This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
File: 9684e0d8-ac2d-35ad-bb42-588011e2b912.roa (raw, json)
Hash identifier: 8vXLlQEwBTySgECr2kjT0gMDtJLPvKUIvvhpRgA5Y1M=
Subject key identifier: D3:94:77:94:97:3F:72:FB:A8:B3:F3:4C:DA:A8:F2:95:7E:92:F7:CC
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BE3D2ABDD26560F5AA59DCC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
Signing time: Mon 17 Nov 2025 13:00:40 +0000
ROA not before: Mon 17 Nov 2025 13:00:40 +0000
ROA not after: Sun 15 Feb 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e89:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e3:d2:ab:dd:26:56:0f:5a:a5:9d:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Nov 17 13:00:40 2025 GMT
Not After : Feb 15 13:00:40 2026 GMT
Subject: CN=6f69de2b-7c8d-4c5e-8186-788e77a76d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:b2:ba:9c:08:50:44:88:94:b7:c4:5d:d7:
e9:b0:8b:71:42:7f:7a:b4:bc:55:cc:1b:0b:56:90:
4e:e0:8d:a6:68:02:5a:ca:21:a1:b6:91:fe:50:05:
33:54:9d:75:a3:7f:5d:3c:bc:5d:be:5f:0d:3a:d8:
a8:48:f0:21:16:ba:94:9b:ef:0b:97:13:09:e6:71:
3f:ca:94:b6:6b:16:fa:25:7e:46:46:5f:9c:1e:f3:
3d:fe:ab:40:3a:de:38:6b:0a:53:85:06:94:aa:72:
fb:26:f0:ed:82:9b:b2:b7:db:9b:2d:b7:7d:8e:ec:
a1:cd:b8:15:58:d2:8f:70:45:7d:bf:3c:fc:1d:0f:
49:80:2e:81:c6:eb:cd:a9:c7:09:93:53:bb:e3:8b:
50:f3:03:9d:c3:28:7b:17:bf:43:a2:a8:11:ce:e5:
0d:6f:aa:ac:39:c4:c8:db:1e:40:69:b0:ac:bd:96:
7f:64:f5:8a:81:09:85:1c:2e:ab:03:c3:06:a2:78:
25:7f:44:4a:d9:09:7f:ea:4a:b2:d3:d0:b3:46:58:
15:26:5e:1f:5e:d0:5e:ed:cf:df:73:3d:8f:14:98:
55:6b:17:0b:82:bf:4d:9a:ed:39:aa:a6:8d:ee:c8:
3c:bf:1d:4e:fc:ea:62:d4:8d:5a:a2:f4:8f:2d:31:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:77:94:97:3F:72:FB:A8:B3:F3:4C:DA:A8:F2:95:7E:92:F7:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2a:1c:ec:ca:0a:da:9a:04:a9:09:b1:5f:b8:dc:30:eb:6c:
87:f5:d9:7e:63:ec:36:4c:d8:d2:45:b1:71:ef:3b:55:6f:82:
f3:5c:eb:3d:8c:f3:be:ca:01:0c:87:b7:49:2e:a6:a3:91:73:
2e:5b:8d:41:15:59:0e:d0:9d:50:a2:24:43:fc:6e:49:61:25:
da:b3:8e:9f:bb:9b:3b:be:2b:6f:92:82:76:45:67:9e:5f:00:
2f:aa:e7:23:6f:87:35:9f:dd:b3:0f:fc:cb:22:0a:7e:83:e0:
1a:2a:3e:ac:19:44:51:88:5d:6b:1b:d5:96:45:09:11:d1:f3:
7c:49:7d:b8:be:ae:7e:58:75:56:4d:55:13:06:0c:84:fb:41:
7b:a3:32:81:57:54:ea:fb:ea:ee:23:23:f4:df:5b:be:2a:ea:
5d:a1:1a:8d:c1:ed:d3:8a:49:0c:ca:51:d2:63:52:16:bd:63:
06:d9:af:62:6a:20:3e:64:66:aa:5a:3b:eb:e0:12:8b:fb:32:
f8:0b:9d:6d:a8:6c:3d:ce:fc:ad:ec:4c:92:ee:6e:e1:d4:af:
67:a2:a8:f6:13:d6:70:28:e0:72:d0:29:c5:e3:05:70:2c:e8:
8e:44:f8:22:a3:4c:59:e6:cf:3a:9c:e1:9f:7d:48:54:39:53:
c5:08:6b:cf
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvj0qvdJlYPWqWdzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTExNzEzMDA0MFoXDTI2MDIxNTEzMDA0MFowLzEtMCsGA1UEAxMk
NmY2OWRlMmItN2M4ZC00YzVlLTgxODYtNzg4ZTc3YTc2ZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltiyupwIUESIlLfEXdfpsItxQn96tLxVzBsL
VpBO4I2maAJayiGhtpH+UAUzVJ11o39dPLxdvl8NOtioSPAhFrqUm+8LlxMJ5nE/
ypS2axb6JX5GRl+cHvM9/qtAOt44awpThQaUqnL7JvDtgpuyt9ubLbd9juyhzbgV
WNKPcEV9vzz8HQ9JgC6BxuvNqccJk1O744tQ8wOdwyh7F79DoqgRzuUNb6qsOcTI
2x5AabCsvZZ/ZPWKgQmFHC6rA8MGonglf0RK2Ql/6kqy09CzRlgVJl4fXtBe7c/f
cz2PFJhVaxcLgr9Nmu05qqaN7sg8vx1O/Opi1I1aovSPLTGhoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNOUd5SXP3L7qLPzTNqo8pV+kvfMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTY4NGUwZDgtYWMyZC0z
NWFkLWJiNDItNTg4MDExZTJiOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiYgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKCoc7MoK2poEqQmxX7jcMOtsh/XZfmPsNkzY0kWxce87VW+C81zr
PYzzvsoBDIe3SS6mo5FzLluNQRVZDtCdUKIkQ/xuSWEl2rOOn7ubO74rb5KCdkVn
nl8AL6rnI2+HNZ/dsw/8yyIKfoPgGio+rBlEUYhdaxvVlkUJEdHzfEl9uL6uflh1
Vk1VEwYMhPtBe6MygVdU6vvq7iMj9N9bvirqXaEajcHt04pJDMpR0mNSFr1jBtmv
YmogPmRmqlo76+ASi/sy+AudbahsPc78rexMku5u4dSvZ6Ko9hPWcCjgctApxeMF
cCzojkT4IqNMWebPOpzhn31IVDlTxQhrzw==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:02:06 2025 by rpki-client