This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa File: 8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa (raw, json) Hash identifier: DixEbikNigvl6bJxO5tbsAkpUVaIcFWSXOye2dYXNCk= Subject key identifier: 2F:35:FD:B7:22:BA:31:16:2E:B5:DB:48:E5:2A:49:65:55:47:20:5F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BCC35BA650093D8221972B840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e87:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:ba:65:00:93:d8:22:19:72:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=31ea5cdb-446c-4348-9870-e2cddaa79fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:7e:cf:00:f5:fd:7e:50:a2:7b:f4:5f:f1: 26:31:f3:ee:5d:f1:1d:89:d3:9c:bf:d5:88:a4:a9: 79:ba:6f:11:0a:1f:c7:d9:de:a6:31:6b:a5:fa:a9: c6:a1:74:46:3b:d5:c0:0e:e1:fb:32:76:0f:98:01: 3d:b1:52:ac:25:ed:52:95:ed:53:ae:ac:06:3d:eb: db:f5:96:d0:cb:f6:b7:4e:3e:c8:6e:9f:a8:94:28: ff:ce:42:f0:c2:15:f0:6d:80:74:04:e2:fc:94:a0: 60:f0:f8:a3:28:36:f8:20:f2:1e:9a:d8:60:81:f6: bb:86:b8:83:f2:e9:6f:ba:80:d4:7f:34:91:c6:d4: d9:53:40:5c:61:f2:e0:c2:e2:ed:f9:88:51:62:f7: 30:e7:b9:75:de:69:00:d1:a7:ce:4a:7c:09:d0:5a: 32:5c:92:47:c6:b3:c2:c6:07:a3:27:b4:87:2a:2d: 5a:08:6a:2c:3d:d2:91:90:e7:47:5c:81:8b:64:eb: 9d:76:4a:5b:dd:32:c2:08:28:e6:63:ca:69:16:e9: 38:90:46:fb:ad:1f:c0:12:47:b1:9b:5e:0a:42:ad: 4e:d0:6d:e9:c9:b3:13:1d:0d:96:33:65:5a:6b:53: 4a:9c:81:ce:d7:c8:3a:e8:d4:9e:aa:57:39:dd:fe: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:FD:B7:22:BA:31:16:2E:B5:DB:48:E5:2A:49:65:55:47:20:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ac:70:f3:9f:9d:10:d9:33:86:df:fa:36:07:25:db:03:a4: 82:0e:fc:d9:9c:1e:a4:7e:33:4c:bd:6f:49:a7:b8:6f:68:e4: 20:fd:ab:23:ff:38:a1:57:51:da:6e:42:12:41:6d:32:d8:da: 2d:c6:b7:45:a5:27:64:f4:9d:53:8a:6c:d5:90:db:5c:91:dd: 5a:ce:69:17:0f:0e:b8:55:45:85:55:c8:e8:55:e8:0e:8f:be: d7:fa:fd:fa:79:da:63:1b:54:79:5b:32:d6:10:92:91:fb:33: 18:b1:60:5a:59:bc:1c:6a:42:ec:8a:a0:c3:20:aa:21:aa:31: f6:dd:bb:dd:99:b4:c6:4f:42:da:1b:8c:49:6a:86:e0:0c:0f: 6f:45:24:7a:ea:bd:56:58:19:1f:18:c9:a5:9f:90:e3:8d:85: 64:9c:64:50:98:94:91:ca:92:cf:e2:b2:de:ab:b0:59:b3:4f: 49:65:f0:6e:08:98:13:1d:e6:f7:47:18:41:ad:17:b4:5f:7e: 3e:61:f1:db:a0:eb:36:ee:b3:d6:ea:00:69:7b:36:63:d1:3d: 49:54:16:79:5b:07:51:6b:52:10:a7:d0:3a:a4:de:d6:d4:38: 72:02:5c:a3:e2:33:28:96:93:d0:58:0c:90:bf:44:b3:c6:05: 1d:8e:02:cb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvMNbplAJPYIhlyuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk MzFlYTVjZGItNDQ2Yy00MzQ4LTk4NzAtZTJjZGRhYTc5ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kp+zwD1/X5Qonv0X/EmMfPuXfEdidOcv9WI pKl5um8RCh/H2d6mMWul+qnGoXRGO9XADuH7MnYPmAE9sVKsJe1Sle1TrqwGPevb 9ZbQy/a3Tj7Ibp+olCj/zkLwwhXwbYB0BOL8lKBg8PijKDb4IPIemthggfa7hriD 8ulvuoDUfzSRxtTZU0BcYfLgwuLt+YhRYvcw57l13mkA0afOSnwJ0FoyXJJHxrPC xgejJ7SHKi1aCGosPdKRkOdHXIGLZOuddkpb3TLCCCjmY8ppFuk4kEb7rR/AEkex m14KQq1O0G3pybMTHQ2WM2Vaa1NKnIHO18g66NSeqlc53f4NDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC81/bciujEWLrXbSOUqSWVVRyBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODUyMGZjMTgtYWI5OC0z YjMyLWE3ZmQtYzRiYjVmZWRmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIaxw85+dENkzht/6Ngcl2wOkgg782ZwepH4zTL1vSae4b2jkIP2r I/84oVdR2m5CEkFtMtjaLca3RaUnZPSdU4ps1ZDbXJHdWs5pFw8OuFVFhVXI6FXo Do++1/r9+nnaYxtUeVsy1hCSkfszGLFgWlm8HGpC7IqgwyCqIaox9t273Zm0xk9C 2huMSWqG4AwPb0Ukeuq9VlgZHxjJpZ+Q442FZJxkUJiUkcqSz+Ky3quwWbNPSWXw bgiYEx3m90cYQa0XtF9+PmHx26DrNu6z1uoAaXs2Y9E9SVQWeVsHUWtSEKfQOqTe 1tQ4cgJco+IzKJaT0FgMkL9Es8YFHY4Cyw== -----END CERTIFICATE-----Generated at Tue Nov 25 13:56:59 2025 by rpki-client