This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f957f13-92b0-3ac9-97dd-ca7c475736a3.roa File: 8f957f13-92b0-3ac9-97dd-ca7c475736a3.roa (raw, json) Hash identifier: pG4pngmTk6Zjsa4eZ4Ea4pRv0Iv6VdAAjYdIGsI3nOQ= Subject key identifier: 69:A5:4D:A5:5B:E2:16:45:4E:24:80:38:AF:13:4A:9E:1A:A2:85:60 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C602BD45F370F7FA695D35980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f957f13-92b0-3ac9-97dd-ca7c475736a3.roa Signing time: Thu 01 Jan 2026 02:00:31 +0000 ROA not before: Thu 01 Jan 2026 02:00:31 +0000 ROA not after: Wed 01 Apr 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2e87:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:60:2b:d4:5f:37:0f:7f:a6:95:d3:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 1 02:00:31 2026 GMT Not After : Apr 1 01:00:31 2026 GMT Subject: CN=0ec878f7-c8b3-4675-a4a3-09412522d358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:70:3b:8f:07:28:25:ee:66:db:c8:5e:78: da:50:45:6b:33:15:e7:63:54:c1:09:95:e3:53:f8: 70:da:69:20:68:e2:dd:3d:75:9e:c5:21:9a:d8:1d: f1:e2:e5:63:b6:63:27:bf:7c:a0:52:de:63:81:b6: 91:f0:51:c6:b6:a0:ec:d1:4b:3e:e3:5c:34:4e:7f: bc:fc:06:2f:bd:a9:a6:0e:f0:8b:da:e0:0c:3b:11: c6:10:20:17:ee:57:fd:c5:8c:a4:28:8c:d5:f0:06: 7e:f7:ab:db:f3:12:5d:c4:0d:c6:e2:d3:7d:c3:8b: 66:58:78:8a:37:fd:31:9c:58:0e:64:ca:f3:a9:2d: a9:3b:33:84:6b:8e:db:04:bd:07:4a:08:ca:9b:c4: 68:08:eb:15:76:e9:8f:d0:08:af:2f:ec:52:7d:a8: 5e:a0:97:b0:01:6e:c3:f5:97:4b:50:27:32:bf:c0: 98:ec:c1:81:ae:a9:48:b0:bd:d0:e4:f3:4e:61:7f: 43:69:2b:a7:59:7f:39:d1:d5:93:2b:c1:82:06:61: 7a:b2:24:b6:c6:e0:96:dc:ca:23:9b:95:cd:b7:22: 69:77:22:a0:ab:63:40:23:aa:8d:cf:53:84:1b:af: b6:3c:cc:2f:c0:4c:91:5f:fe:7a:f8:80:2f:0f:b2: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:4D:A5:5B:E2:16:45:4E:24:80:38:AF:13:4A:9E:1A:A2:85:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f957f13-92b0-3ac9-97dd-ca7c475736a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:7800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1f:a6:10:1d:f2:79:22:2e:5e:05:54:f1:db:7f:85:2d:3b: d3:85:b3:a8:c9:0e:5a:9b:3c:84:e1:a7:96:2c:19:7a:e4:a4: 3b:13:e0:7d:09:d0:5d:51:b6:5f:85:3b:48:be:79:06:05:7e: e1:95:4c:3a:ff:2d:86:87:23:79:82:cd:94:4a:3d:43:b6:53: 67:13:93:5f:66:16:aa:32:11:b5:b3:f9:4a:82:af:6c:c7:50: 88:4a:d4:49:27:2c:84:f6:5e:87:5c:d9:8b:3e:38:11:90:63: 9c:2f:0c:bb:61:c4:f8:d9:a0:5a:86:6e:eb:49:34:5b:77:68: 32:8b:1e:bb:95:c1:c4:32:e7:cf:c9:0a:af:33:c8:a1:b0:f7: de:c4:5a:03:6c:ab:18:fe:69:0b:28:e7:82:2a:91:4c:54:33: 16:b5:b2:25:70:cf:6b:e1:06:7a:dc:7e:3e:f6:31:ed:7b:27: 1c:5f:a4:9c:28:6f:59:39:19:f0:0b:61:31:3a:53:d7:65:14: 9a:13:92:de:76:10:ff:8c:b5:b3:3a:da:d9:5f:11:96:78:dd: 41:40:92:5b:2b:b9:14:69:87:a4:6d:d6:5c:04:32:e3:a6:55: 42:5b:ff:28:32:d8:d3:50:c6:37:cc:e2:90:d0:73:d9:d6:f6: 8d:03:9f:0b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExgK9RfNw9/ppXTWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk MGVjODc4ZjctYzhiMy00Njc1LWE0YTMtMDk0MTI1MjJkMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfJwO48HKCXuZtvIXnjaUEVrMxXnY1TBCZXj U/hw2mkgaOLdPXWexSGa2B3x4uVjtmMnv3ygUt5jgbaR8FHGtqDs0Us+41w0Tn+8 /AYvvammDvCL2uAMOxHGECAX7lf9xYykKIzV8AZ+96vb8xJdxA3G4tN9w4tmWHiK N/0xnFgOZMrzqS2pOzOEa47bBL0HSgjKm8RoCOsVdumP0AivL+xSfaheoJewAW7D 9ZdLUCcyv8CY7MGBrqlIsL3Q5PNOYX9DaSunWX850dWTK8GCBmF6siS2xuCW3Moj m5XNtyJpdyKgq2NAI6qNz1OEG6+2PMwvwEyRX/56+IAvD7JwmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGmlTaVb4hZFTiSAOK8TSp4aooVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGY5NTdmMTMtOTJiMC0z YWM5LTk3ZGQtY2E3YzQ3NTczNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh3gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACR+mEB3yeSIuXgVU8dt/hS0704WzqMkOWps8hOGnliwZeuSkOxPg fQnQXVG2X4U7SL55BgV+4ZVMOv8thocjeYLNlEo9Q7ZTZxOTX2YWqjIRtbP5SoKv bMdQiErUSScshPZeh1zZiz44EZBjnC8Mu2HE+NmgWoZu60k0W3doMoseu5XBxDLn z8kKrzPIobD33sRaA2yrGP5pCyjngiqRTFQzFrWyJXDPa+EGetx+PvYx7XsnHF+k nChvWTkZ8AthMTpT12UUmhOS3nYQ/4y1szra2V8RlnjdQUCSWyu5FGmHpG3WXAQy 46ZVQlv/KDLY01DGN8zikNBz2db2jQOfCw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:16 2026 by rpki-client