This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e7e88d8-472a-3b8d-b424-916c985a5d3e.roa File: 9e7e88d8-472a-3b8d-b424-916c985a5d3e.roa (raw, json) Hash identifier: kc+3N1hbd7buWmJz0IyWeObjfimG2G+OBfDxoTRssBg= Subject key identifier: 40:49:92:F5:C5:F6:4C:3A:52:9A:AB:6C:2D:CD:1A:76:B2:4C:E4:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C5EC6986EE65BD995B074DBC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e7e88d8-472a-3b8d-b424-916c985a5d3e.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 30036 IP address blocks: 2604:2e87:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:98:6e:e6:5b:d9:95:b0:74:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=2e48d4d6-fbee-4f56-bcbc-560c613e292b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:43:eb:9b:ca:7d:9c:4c:50:35:8c:e2:cf: 9b:1f:b3:9d:68:b0:07:13:a3:09:31:d8:aa:3a:06: cd:04:34:e1:32:39:6b:36:1e:f6:19:80:11:a3:3e: 3a:f7:0c:a1:33:31:5e:a8:f5:00:8a:5a:55:53:e1: 02:f2:2d:83:78:50:22:72:2a:ad:12:62:ee:56:0d: 28:cf:b4:f4:90:80:9e:49:23:99:18:5a:b4:7d:1d: 38:89:cf:75:9d:7f:ff:a1:3a:be:96:94:66:1f:b7: f1:10:0d:09:3b:50:d4:99:42:0a:20:ec:bc:1b:21: 0e:b3:1b:f9:c7:9f:15:65:55:09:62:17:e4:fe:81: 62:18:48:67:56:31:8e:3d:1b:9b:a4:c6:6d:54:b7: 8d:7d:76:40:4c:35:d4:4b:3f:a7:b9:73:4d:9b:c3: 60:02:5b:f9:cc:a6:1a:55:e0:8d:1d:92:3d:fd:76: 8a:77:c9:1e:07:27:28:13:38:65:31:50:96:bf:f3: 06:72:3f:bb:c1:c0:37:23:96:b3:38:a6:c1:91:88: 00:90:fa:d9:54:a2:ff:0a:d2:e2:6f:47:11:20:a5: cb:a7:2c:2d:40:56:e3:e6:bb:7d:95:35:1f:98:9c: 41:11:aa:a5:72:51:e5:c8:49:0a:b0:00:b4:bc:b9: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:49:92:F5:C5:F6:4C:3A:52:9A:AB:6C:2D:CD:1A:76:B2:4C:E4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e7e88d8-472a-3b8d-b424-916c985a5d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e4:9f:4c:74:d3:7f:76:06:1b:c1:45:d7:a2:16:55:34:00: 5d:59:a9:f2:08:9d:9e:f9:19:dd:9d:0f:22:f3:de:f4:d5:f2: 83:b8:32:d1:a3:c6:f5:5a:73:45:c2:e6:85:ff:86:7d:3f:2c: c0:5b:47:5b:58:42:07:9c:99:1f:25:e8:03:16:0b:79:01:9b: 96:77:53:48:16:34:93:3b:21:58:36:1f:dc:59:c5:69:27:39: 00:6b:69:ac:88:2f:12:9d:e8:6a:05:94:4c:2c:f5:d0:2c:ff: 8c:75:b7:9f:b1:d5:91:37:26:3e:bb:00:3b:8f:34:27:d7:d5: 1c:9f:d9:d4:77:11:b2:fb:24:a0:b9:27:1b:ce:d1:68:4f:eb: cd:23:46:bc:a5:e9:f7:cb:4e:92:c3:ac:be:51:57:55:19:82: a0:5a:80:ac:e8:79:05:97:c8:f7:b9:1e:d0:56:6f:48:b9:cb: 29:9d:23:33:db:ec:40:8f:eb:d5:b7:e3:42:01:5c:24:7e:ad: a6:74:0a:b2:fc:6e:a2:8a:5a:1f:4a:b3:5d:82:76:c4:38:7a: d3:74:78:7c:af:37:85:fd:e0:34:af:38:bb:4a:53:d7:23:e8: c8:3b:b3:55:6f:7c:5d:14:b9:91:9e:1f:2b:a1:4e:60:19:2b: 7d:ac:5f:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExexphu5lvZlbB028AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MmU0OGQ0ZDYtZmJlZS00ZjU2LWJjYmMtNTYwYzYxM2UyOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRlD65vKfZxMUDWM4s+bH7OdaLAHE6MJMdiq OgbNBDThMjlrNh72GYARoz469wyhMzFeqPUAilpVU+EC8i2DeFAiciqtEmLuVg0o z7T0kICeSSOZGFq0fR04ic91nX//oTq+lpRmH7fxEA0JO1DUmUIKIOy8GyEOsxv5 x58VZVUJYhfk/oFiGEhnVjGOPRubpMZtVLeNfXZATDXUSz+nuXNNm8NgAlv5zKYa VeCNHZI9/XaKd8keBycoEzhlMVCWv/MGcj+7wcA3I5azOKbBkYgAkPrZVKL/CtLi b0cRIKXLpywtQFbj5rt9lTUfmJxBEaqlclHlyEkKsAC0vLmxUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEBJkvXF9kw6UpqrbC3NGnayTOR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWU3ZTg4ZDgtNDcyYS0z YjhkLWI0MjQtOTE2Yzk4NWE1ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh3Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh+SfTHTTf3YGG8FF16IWVTQAXVmp8gidnvkZ3Z0PIvPe9NXyg7gy 0aPG9VpzRcLmhf+GfT8swFtHW1hCB5yZHyXoAxYLeQGblndTSBY0kzshWDYf3FnF aSc5AGtprIgvEp3oagWUTCz10Cz/jHW3n7HVkTcmPrsAO480J9fVHJ/Z1HcRsvsk oLknG87RaE/rzSNGvKXp98tOksOsvlFXVRmCoFqArOh5BZfI97ke0FZvSLnLKZ0j M9vsQI/r1bfjQgFcJH6tpnQKsvxuoopaH0qzXYJ2xDh603R4fK83hf3gNK84u0pT 1yPoyDuzVW98XRS5kZ4fK6FOYBkrfaxfQw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:02 2026 by rpki-client