This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa File: 86e2062f-04a5-3fdb-83ac-1e849962be54.roa (raw, json) Hash identifier: k94PCb3Bzkk97PpAHZKQRbEfk1OQtXcZvxgQgnL1HZg= Subject key identifier: D3:CD:E7:FF:67:C9:32:42:FE:9F:3D:98:DB:6E:9F:6B:B6:E5:C5:B3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C6192A4E190E2E0620F383700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 30036 IP address blocks: 2604:2e8d:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:92:a4:e1:90:e2:e0:62:0f:38:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=cb9f6dec-42ad-403f-b8cb-e810570bed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:bd:74:57:cf:c1:18:61:3b:13:1d:f6:9c: 54:3b:80:99:1b:33:1e:38:64:b0:95:8a:bb:35:68: 87:14:09:64:7c:57:b2:78:f8:87:02:23:82:a0:55: cb:f6:2f:6a:be:15:46:f4:69:c5:19:7e:c5:2a:f0: 1c:6b:15:de:ba:7e:e2:93:6f:69:19:c2:5e:35:b2: 8b:70:40:f9:09:db:28:e6:11:17:ef:e1:06:16:1c: 3a:dd:1f:91:a0:f4:c7:7c:e0:11:90:26:36:ee:da: 85:70:7a:f3:05:0c:f7:4b:aa:e7:68:3a:59:ea:86: 4b:3e:ee:53:d1:af:e8:c0:f1:2c:66:6b:82:27:0c: dd:c7:ba:03:c6:37:e2:72:5e:b2:b9:d9:82:45:a0: 3a:27:9d:4b:74:50:1c:b8:28:19:c0:40:f6:ec:7a: 5a:13:94:2f:26:0b:c2:17:ca:89:fc:d7:32:e5:9b: 15:00:2a:57:cf:69:f9:b6:a7:b9:37:99:fa:9f:9d: 8b:b7:97:23:e7:60:ee:3e:b3:48:11:a3:eb:4e:a2: 95:07:32:a8:27:d7:80:bb:7f:90:ed:a1:c0:29:f5: ec:ee:d0:e7:05:71:12:29:61:88:16:72:10:6d:41: 38:2e:f2:2c:55:10:6b:df:15:56:37:7e:3f:6b:14: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:E7:FF:67:C9:32:42:FE:9F:3D:98:DB:6E:9F:6B:B6:E5:C5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:25:91:e1:93:0f:b3:b0:76:f8:05:55:8b:b5:76:6c:6f:34: a6:1d:94:6f:d2:13:10:d5:49:a8:f8:55:c1:6d:bf:53:c0:5a: 08:c5:87:79:30:0d:55:4c:e9:43:a1:b8:2d:27:2c:6b:45:f9: e9:7e:54:d7:55:86:52:43:90:29:72:3c:cf:02:20:a4:4f:ec: 9d:6f:78:a8:7b:ce:44:5e:7a:57:b1:16:a3:c1:f8:cd:6e:e1: 8f:41:f8:fe:61:0e:50:5f:1f:4b:39:1d:2f:88:ab:95:09:ee: 60:76:b0:d1:83:c3:fc:0c:19:42:04:dc:8e:33:ee:d8:3d:02: 83:70:8f:99:b2:0d:11:e3:6c:d6:01:f8:29:c9:5f:b0:e1:2b: 6a:c2:66:f3:8a:ba:ee:70:25:30:2e:56:4a:e9:5f:94:41:15: 21:f8:44:48:cb:9e:9b:04:40:83:d6:9b:f5:50:9e:a6:bc:e2: 8b:3c:66:df:9b:bd:9a:67:88:62:28:91:16:aa:ee:40:37:87: 3b:8b:01:8e:de:bd:a6:00:ea:53:1d:48:eb:8f:0e:3e:98:87: 9c:76:7a:51:96:1b:4c:e3:0a:a1:c8:91:63:6d:30:66:b8:0a: 8c:b4:1a:1c:ab:bf:7e:58:9a:76:a0:8c:c3:ae:ef:73:60:9a: 76:6b:87:3e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExhkqThkOLgYg84NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk Y2I5ZjZkZWMtNDJhZC00MDNmLWI4Y2ItZTgxMDU3MGJlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTG9dFfPwRhhOxMd9pxUO4CZGzMeOGSwlYq7 NWiHFAlkfFeyePiHAiOCoFXL9i9qvhVG9GnFGX7FKvAcaxXeun7ik29pGcJeNbKL cED5Cdso5hEX7+EGFhw63R+RoPTHfOARkCY27tqFcHrzBQz3S6rnaDpZ6oZLPu5T 0a/owPEsZmuCJwzdx7oDxjficl6yudmCRaA6J51LdFAcuCgZwED27HpaE5QvJgvC F8qJ/Ncy5ZsVACpXz2n5tqe5N5n6n52Lt5cj52DuPrNIEaPrTqKVBzKoJ9eAu3+Q 7aHAKfXs7tDnBXESKWGIFnIQbUE4LvIsVRBr3xVWN34/axS2zQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNPN5/9nyTJC/p89mNtun2u25cWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODZlMjA2MmYtMDRhNS0z ZmRiLTgzYWMtMWU4NDk5NjJiZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujdAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeyWR4ZMPs7B2+AVVi7V2bG80ph2Ub9ITENVJqPhVwW2/U8BaCMWH eTANVUzpQ6G4LScsa0X56X5U11WGUkOQKXI8zwIgpE/snW94qHvORF56V7EWo8H4 zW7hj0H4/mEOUF8fSzkdL4irlQnuYHaw0YPD/AwZQgTcjjPu2D0Cg3CPmbINEeNs 1gH4KclfsOErasJm84q67nAlMC5WSulflEEVIfhESMuemwRAg9ab9VCeprziizxm 35u9mmeIYiiRFqruQDeHO4sBjt69pgDqUx1I648OPpiHnHZ6UZYbTOMKociRY20w ZrgKjLQaHKu/fliadqCMw67vc2CadmuHPg== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:30 2026 by rpki-client