This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa File: 87ba9799-00ce-307b-99a3-aef0fd849c5c.roa (raw, json) Hash identifier: Jec2W+tg78znleU4N2sC7Qn3FMV6+YY/1BlDtjbRnAE= Subject key identifier: DA:04:47:B5:3B:B4:87:82:44:A6:4B:D0:E0:57:5E:F6:41:34:96:91 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBFCF15567B5CE2E379440 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e88:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:fc:f1:55:67:b5:ce:2e:37:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=4021320a-512a-4f65-980d-b84c7d6c2010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:02:bb:ee:00:a6:15:c4:12:76:e8:44:4a: 20:85:74:f2:2e:ae:b6:1c:a8:34:50:09:bb:35:a5: a2:c7:84:50:4b:ea:4f:9e:3a:08:d1:00:42:33:b5: b9:75:83:2a:f5:0d:db:e9:e1:d9:e7:06:04:0a:95: 27:ec:70:50:05:9c:72:5d:82:9b:b5:41:e6:68:d1: de:d5:19:f9:eb:ef:6f:e2:74:71:a6:a5:42:6e:c4: 26:27:65:9c:33:fb:64:0c:6b:ef:ee:78:7a:77:bd: a7:12:08:14:6d:4b:6f:66:69:04:86:b5:01:bc:ac: 67:22:5b:04:65:05:cf:8b:a0:f6:23:85:80:28:61: 64:d4:6a:d2:49:f3:2b:52:67:fa:5d:e4:f8:73:9b: f3:de:3a:e2:ea:f6:24:a9:cb:4f:80:61:91:e0:74: d2:33:9d:64:e3:09:ef:d5:ee:63:8a:b5:4c:64:f2: 50:f8:14:25:31:e6:de:ad:31:53:5c:ef:ff:c2:38: be:55:c3:7b:14:a5:f8:f8:1d:93:f8:7b:43:77:eb: 52:25:cb:c4:fe:18:ff:97:8d:0e:3c:b5:95:a5:d8: 72:74:19:b0:76:54:64:db:78:16:06:32:80:66:14: 76:43:da:44:e6:19:72:49:9b:bd:a0:80:07:60:68: 73:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:47:B5:3B:B4:87:82:44:A6:4B:D0:E0:57:5E:F6:41:34:96:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bf:d3:50:b9:b8:e0:d5:b3:dc:b1:85:d4:d1:7e:7e:3d:18: c6:a8:0c:e9:f8:5a:ed:6f:2b:07:8d:c4:d6:a0:7f:61:65:29: 9a:63:04:0a:96:7a:36:40:ac:a0:2e:4a:33:34:7a:58:ff:39: fd:19:17:7a:d2:23:5d:21:33:cb:b0:a9:70:db:1f:87:62:6b: d2:77:6d:5b:e9:c3:88:0f:d7:90:7a:60:fa:7d:dd:44:40:18: 59:e6:b8:69:73:82:22:c2:db:56:79:0f:21:ec:55:c6:88:98: 37:f9:ee:ee:90:d9:bc:31:7a:38:5e:15:af:c7:aa:88:fa:02: fc:18:10:09:47:f1:da:d7:d1:eb:5c:9a:fb:cd:db:2f:27:32: de:f6:b7:e9:2b:db:bc:0e:3d:2e:8a:d3:8b:3c:fd:2d:6a:33: 85:62:ae:e6:c3:1b:89:da:39:25:05:1b:8f:9c:dc:58:f5:e0: ce:10:49:af:5e:96:7a:11:15:29:44:35:2e:59:02:fe:7b:f9: 38:07:24:9c:ae:41:21:fd:c3:f8:24:c7:01:9e:75:d3:26:31: af:46:26:ff:21:d4:82:c8:1d:ee:03:5b:53:8a:4d:c9:f3:37: 9f:57:7b:27:4b:be:1b:07:6b:37:8b:d9:e6:04:f5:ce:ba:e7: 7e:37:92:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2/zxVWe1zi43lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NDAyMTMyMGEtNTEyYS00ZjY1LTk4MGQtYjg0YzdkNmMyMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcsCu+4AphXEEnboREoghXTyLq62HKg0UAm7 NaWix4RQS+pPnjoI0QBCM7W5dYMq9Q3b6eHZ5wYECpUn7HBQBZxyXYKbtUHmaNHe 1Rn56+9v4nRxpqVCbsQmJ2WcM/tkDGvv7nh6d72nEggUbUtvZmkEhrUBvKxnIlsE ZQXPi6D2I4WAKGFk1GrSSfMrUmf6XeT4c5vz3jri6vYkqctPgGGR4HTSM51k4wnv 1e5jirVMZPJQ+BQlMeberTFTXO//wji+VcN7FKX4+B2T+HtDd+tSJcvE/hj/l40O PLWVpdhydBmwdlRk23gWBjKAZhR2Q9pE5hlySZu9oIAHYGhzPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNoER7U7tIeCRKZL0OBXXvZBNJaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODdiYTk3OTktMDBjZS0z MDdiLTk5YTMtYWVmMGZkODQ5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACb/TULm44NWz3LGF1NF+fj0YxqgM6fha7W8rB43E1qB/YWUpmmME CpZ6NkCsoC5KMzR6WP85/RkXetIjXSEzy7CpcNsfh2Jr0ndtW+nDiA/XkHpg+n3d REAYWea4aXOCIsLbVnkPIexVxoiYN/nu7pDZvDF6OF4Vr8eqiPoC/BgQCUfx2tfR 61ya+83bLycy3va36SvbvA49LorTizz9LWozhWKu5sMbido5JQUbj5zcWPXgzhBJ r16WehEVKUQ1LlkC/nv5OAcknK5BIf3D+CTHAZ510yYxr0Ym/yHUgsgd7gNbU4pN yfM3n1d7J0u+GwdrN4vZ5gT1zrrnfjeScg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:17 2026 by rpki-client