This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cf23138-5a2e-3991-a0ae-8d09966773d8.roa File: 7cf23138-5a2e-3991-a0ae-8d09966773d8.roa (raw, json) Hash identifier: QCohW+wwkqZiaPZbgEZrd4NVfP1R0ZMINzGmsUYnnO4= Subject key identifier: 69:0D:29:F6:73:AE:C9:62:5B:CC:7E:B3:89:2E:FD:AA:6B:17:0C:E5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC1691DEEE54E482B89200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cf23138-5a2e-3991-a0ae-8d09966773d8.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e89:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:16:91:de:ee:54:e4:82:b8:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=a3931523-3ca5-4745-8b8a-ce8d210ddc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:3c:cc:c7:59:c3:d7:fe:77:63:2e:ca:75: 10:dd:b7:bf:10:1a:30:f8:04:04:aa:69:69:38:4d: 49:91:62:41:cf:cb:f7:10:18:5a:d3:b8:b4:84:b1: 9b:ec:41:a8:eb:29:f8:4e:05:d9:bd:80:28:ba:7c: 88:bd:bc:24:09:36:24:f0:6a:a1:1c:3b:82:86:85: 26:68:56:58:af:c7:b9:54:f4:87:28:69:c3:c5:6a: 0a:e4:6d:53:60:5d:fe:42:1c:4e:7a:31:c2:ef:df: 1d:86:8a:d6:bf:00:ae:dc:69:be:d7:3a:b9:11:f9: e7:71:a7:f7:84:b7:ff:94:ad:74:b1:c1:2a:28:e7: 96:cf:a7:4b:0e:d9:71:19:4b:1a:9f:b6:33:f4:a6: ad:d6:0c:d5:54:80:fd:ab:31:9a:5e:56:20:41:1d: 4b:fe:4a:5e:c7:d2:8b:d6:f7:6d:f4:ed:d8:02:ea: 7c:c3:d3:f0:36:cb:7b:23:2d:51:2b:89:61:15:83: 62:ae:9a:10:81:aa:41:d6:4c:04:3c:24:93:d8:52: e1:0a:3f:28:50:fc:28:fb:04:d5:da:ac:f5:27:68: c6:7e:b4:78:c4:fd:28:87:9c:3b:43:ce:4a:8d:85: 56:2e:f4:de:b9:23:32:46:ab:25:88:7a:f5:89:16: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0D:29:F6:73:AE:C9:62:5B:CC:7E:B3:89:2E:FD:AA:6B:17:0C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cf23138-5a2e-3991-a0ae-8d09966773d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d8:51:1b:6e:ea:4b:7e:f0:4a:c3:c4:f6:3c:2d:ac:8f:9f: 00:2c:9a:0f:82:c7:f8:22:86:f4:99:48:e9:d1:1a:d2:b6:1a: 7d:a7:70:6a:24:17:1f:c7:4f:32:dc:1f:a8:cb:64:72:e6:b1: 27:e8:c5:5b:2f:a4:8d:20:93:0b:dd:eb:76:60:2a:98:65:31: ce:e1:66:a9:94:e9:e3:91:e7:44:19:b2:a8:11:9c:fc:89:db: 25:46:42:c9:6f:74:87:d5:a6:73:27:59:7a:bc:f2:d6:16:8b: 44:6d:26:23:0e:9b:c1:a1:12:f1:81:ab:cf:ee:33:91:b5:70: 1f:39:4e:e0:0c:cd:2b:24:97:4a:9c:4f:1e:be:d1:d0:0c:38: 01:7a:99:70:ae:f4:3c:95:ef:d0:b7:77:8f:dd:65:8c:27:9f: f3:58:1e:8e:24:80:3d:02:c2:4c:ca:34:4d:f3:dc:a4:2a:87: 09:95:61:12:d4:3a:b2:18:73:b7:80:39:2b:8a:8b:9e:a4:2c: f6:ec:12:30:e7:e2:8c:55:bc:4a:1e:15:83:d9:4e:1e:ad:e1: ed:ec:ad:bf:15:13:6a:92:9d:87:9a:61:b5:94:d1:47:18:05: f8:92:42:33:ff:b1:bc:ec:6d:4a:9c:58:e7:3f:a8:0b:9e:33: a2:f4:c2:19 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BaR3u5U5IK4kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YTM5MzE1MjMtM2NhNS00NzQ1LThiOGEtY2U4ZDIxMGRkYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYA8zMdZw9f+d2MuynUQ3be/EBow+AQEqmlp OE1JkWJBz8v3EBha07i0hLGb7EGo6yn4TgXZvYAounyIvbwkCTYk8GqhHDuChoUm aFZYr8e5VPSHKGnDxWoK5G1TYF3+QhxOejHC798dhorWvwCu3Gm+1zq5Efnncaf3 hLf/lK10scEqKOeWz6dLDtlxGUsan7Yz9Kat1gzVVID9qzGaXlYgQR1L/kpex9KL 1vdt9O3YAup8w9PwNst7Iy1RK4lhFYNirpoQgapB1kwEPCST2FLhCj8oUPwo+wTV 2qz1J2jGfrR4xP0oh5w7Q85KjYVWLvTeuSMyRqsliHr1iRaXEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGkNKfZzrsliW8x+s4ku/aprFwzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2NmMjMxMzgtNWEyZS0z OTkxLWEwYWUtOGQwOTk2Njc3M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP9hRG27qS37wSsPE9jwtrI+fACyaD4LH+CKG9JlI6dEa0rYafadw aiQXH8dPMtwfqMtkcuaxJ+jFWy+kjSCTC93rdmAqmGUxzuFmqZTp45HnRBmyqBGc /InbJUZCyW90h9WmcydZerzy1haLRG0mIw6bwaES8YGrz+4zkbVwHzlO4AzNKySX SpxPHr7R0Aw4AXqZcK70PJXv0Ld3j91ljCef81gejiSAPQLCTMo0TfPcpCqHCZVh EtQ6shhzt4A5K4qLnqQs9uwSMOfijFW8Sh4Vg9lOHq3h7eytvxUTapKdh5phtZTR RxgF+JJCM/+xvOxtSpxY5z+oC54zovTCGQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:56 2026 by rpki-client