This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa File: 9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa (raw, json) Hash identifier: KjtGse+/R5Oejp7BPrWuquik36rx/zZwxpISadc6pVY= Subject key identifier: 75:87:ED:60:BB:5D:EE:B8:F6:27:62:48:91:D2:52:33:C0:F3:BD:2D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82397EDA517A48FDA0640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:23:97:ed:a5:17:a4:8f:da:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=4770beb7-83a2-46dc-ad00-203793c83664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a9:c9:cb:96:b0:d1:3a:77:99:ea:3d:16:9f: 85:96:c6:6f:c9:67:07:81:89:71:17:43:7a:77:a7: bd:0a:4a:68:b4:70:aa:99:f7:ce:36:a0:5c:1e:ed: 5b:6b:e6:1e:d6:54:37:58:11:5c:14:0d:1a:c1:d6: b2:ce:78:6a:a7:6c:cb:6c:69:cd:7c:c4:d8:03:d7: c0:99:fa:a9:5d:a4:f3:5e:43:69:b8:f7:24:59:d8: 17:0a:0f:db:74:b8:fc:b3:5f:c4:d8:70:64:57:03: 99:ac:34:95:46:63:91:29:0c:94:4d:ee:33:91:dd: ed:5e:e6:b4:e2:e5:b9:0b:42:4f:65:02:12:c6:a0: 82:59:c1:7b:99:9f:09:09:a2:f7:ef:6b:b8:7d:38: 27:03:a9:8a:d6:48:99:6f:cc:aa:55:8c:67:ff:fe: ff:85:8c:b6:cf:d5:5a:c4:6f:d0:82:36:8e:7b:34: ec:5d:dd:68:98:37:9a:41:04:b5:fd:ec:d2:a4:65: 0b:ef:8a:dd:bb:32:93:da:e3:33:26:ad:6e:c7:02: bb:b9:4c:13:39:b6:02:8f:a6:9f:23:fd:59:4f:1c: 3b:49:51:3f:43:22:89:83:34:4f:5e:84:0c:3a:71: e0:d9:37:fc:c2:fd:aa:a0:0c:d4:f8:71:09:1e:80: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:ED:60:BB:5D:EE:B8:F6:27:62:48:91:D2:52:33:C0:F3:BD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:79:95:5a:60:3f:0a:f7:56:6a:e3:92:1c:b0:4b:cf:00:33: f8:0c:38:dc:d6:16:ee:53:46:17:6b:9c:63:b0:d8:57:aa:2b: 65:3e:4a:6d:77:c8:af:79:30:b1:f0:bd:1a:28:94:52:57:bb: 2a:43:f2:06:88:cf:01:06:fe:bb:48:61:e2:a2:88:06:4c:fc: 22:86:5e:6b:6f:7c:65:fd:e2:88:fc:d9:53:8b:97:ce:b2:27: e4:91:5e:ba:0d:fc:2d:e7:b3:48:87:ab:b3:17:ac:7e:2d:5b: 60:0b:dc:8c:e8:65:a0:65:f7:d4:ea:53:a7:fc:ab:48:ab:7a: 1c:12:65:ef:c5:e5:2c:1d:a2:67:ba:a9:12:52:13:73:73:48: fd:e4:35:a2:f7:c9:8b:49:cc:8c:6e:c1:d9:32:6f:ef:70:bc: 6d:0f:3e:2a:d1:18:6e:bd:c3:ee:67:2e:01:ac:48:4e:f6:86: 03:fb:8e:56:45:37:9a:7a:fc:80:47:82:05:c9:ac:a8:df:3a: 99:fa:fe:24:c9:02:9c:0d:9d:76:fc:27:a3:2a:72:8a:09:8c: 67:73:06:3e:fc:1d:96:46:41:9a:07:4f:ce:f8:f5:13:fe:58: db:4d:34:37:28:46:6f:18:f0:2d:14:6d:94:90:71:8f:ab:7d: d2:43:e8:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCOX7aUXpI/aBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NDc3MGJlYjctODNhMi00NmRjLWFkMDAtMjAzNzkzYzgzNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKnJy5aw0Tp3meo9Fp+FlsZvyWcHgYlxF0N6 d6e9CkpotHCqmffONqBcHu1ba+Ye1lQ3WBFcFA0awdayznhqp2zLbGnNfMTYA9fA mfqpXaTzXkNpuPckWdgXCg/bdLj8s1/E2HBkVwOZrDSVRmORKQyUTe4zkd3tXua0 4uW5C0JPZQISxqCCWcF7mZ8JCaL372u4fTgnA6mK1kiZb8yqVYxn//7/hYy2z9Va xG/QgjaOezTsXd1omDeaQQS1/ezSpGUL74rduzKT2uMzJq1uxwK7uUwTObYCj6af I/1ZTxw7SVE/QyKJgzRPXoQMOnHg2Tf8wv2qoAzU+HEJHoB7TwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHWH7WC7Xe649idiSJHSUjPA870tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWM4M2IwMjktM2M1NC0z OGMyLWI5MGEtOTVhMDYxY2M0ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiqQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlXmVWmA/CvdWauOSHLBLzwAz+Aw43NYW7lNGF2ucY7DYV6orZT5K bXfIr3kwsfC9GiiUUle7KkPyBojPAQb+u0hh4qKIBkz8IoZea298Zf3iiPzZU4uX zrIn5JFeug38LeezSIersxesfi1bYAvcjOhloGX31OpTp/yrSKt6HBJl78XlLB2i Z7qpElITc3NI/eQ1ovfJi0nMjG7B2TJv73C8bQ8+KtEYbr3D7mcuAaxITvaGA/uO VkU3mnr8gEeCBcmsqN86mfr+JMkCnA2ddvwnoypyigmMZ3MGPvwdlkZBmgdPzvj1 E/5Y2000NyhGbxjwLRRtlJBxj6t90kPo8g== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:46 2026 by rpki-client