:e8:13: c6:b7:0d:87:66:b8:56:fa:a2:8b:cf:47:32:77:e6: 50:f0:35:8e:f1:4d:72:11:de:99:36:74:f3:71:53: af:68:10:73:3d:cc:81:e9:ee:8f:51:92:17:78:96: 56:90:3a:c1:c5:ee:3c:74:07:d9:35:15:f4:17:fa: 91:1b:6b:71:5d:66:3a:8e:c6:91:a3:6f:16:ac:92: 14:56:10:5a:e2:9f:90:cd:0f:82:96:7b:f0:ab:92: 20:b0:d0:76:02:19:86:7b:1c:27:9c:f6:cf:ae:40: a7:13:ca:82:91:86:98:9d:17:83:d8:43:eb:a2:35: 12:96:51:6a:c6:23:5d:8e:16:dd:6b:f8:80:de:6e: 88:5b:9d:9a:ed:e6:dd:e5:39:9a:85:09:4d:9a:3a: 40:d8:fc:40:bc:c2:fb:d4:d1:13:28:91:8d:9c:52: 10:5e:09:e6:b2:cc:e7:e0:5c:61:ba:f4:cc:c3:19: 5f:98:f7:42:c0:c4:54:ae:0b:e5:ec:fb:f0:a2:7a: cc:d4:c0:92:26:52:0f:08:69:60:f1:21:ad:e1:da: f9:8e:4a:d0:84:ed:39:ab:16:7a:d9:78:e4:fb:21: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:D7:EB:84:E2:F1:45:3A:F6:47:35:A4:95:75:C4:C7:22:CB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:41:de:c4:43:a9:da:5f:07:c4:0c:c4:16:fe:02:3a:07:4e: e5:aa:6d:d0:7e:b9:bd:8b:a1:ee:89:9b:b5:e4:34:7d:01:22: 3e:ee:a3:53:01:ec:63:0a:60:fb:6f:42:49:41:a3:f7:28:0e: b7:01:15:bc:d6:57:1d:1a:17:9d:c8:c8:30:ec:a5:26:59:dc: 4c:92:98:8e:c2:bd:bd:85:a0:22:69:9d:ae:25:ce:42:5d:36: d8:38:75:59:49:e1:d0:63:dd:db:3d:19:42:69:ba:09:7e:59: 66:8a:c1:62:fa:34:65:1a:fd:de:a1:32:03:32:08:b5:c7:12: 57:e7:24:09:f6:9b:4b:4a:87:4f:65:d2:21:40:40:87:ba:88: 54:be:17:8c:43:12:20:ed:64:19:8c:ef:13:29:a1:72:54:33: f0:7b:4b:6b:d4:67:e1:bd:fe:e4:81:e0:35:18:e9:09:bf:99: 37:a0:54:7b:32:3b:41:fb:97:1a:b5:31:15:09:9d:b3:89:76: 33:49:88:c9:6a:dd:24:09:22:29:4d:5f:4e:d4:06:7d:56:d5: 46:64:f8:8f:20:0c:95:c7:e9:4f:d5:3e:8e:1a:cb:5f:62:26: 8a:48:a7:6f:38:4c:4f:f2:3e:49:4c:fd:a6:d5:a8:d5:4f:71: 91:1c:16:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDP4AmJ0UZTIFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTk3NmM2MTktNmQ0Yy00NWRjLWI0MjEtZWUwODE2M2UyZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnudHBwWGiLefHMKUjOt6xBw9R+2Ek0xa9iDt 6BPGtw2HZrhW+qKLz0cyd+ZQ8DWO8U1yEd6ZNnTzcVOvaBBzPcyB6e6PUZIXeJZW kDrBxe48dAfZNRX0F/qRG2txXWY6jsaRo28WrJIUVhBa4p+QzQ+Clnvwq5IgsNB2 AhmGexwnnPbPrkCnE8qCkYaYnReD2EProjUSllFqxiNdjhbda/iA3m6IW52a7ebd 5TmahQlNmjpA2PxAvML71NETKJGNnFIQXgnmsszn4FxhuvTMwxlfmPdCwMRUrgvl 7PvwonrM1MCSJlIPCGlg8SGt4dr5jkrQhO05qxZ62Xjk+yE2mwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFINl1+uE4vFFOvZHNaSVdcTHIsvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzk5MWIzZDQtMTAyYS0z ZTkyLTlhMjEtZDIyZWRhM2Q3MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl0HexEOp2l8HxAzEFv4COgdO5apt0H65vYuh7ombteQ0fQEiPu6j UwHsYwpg+29CSUGj9ygOtwEVvNZXHRoXncjIMOylJlncTJKYjsK9vYWgImmdriXO Ql022Dh1WUnh0GPd2z0ZQmm6CX5ZZorBYvo0ZRr93qEyAzIItccSV+ckCfabS0qH T2XSIUBAh7qIVL4XjEMSIO1kGYzvEymhclQz8HtLa9Rn4b3+5IHgNRjpCb+ZN6BU ezI7QfuXGrUxFQmds4l2M0mIyWrdJAkiKU1fTtQGfVbVRmT4jyAMlcfpT9U+jhrL X2ImikinbzhMT/I+SUz9ptWo1U9xkRwWOQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:23 2026 by rpki-client