This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa File: 9d885db0-78f9-354c-8cf1-040c707c8d9e.roa (raw, json) Hash identifier: CmChlq2oLv5AqDOZo4RyBHsSfFLEu3miLHGBhqadPzA= Subject key identifier: 53:BA:BB:6E:EC:C2:6B:B0:EB:1F:56:05:DA:4B:F0:D1:0D:AB:5B:C4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BC6A03E4A6DB96E23BF117400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa Signing time: Fri 07 Nov 2025 02:00:30 +0000 ROA not before: Fri 07 Nov 2025 02:00:30 +0000 ROA not after: Thu 05 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2e87:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:a0:3e:4a:6d:b9:6e:23:bf:11:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 7 02:00:30 2025 GMT Not After : Feb 5 02:00:30 2026 GMT Subject: CN=b1705567-8e43-4987-b69c-b5df92c374f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:bc:fb:8e:72:ac:db:b6:97:0d:28:b4:49: b8:8c:23:d6:df:15:aa:37:e3:ef:91:45:fd:b9:b8: 08:93:39:2c:02:ee:5a:e8:dc:f2:df:6d:5a:f1:c4: a8:82:94:da:6a:53:7c:35:0b:fd:26:9e:41:47:9e: 93:9b:6c:a0:a2:a1:1a:f7:a2:d8:c1:94:ff:0d:2a: e6:d3:7e:68:2c:fa:24:73:74:fe:f4:3a:2e:bf:8b: 51:85:8b:55:a5:49:cf:da:19:c5:33:00:a7:4f:93: f7:77:8d:34:a8:47:dc:ed:dc:fd:aa:cc:96:b3:32: 1c:2b:f6:7f:2e:4a:51:5e:64:48:f3:3a:1a:77:92: d2:49:c5:39:96:27:33:12:88:3c:6e:3d:1b:b4:5e: 5c:2c:b2:f9:28:28:7f:5e:e4:66:48:3c:22:cf:86: 83:3f:76:6a:88:0c:6f:9b:bf:d8:26:89:a2:b6:3c: c2:99:4c:93:2a:95:bf:2f:ed:ba:71:c6:65:78:96: e4:b6:0e:84:25:e0:cf:78:62:79:85:03:34:c0:9b: 2f:67:33:43:de:13:a9:22:a0:33:76:7d:cf:df:44: c1:55:6f:7d:53:cf:c0:48:76:4d:4d:94:01:c7:bb: 5f:b6:ef:ff:c6:17:11:70:51:eb:7a:0a:66:aa:f0: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BA:BB:6E:EC:C2:6B:B0:EB:1F:56:05:DA:4B:F0:D1:0D:AB:5B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ba:cf:0a:de:f0:7b:c3:6c:b1:c1:d1:fa:fd:cd:35:05:3f: 72:20:0a:57:d1:ab:54:67:8d:b3:60:56:40:f0:df:df:b5:4e: cf:41:be:2f:23:ac:47:8d:7d:fd:5b:c6:0b:93:c7:56:57:c4: bc:da:00:c3:bc:5b:bd:8a:d8:12:33:31:89:2d:7d:27:1e:0e: 95:a9:31:57:6a:3a:12:bf:a6:39:2f:a2:93:d2:0e:3d:7f:68: e6:21:6e:a9:69:c8:04:cd:d8:d9:19:d4:91:eb:90:54:20:26: a8:55:53:b9:48:9b:59:13:0e:24:ee:a2:b4:92:d2:f2:39:f0: 20:6d:16:b0:d0:8e:11:c6:91:b2:81:b8:1a:cc:2f:d5:fa:2b: 64:89:d9:a9:73:3d:22:44:bb:7c:73:ce:01:30:69:1b:a8:e2: 5a:c0:bb:05:52:3f:4c:fc:c3:4d:b2:e1:40:94:d8:16:15:e3: ef:53:d9:c2:c1:e7:13:b2:1f:6a:3b:03:f4:02:86:29:e8:71: 29:80:4c:00:b7:8c:7a:f0:ab:81:8e:51:75:5e:c1:8c:99:6c: 2b:eb:5b:45:9d:da:a2:24:b5:a6:45:de:0c:99:22:c5:db:a0: 52:01:dd:12:ef:f8:fb:33:a0:22:5e:98:27:5d:b4:68:b0:71: 38:67:84:ac -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvGoD5KbbluI78RdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwNzAyMDAzMFoXDTI2MDIwNTAyMDAzMFowLzEtMCsGA1UEAxMk YjE3MDU1NjctOGU0My00OTg3LWI2OWMtYjVkZjkyYzM3NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH28+45yrNu2lw0otEm4jCPW3xWqN+PvkUX9 ubgIkzksAu5a6Nzy321a8cSogpTaalN8NQv9Jp5BR56Tm2ygoqEa96LYwZT/DSrm 035oLPokc3T+9Douv4tRhYtVpUnP2hnFMwCnT5P3d400qEfc7dz9qsyWszIcK/Z/ LkpRXmRI8zoad5LSScU5liczEog8bj0btF5cLLL5KCh/XuRmSDwiz4aDP3ZqiAxv m7/YJomitjzCmUyTKpW/L+26ccZleJbktg6EJeDPeGJ5hQM0wJsvZzND3hOpIqAz dn3P30TBVW99U8/ASHZNTZQBx7tftu//xhcRcFHregpmqvAJTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFO6u27swmuw6x9WBdpL8NENq1vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQ4ODVkYjAtNzhmOS0z NTRjLThjZjEtMDQwYzcwN2M4ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh5ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPrrPCt7we8NsscHR+v3NNQU/ciAKV9GrVGeNs2BWQPDf37VOz0G+ LyOsR419/VvGC5PHVlfEvNoAw7xbvYrYEjMxiS19Jx4OlakxV2o6Er+mOS+ik9IO PX9o5iFuqWnIBM3Y2RnUkeuQVCAmqFVTuUibWRMOJO6itJLS8jnwIG0WsNCOEcaR soG4Gswv1forZInZqXM9IkS7fHPOATBpG6jiWsC7BVI/TPzDTbLhQJTYFhXj71PZ wsHnE7IfajsD9AKGKehxKYBMALeMevCrgY5RdV7BjJlsK+tbRZ3aoiS1pkXeDJki xdugUgHdEu/4+zOgIl6YJ120aLBxOGeErA== -----END CERTIFICATE-----Generated at Tue Nov 25 14:00:47 2025 by rpki-client