This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa File: 849f8645-e463-3c64-a0a0-fb03b27e32a3.roa (raw, json) Hash identifier: kr/OQSJ2falzOGwb/WiUjbBXMIY6fNjeQ22ctWjibiU= Subject key identifier: DD:69:31:7F:D0:E6:0A:3F:9E:BB:CA:F4:3C:32:FD:45:E8:98:C6:7A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82FE24E31B26DDD79B800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2f:e2:4e:31:b2:6d:dd:79:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=277c09ae-2531-4e8c-9971-efcdc89fcdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:1f:4b:9e:a1:f0:81:42:df:47:ad:be:12: 09:f9:93:09:48:f5:1c:e2:db:fb:fa:4a:01:83:93: 73:40:57:82:66:2e:93:1a:bf:aa:cb:02:dd:79:7c: 8a:aa:17:54:cf:d9:62:54:c5:ad:66:26:16:f0:a1: 62:ea:dc:77:fc:a7:b3:b5:99:7a:29:4e:b3:46:5e: 0a:10:32:27:bd:4b:ea:75:5a:a7:cd:12:3a:3f:14: 20:c2:56:0c:f2:de:cc:3e:52:e3:0a:45:57:34:a7: 5f:40:41:b5:1d:72:f2:8b:89:b5:17:3c:8c:d4:bf: 5b:6b:b8:d8:be:2e:dc:30:18:b3:cc:01:51:77:2d: 54:2a:b9:01:62:4d:7a:20:8f:38:59:35:31:96:13: 07:33:27:b5:4b:fb:eb:f6:5b:b1:28:75:86:99:d5: 7c:fb:29:77:73:db:a9:2e:d6:5b:37:cc:29:11:1c: b1:8c:87:dd:2a:f0:b1:b3:f2:6a:8d:ba:7f:b5:0f: 60:a9:39:0d:6e:66:7e:aa:eb:83:68:22:cb:cf:e6: b5:14:2c:74:c5:6d:e4:a6:c2:f7:00:82:55:3d:cb: fe:d9:a6:82:7c:6b:20:bd:10:98:45:de:98:cd:3b: bf:90:3d:22:49:8f:2a:06:cc:71:a3:22:b1:f7:ac: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:69:31:7F:D0:E6:0A:3F:9E:BB:CA:F4:3C:32:FD:45:E8:98:C6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:80:e1:37:d3:96:5f:b7:cb:2a:24:cc:ad:44:30:b4:2f:2f: 4c:5d:15:61:ca:3f:10:e5:a6:f5:51:85:a1:da:0e:e7:b0:1f: 21:fc:41:8a:14:5b:f4:d3:72:8f:a1:d0:d2:83:e7:90:b6:58: 51:1d:60:df:c6:ff:db:bc:95:d6:95:39:c9:48:fa:09:33:65: c0:f7:4f:30:52:f8:da:ef:5f:20:2c:38:8d:17:21:6f:10:ec: 97:1f:2b:33:e8:a7:3d:f1:4c:a8:5e:26:cb:02:07:95:14:09: 2d:25:50:f3:ca:03:a9:5a:19:ef:69:93:64:53:0c:05:5b:e9: 79:e2:c7:e9:0a:b3:4b:16:19:0c:b4:29:9f:bf:e7:ee:db:37: c0:25:69:ad:6c:e8:e1:b4:8b:c6:26:f7:6d:6c:e6:93:e2:5f: c9:fd:34:a4:76:11:e0:5e:20:7a:ec:04:7b:24:4a:26:5a:75: a2:c3:02:de:db:df:94:af:ab:ea:bf:04:53:b6:26:2b:4b:3e: d1:96:da:5e:e5:ba:1b:49:37:14:4b:d3:c8:64:b6:6e:23:fb: 97:06:77:3a:ff:b3:04:49:14:5e:fa:f7:30:3f:41:fd:9b:68: 1e:8d:5f:90:15:49:5f:2b:93:61:e9:79:01:41:43:e4:2d:0a: bb:00:be:78 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqC/iTjGybd15uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mjc3YzA5YWUtMjUzMS00ZThjLTk5NzEtZWZjZGM4OWZjZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdofS56h8IFC30etvhIJ+ZMJSPUc4tv7+koB g5NzQFeCZi6TGr+qywLdeXyKqhdUz9liVMWtZiYW8KFi6tx3/KeztZl6KU6zRl4K EDInvUvqdVqnzRI6PxQgwlYM8t7MPlLjCkVXNKdfQEG1HXLyi4m1FzyM1L9ba7jY vi7cMBizzAFRdy1UKrkBYk16II84WTUxlhMHMye1S/vr9luxKHWGmdV8+yl3c9up LtZbN8wpERyxjIfdKvCxs/Jqjbp/tQ9gqTkNbmZ+quuDaCLLz+a1FCx0xW3kpsL3 AIJVPcv+2aaCfGsgvRCYRd6YzTu/kD0iSY8qBsxxoyKx96zQJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN1pMX/Q5go/nrvK9Dwy/UXomMZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQ5Zjg2NDUtZTQ2My0z YzY0LWEwYTAtZmIwM2IyN2UzMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeYDhN9OWX7fLKiTMrUQwtC8vTF0VYco/EOWm9VGFodoO57AfIfxB ihRb9NNyj6HQ0oPnkLZYUR1g38b/27yV1pU5yUj6CTNlwPdPMFL42u9fICw4jRch bxDslx8rM+inPfFMqF4mywIHlRQJLSVQ88oDqVoZ72mTZFMMBVvpeeLH6QqzSxYZ DLQpn7/n7ts3wCVprWzo4bSLxib3bWzmk+Jfyf00pHYR4F4geuwEeyRKJlp1osMC 3tvflK+r6r8EU7YmK0s+0ZbaXuW6G0k3FEvTyGS2biP7lwZ3Ov+zBEkUXvr3MD9B /ZtoHo1fkBVJXyuTYel5AUFD5C0KuwC+eA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:41 2026 by rpki-client