This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d9fc6b5-5695-39ae-ae6a-fd57d6d68ed3.roa File: 7d9fc6b5-5695-39ae-ae6a-fd57d6d68ed3.roa (raw, json) Hash identifier: aZiX4diHFbcvxcnabmEEG5Z/FiJtd7KJ42R2eg4Baz4= Subject key identifier: DB:D7:06:66:8A:1F:04:14:A2:30:26:E1:19:C9:77:7A:1A:2C:92:DE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BC3830BC933B9DC9FDD239A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d9fc6b5-5695-39ae-ae6a-fd57d6d68ed3.roa Signing time: Wed 05 Nov 2025 23:14:22 +0000 ROA not before: Wed 05 Nov 2025 23:14:22 +0000 ROA not after: Tue 03 Feb 2026 23:14:22 +0000 asID: 19905 IP address blocks: 2604:2e8f:b800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:83:0b:c9:33:b9:dc:9f:dd:23:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 5 23:14:22 2025 GMT Not After : Feb 3 23:14:22 2026 GMT Subject: CN=3f97a0d7-0e24-447a-9638-818d03d62915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:7a:0a:09:e6:7c:c7:6f:3c:b4:15:51:71: c3:20:18:b4:38:6d:ed:cb:5d:2b:86:46:f4:f3:0f: 8d:0b:d8:b1:4e:1d:2f:8b:57:13:40:c0:5a:76:6d: 24:d7:61:40:9c:76:df:b4:72:79:f3:17:5f:1f:a5: e5:28:9c:57:e1:c5:6d:a2:e1:27:ac:d4:7a:94:33: 45:e7:dc:e6:5f:94:37:9a:f7:d3:fb:65:8c:af:8d: 65:27:14:e1:11:c4:0f:92:02:9e:c0:8f:c7:6a:7b: 1d:b9:77:20:23:08:3a:a1:3f:ad:86:15:30:84:ff: 8e:48:44:3f:e3:67:5f:a6:e3:04:a9:0c:f5:ad:b4: d5:75:db:ec:1b:5f:5b:1b:e4:a0:71:7f:1c:40:33: 47:b9:a9:04:b0:4f:79:d0:f5:e1:b4:99:7a:dd:1f: 36:cc:8d:75:8b:4c:02:37:63:04:85:60:42:7e:25: 91:a3:14:b3:7a:da:5f:09:67:42:9d:c3:75:b2:ac: aa:01:93:29:29:59:be:54:41:d8:31:32:9d:de:be: 9c:b1:3b:c2:b4:e0:4a:26:fd:da:af:12:84:f8:1c: 4c:7a:0e:98:ba:6f:c1:4d:82:d0:f2:a5:97:d8:48: d4:47:6a:56:85:0e:3a:c8:01:7d:5e:f2:ac:3a:d7: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D7:06:66:8A:1F:04:14:A2:30:26:E1:19:C9:77:7A:1A:2C:92:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d9fc6b5-5695-39ae-ae6a-fd57d6d68ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:b800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a1:15:9d:8b:8e:8b:69:fb:cf:de:b7:a5:5d:2f:1d:c7:38: 80:ad:94:bd:e9:eb:a9:47:f8:53:9e:80:10:2b:b8:8a:55:12: 92:ed:b2:62:f5:5f:fd:75:76:fe:5a:ab:6a:0d:d2:b1:22:c1: c2:ec:3f:5f:cf:c3:c9:4a:49:74:67:7a:b3:9e:6b:e2:50:28: 60:d1:d1:36:d6:ed:dd:6d:92:e0:a5:6b:86:c7:7c:32:9c:3d: 49:24:94:59:e4:51:5d:7e:d4:b3:f1:59:56:b8:75:13:e7:f1: 31:42:bf:d1:c4:da:36:bb:e9:fb:a2:0e:fa:97:85:7b:a6:00: dd:52:cb:12:9d:c8:35:b2:74:00:c3:d1:2d:be:9f:12:5c:0c: 4a:31:4c:41:c8:fb:29:f7:ce:1f:f5:40:bf:1f:cf:ab:2b:fc: e5:b1:ed:1b:a4:1e:4e:3b:e3:fd:8a:08:ed:74:b8:9f:41:f2: 9a:06:eb:da:67:b1:08:e8:0c:df:7f:48:7b:46:79:70:c5:1d: 53:ec:7e:0e:22:67:43:9b:28:0c:ef:4e:c5:1a:7e:85:b4:1d: 0a:38:62:e7:78:0c:c7:a6:d4:35:ef:95:34:9b:f3:e1:ce:ba: 0b:ce:e6:de:c8:b7:3f:ec:2f:c1:b1:71:9b:65:b5:4f:76:eb: 24:ca:c2:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvDgwvJM7ncn90jmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwNTIzMTQyMloXDTI2MDIwMzIzMTQyMlowLzEtMCsGA1UEAxMk M2Y5N2EwZDctMGUyNC00NDdhLTk2MzgtODE4ZDAzZDYyOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTB6CgnmfMdvPLQVUXHDIBi0OG3ty10rhkb0 8w+NC9ixTh0vi1cTQMBadm0k12FAnHbftHJ58xdfH6XlKJxX4cVtouEnrNR6lDNF 59zmX5Q3mvfT+2WMr41lJxThEcQPkgKewI/HansduXcgIwg6oT+thhUwhP+OSEQ/ 42dfpuMEqQz1rbTVddvsG19bG+SgcX8cQDNHuakEsE950PXhtJl63R82zI11i0wC N2MEhWBCfiWRoxSzetpfCWdCncN1sqyqAZMpKVm+VEHYMTKd3r6csTvCtOBKJv3a rxKE+BxMeg6Yum/BTYLQ8qWX2EjUR2pWhQ46yAF9XvKsOteIUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNvXBmaKHwQUojAm4RnJd3oaLJLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2Q5ZmM2YjUtNTY5NS0z OWFlLWFlNmEtZmQ1N2Q2ZDY4ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj7gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEaEVnYuOi2n7z963pV0vHcc4gK2UvenrqUf4U56AECu4ilUSku2y YvVf/XV2/lqrag3SsSLBwuw/X8/DyUpJdGd6s55r4lAoYNHRNtbt3W2S4KVrhsd8 Mpw9SSSUWeRRXX7Us/FZVrh1E+fxMUK/0cTaNrvp+6IO+peFe6YA3VLLEp3INbJ0 AMPRLb6fElwMSjFMQcj7KffOH/VAvx/Pqyv85bHtG6QeTjvj/YoI7XS4n0Hymgbr 2mexCOgM339Ie0Z5cMUdU+x+DiJnQ5soDO9OxRp+hbQdCjhi53gMx6bUNe+VNJvz 4c66C87m3si3P+wvwbFxm2W1T3brJMrCvA== -----END CERTIFICATE-----Generated at Tue Nov 25 17:02:13 2025 by rpki-client