This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa File: a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa (raw, json) Hash identifier: nIDLglulCuy2LswrZ3l8+IIksTklwLarVsNO+PWUcM4= Subject key identifier: A5:C3:28:A0:B1:15:E5:3D:2E:4A:73:16:46:12:9E:8E:1C:7E:8D:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C26F0F31F3354FF904C08C14C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e8e:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f3:1f:33:54:ff:90:4c:08:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=27a6b0e7-48c8-4501-96d5-33bb9176949f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:8f:8e:31:90:3b:e3:a8:a0:c4:07:46:8a: 80:8e:3a:8a:35:21:0f:35:33:08:66:b2:c3:b7:6e: 88:2b:29:40:d6:d3:28:b8:d0:ab:7c:5b:e5:00:8b: 35:29:6d:84:8c:09:69:ae:44:29:3d:32:0c:11:d6: 5e:58:2e:b2:11:8a:1f:00:78:04:0e:e6:62:68:aa: ab:d7:55:f8:b2:e8:24:c5:30:f1:7c:c9:15:1a:b3: fd:bf:c8:1e:2a:c6:37:1a:d3:48:79:d0:77:85:9c: 6e:1a:97:51:e6:0d:15:05:c5:2d:f1:01:21:06:99: d2:d7:17:60:6e:a4:3a:46:43:28:72:dc:01:6a:e0: 16:92:88:92:1f:04:f0:e9:ea:ae:28:de:5e:df:25: 3d:ee:f9:6c:3b:ce:ae:52:72:49:82:0c:ff:5f:87: d7:0b:4a:2d:a4:ef:5d:14:1d:5f:29:27:ec:fc:3b: f2:ac:d1:d5:44:a0:48:a8:e9:70:fa:31:78:7d:51: 46:d8:a8:fb:69:ec:6f:a4:3d:cf:04:42:2f:b5:85: 19:c7:4b:36:25:07:fa:13:71:c4:3d:cb:d7:b4:50: 00:e1:7d:b9:76:d1:21:a6:e1:98:61:73:27:4c:bc: 16:77:d3:91:2f:77:b7:d3:f2:1f:17:36:6e:72:bf: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:28:A0:B1:15:E5:3D:2E:4A:73:16:46:12:9E:8E:1C:7E:8D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:f800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:15:8f:6e:34:41:59:58:07:f2:31:20:2e:26:aa:db:40:8b: d6:36:99:49:4f:cb:a2:22:df:03:9b:f2:61:db:ac:98:a7:0e: 93:5a:11:93:02:5c:75:c7:4f:57:c5:36:34:48:c9:5b:fa:cf: 3a:f8:94:3b:60:0f:19:c9:73:ab:92:4c:55:fe:51:17:98:f1: 44:6e:99:6e:37:49:3d:8a:94:3d:a3:56:98:52:d1:23:17:cc: ac:75:31:8d:dc:e5:fa:b8:5c:59:32:52:c5:66:70:f1:a9:97: 7a:03:d9:91:18:72:45:96:af:c4:b4:40:4c:d3:13:48:bf:bd: 35:54:8a:a2:06:98:16:20:d9:bc:69:e9:00:01:ef:96:0c:4b: 8b:8d:3f:b5:a1:fa:32:5a:c8:74:4e:c5:80:4b:1c:46:82:ca: 3b:0a:a2:7d:02:cb:ef:d4:18:20:32:ee:32:b4:6f:b5:64:fd: 2d:57:fd:cb:c1:a3:78:77:14:ca:a0:c3:6a:bd:ba:0c:cc:57: f8:29:81:a2:34:85:21:d5:ee:6e:28:ca:74:ed:f3:5b:93:0c: 51:b4:0d:dc:02:11:bc:e9:74:fc:54:d2:49:ed:66:74:d8:63: e2:5f:50:5b:92:28:ea:65:25:a2:6d:8c:d2:07:6b:22:16:dd: ea:ce:da:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwm8PMfM1T/kEwIwUwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk MjdhNmIwZTctNDhjOC00NTAxLTk2ZDUtMzNiYjkxNzY5NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozqPjjGQO+OooMQHRoqAjjqKNSEPNTMIZrLD t26IKylA1tMouNCrfFvlAIs1KW2EjAlprkQpPTIMEdZeWC6yEYofAHgEDuZiaKqr 11X4sugkxTDxfMkVGrP9v8geKsY3GtNIedB3hZxuGpdR5g0VBcUt8QEhBpnS1xdg bqQ6RkMoctwBauAWkoiSHwTw6equKN5e3yU97vlsO86uUnJJggz/X4fXC0otpO9d FB1fKSfs/DvyrNHVRKBIqOlw+jF4fVFG2Kj7aexvpD3PBEIvtYUZx0s2JQf6E3HE PcvXtFAA4X25dtEhpuGYYXMnTLwWd9ORL3e30/IfFzZucr+mQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKXDKKCxFeU9LkpzFkYSno4cfo0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJlOTg3ZmItOTlmZC0z NDJkLTkwOWEtY2NjMzJlOGU5ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdBWPbjRBWVgH8jEgLiaq20CL1jaZSU/LoiLfA5vyYdusmKcOk1oR kwJcdcdPV8U2NEjJW/rPOviUO2APGclzq5JMVf5RF5jxRG6ZbjdJPYqUPaNWmFLR IxfMrHUxjdzl+rhcWTJSxWZw8amXegPZkRhyRZavxLRATNMTSL+9NVSKogaYFiDZ vGnpAAHvlgxLi40/taH6MlrIdE7FgEscRoLKOwqifQLL79QYIDLuMrRvtWT9LVf9 y8GjeHcUyqDDar26DMxX+CmBojSFIdXubijKdO3zW5MMUbQN3AIRvOl0/FTSSe1m dNhj4l9QW5Io6mUlom2M0gdrIhbd6s7aVg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:24:58 2026 by rpki-client