This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa File: 7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa (raw, json) Hash identifier: EP71j7Qva9eXTiafJyt536F868ct5aHCd0MY1U8TKKM= Subject key identifier: C6:D3:BB:5F:0B:C1:3C:B3:E1:7E:3D:B8:2D:A5:6D:FF:F9:2D:E2:6D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BDA2B2A1E9E40C4F7DB012180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2e8d:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:2a:1e:9e:40:c4:f7:db:01:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=98ddc08c-728b-45cf-9019-8233b29f08f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:08:67:e6:5d:92:67:0f:9d:9c:ec:e5:fd: 06:d0:9e:2a:2d:fd:4e:f0:51:c9:33:1d:70:72:47: bd:de:32:16:da:68:51:f7:69:44:17:ae:12:f1:6f: f9:5c:3b:fa:39:59:3a:fd:50:bb:8f:64:a2:e2:3f: 5e:55:b4:dc:cd:de:c7:58:9b:9d:26:2c:36:80:2e: 50:d0:9b:b8:4e:68:2a:c6:73:41:44:5b:01:b0:6f: 62:00:fe:17:82:77:7e:9a:40:43:51:5a:7a:ba:5a: ec:f4:ec:33:bb:94:37:ba:ac:c7:69:27:e7:9c:57: a7:92:3e:6c:f8:dc:7f:b5:28:f7:87:1f:15:2f:22: ce:b8:26:ad:c2:1a:c8:67:5b:fb:b9:dc:47:c2:31: b9:08:a3:4c:db:45:76:3d:6f:ec:21:7e:6a:92:7f: 65:cf:ea:08:c3:c2:f2:16:cb:62:71:49:3f:62:cc: 04:d4:99:97:2a:87:b1:ff:ec:22:4e:ea:9c:c4:10: b3:a9:1a:cf:be:fc:36:4f:77:86:0c:70:c6:3e:28: c3:c5:e1:cf:66:15:ad:4f:75:37:9e:77:cb:dc:52: 99:7c:e9:54:4a:eb:9d:25:f0:4f:7f:c4:6f:2e:19: 69:49:c8:59:4c:52:e2:8f:bd:02:5e:03:39:c3:ae: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:BB:5F:0B:C1:3C:B3:E1:7E:3D:B8:2D:A5:6D:FF:F9:2D:E2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:22:0c:b1:4d:93:7f:21:8f:40:27:34:b5:f8:77:a8:1a: b8:59:19:33:71:2d:f1:2e:35:aa:e6:04:1d:df:c2:e7:dc:b3: 76:a9:f5:00:c4:fb:8a:89:30:fc:68:18:53:90:66:9b:80:e7: 6c:85:ef:4a:dc:9a:3f:c0:4c:6c:64:73:5d:3f:c1:fe:0a:0d: f4:cb:4e:50:83:1f:d0:80:3d:38:1d:84:9b:d8:b5:66:97:11: 3d:b6:d5:5c:1b:2f:29:6c:45:56:22:26:68:2b:4e:b8:9d:6a: a9:b4:44:d1:c3:2a:0e:90:9b:f5:d3:5e:25:d1:0e:17:bc:7a: 1b:2b:38:e4:95:d9:de:4c:f7:26:2b:17:ea:a0:d8:01:31:61: 3a:64:4c:e4:1f:c5:3e:77:68:93:fc:9b:0d:1f:7f:44:28:8f: 4e:3e:3a:a7:81:4c:75:41:eb:3e:60:a2:83:9d:d7:48:e9:2d: c5:6d:9e:94:80:66:6f:f5:ba:72:b7:38:57:cb:31:bc:d8:d1: cb:39:22:a7:01:a1:54:f6:c9:fb:2d:fb:ef:18:b2:2f:4c:44: 1c:83:e0:0b:da:a4:e7:96:f5:72:98:24:68:ed:ad:ab:dd:5d: aa:95:bb:2e:9b:bb:96:f0:06:0f:be:8b:88:38:ee:7d:37:f7: 3d:1b:65:f3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvaKyoenkDE99sBIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk OThkZGMwOGMtNzI4Yi00NWNmLTkwMTktODIzM2IyOWYwOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQkIZ+ZdkmcPnZzs5f0G0J4qLf1O8FHJMx1w cke93jIW2mhR92lEF64S8W/5XDv6OVk6/VC7j2Si4j9eVbTczd7HWJudJiw2gC5Q 0Ju4TmgqxnNBRFsBsG9iAP4Xgnd+mkBDUVp6ulrs9Owzu5Q3uqzHaSfnnFenkj5s +Nx/tSj3hx8VLyLOuCatwhrIZ1v7udxHwjG5CKNM20V2PW/sIX5qkn9lz+oIw8Ly FsticUk/YswE1JmXKoex/+wiTuqcxBCzqRrPvvw2T3eGDHDGPijDxeHPZhWtT3U3 nnfL3FKZfOlUSuudJfBPf8RvLhlpSchZTFLij70CXgM5w66m/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMbTu18LwTyz4X49uC2lbf/5LeJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2M0ZjQ4YTQtZTk2MC0z Y2Y5LWFmZTMtMjM0NTQwYTRkYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujeAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXOQiDLFNk38hj0AnNLX4d6gauFkZM3Et8S41quYEHd/C59yzdqn1 AMT7iokw/GgYU5Bmm4DnbIXvStyaP8BMbGRzXT/B/goN9MtOUIMf0IA9OB2Em9i1 ZpcRPbbVXBsvKWxFViImaCtOuJ1qqbRE0cMqDpCb9dNeJdEOF7x6Gys45JXZ3kz3 JisX6qDYATFhOmRM5B/FPndok/ybDR9/RCiPTj46p4FMdUHrPmCig53XSOktxW2e lIBmb/W6crc4V8sxvNjRyzkipwGhVPbJ+y377xiyL0xEHIPgC9qk55b1cpgkaO2t q91dqpW7Lpu7lvAGD76LiDjufTf3PRtl8w== -----END CERTIFICATE-----Generated at Tue Nov 25 13:56:50 2025 by rpki-client