This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a5bdd7e-12a4-37c2-9327-a09661c33e8c.roa File: 8a5bdd7e-12a4-37c2-9327-a09661c33e8c.roa (raw, json) Hash identifier: iGXx/QjI1Uy7yb6hx1f2/c4kBSbETLEkLZpdPJyDmik= Subject key identifier: 1F:C0:06:CA:19:A5:D8:EA:48:0C:B1:7B:90:2A:C4:97:85:19:67:00 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C5A9679A398AAA4B2F15F8300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a5bdd7e-12a4-37c2-9327-a09661c33e8c.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8b:5800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:79:a3:98:aa:a4:b2:f1:5f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=b339f511-7cf4-4a33-8ef3-be0905fc0ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:4c:70:82:65:63:4a:36:74:56:0b:09:bc: 71:0b:ef:ee:61:a7:02:42:f9:55:3f:be:4a:fa:c8: 88:58:d1:d6:8a:fd:8f:bf:13:52:0b:3d:8d:5f:f3: 59:04:7e:78:d6:0a:20:7b:c3:c0:ca:d4:0f:c7:10: 34:c0:df:3b:9d:9a:c1:65:9d:d5:60:4e:d6:3f:5b: cc:db:bc:2e:34:59:8d:6c:73:84:e7:ba:ab:bc:5c: 6f:b7:41:25:11:14:3a:89:c9:0a:e6:17:09:81:be: 53:33:fa:bd:84:fb:cd:64:44:7b:5c:0c:a5:82:08: 7b:90:cb:bc:9d:f7:06:4a:2b:84:38:23:70:26:41: 19:f2:19:29:15:32:3f:27:98:43:cf:3d:57:a9:93: 51:da:49:1e:7c:c7:b6:b0:52:08:32:88:38:a6:c7: 56:b1:4d:0f:6b:9c:d8:1e:ed:51:3f:e5:5b:c8:71: df:f1:20:7c:98:4c:74:ba:89:33:f8:b0:a5:43:7a: 4e:dc:d7:71:5b:63:96:7b:8a:a8:93:ec:20:78:ba: 54:6b:20:18:f4:f1:6f:7d:b0:4b:e4:90:e3:72:0c: 84:9c:9c:d8:6b:fd:5d:3c:78:01:4d:ac:a8:03:7c: 7e:47:ef:c5:f1:95:87:09:af:f6:df:e4:21:b9:c1: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:06:CA:19:A5:D8:EA:48:0C:B1:7B:90:2A:C4:97:85:19:67:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a5bdd7e-12a4-37c2-9327-a09661c33e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:5800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:19:18:7f:c1:dd:d2:90:61:39:6a:e8:83:3a:fe:fb:b8: e9:50:17:c0:03:a1:08:81:d0:7d:ac:59:cb:80:e8:5b:e3:b5: 68:5e:f7:94:44:e7:06:47:0c:14:89:92:e5:a7:39:33:66:b1: 39:46:52:43:9d:9f:87:c8:ed:df:09:a8:85:d0:6a:5d:1e:e3: 05:fe:69:b6:ed:c8:3d:d2:a5:88:a4:f5:d0:14:8e:47:4d:ea: 88:2f:6f:d7:dd:64:90:7d:03:97:f9:00:44:e5:84:8a:a1:4d: e1:1b:8f:d2:eb:57:f4:d7:7e:da:1e:cf:d1:bc:82:7d:d1:01: af:4a:58:d7:2e:f2:07:ca:29:ff:83:71:6b:b3:4e:05:7d:1b: 4d:95:29:33:ae:f6:67:9a:b1:b3:f9:02:6b:59:70:bd:0b:40: b8:12:fe:2a:65:24:59:64:94:c6:b7:d3:6e:ab:98:5f:86:56: 39:a8:84:be:7c:90:0d:b0:22:56:83:fb:c1:9d:35:df:5a:21: ae:32:e2:a5:03:b9:e6:9e:cb:11:da:a3:da:b0:6d:b8:c3:6b: ba:c0:53:a6:88:fc:ed:00:11:64:9a:f3:d9:81:33:cb:70:16: 85:82:6c:30:a3:a5:7a:18:c9:1a:8c:cd:4e:ad:fc:b0:f0:fe: de:26:ad:9e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExalnmjmKqksvFfgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk YjMzOWY1MTEtN2NmNC00YTMzLThlZjMtYmUwOTA1ZmMwZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLZMcIJlY0o2dFYLCbxxC+/uYacCQvlVP75K +siIWNHWiv2PvxNSCz2NX/NZBH541goge8PAytQPxxA0wN87nZrBZZ3VYE7WP1vM 27wuNFmNbHOE57qrvFxvt0ElERQ6ickK5hcJgb5TM/q9hPvNZER7XAylggh7kMu8 nfcGSiuEOCNwJkEZ8hkpFTI/J5hDzz1XqZNR2kkefMe2sFIIMog4psdWsU0Pa5zY Hu1RP+VbyHHf8SB8mEx0uokz+LClQ3pO3NdxW2OWe4qok+wgeLpUayAY9PFvfbBL 5JDjcgyEnJzYa/1dPHgBTayoA3x+R+/F8ZWHCa/23+QhucG1hQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB/ABsoZpdjqSAyxe5AqxJeFGWcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGE1YmRkN2UtMTJhNC0z N2MyLTkzMjctYTA5NjYxYzMzZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui1gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUIIZGH/B3dKQYTlq6IM6/vu46VAXwAOhCIHQfaxZy4DoW+O1aF73 lETnBkcMFImS5ac5M2axOUZSQ52fh8jt3wmohdBqXR7jBf5ptu3IPdKliKT10BSO R03qiC9v191kkH0Dl/kAROWEiqFN4RuP0utX9Nd+2h7P0byCfdEBr0pY1y7yB8op /4Nxa7NOBX0bTZUpM672Z5qxs/kCa1lwvQtAuBL+KmUkWWSUxrfTbquYX4ZWOaiE vnyQDbAiVoP7wZ0131ohrjLipQO55p7LEdqj2rBtuMNrusBTpoj87QARZJrz2YEz y3AWhYJsMKOlehjJGozNTq38sPD+3iatng== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:40 2026 by rpki-client