This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa File: a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa (raw, json) Hash identifier: VYsr7Ql95p9oCrWrlCA8UQeaKC0sJQKMOLjtTdaCgTQ= Subject key identifier: 70:59:0D:71:99:62:DF:B9:8B:0D:D2:E2:5D:B8:1F:1B:B9:FB:0A:69 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C41764FC0EBAE0F5362CCB1C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 30036 IP address blocks: 2604:2e87:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:4f:c0:eb:ae:0f:53:62:cc:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=8aca955d-bbd3-4e0f-be24-a61242851b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:20:22:0b:47:83:17:f6:90:51:ae:b6:bf: b5:ed:81:d2:32:d6:4e:ea:f1:13:52:b7:66:a4:06: 35:e4:32:8f:59:3b:30:5f:97:1b:11:46:97:47:a1: 3b:52:45:ea:24:87:39:0a:db:d7:e0:08:4a:a3:f1: bf:45:bb:bb:c1:df:54:17:9c:e8:74:0c:75:0a:bc: f8:e0:77:96:cb:fc:d9:05:5e:a5:97:ea:68:67:62: 06:69:1e:fb:fb:62:ef:82:b8:25:eb:79:4f:d8:8c: 7e:fa:eb:d6:42:59:4c:d0:e0:c2:a7:d9:23:b0:19: 2a:fb:3d:3a:41:28:66:7f:0a:a3:4e:c3:94:a3:b0: 1a:94:67:00:a0:d4:fa:77:0a:80:81:18:63:31:71: 42:92:c5:41:c1:c7:6e:bd:78:17:1b:4a:7d:4e:7a: 88:b0:54:df:db:67:b7:76:45:88:0d:d1:46:2f:90: 79:f9:2e:1e:5a:5f:db:4d:9f:dd:f0:92:3e:d8:75: 95:3f:a5:2d:09:68:18:4e:5c:2a:0f:bc:36:4b:dd: f2:41:08:9d:c9:c1:5f:28:84:76:b3:f7:46:52:47: 18:cc:f5:18:ba:fe:6d:12:32:96:0f:c6:56:9d:ea: cd:e1:80:31:83:e4:be:e4:5e:43:67:87:1a:ee:6b: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:0D:71:99:62:DF:B9:8B:0D:D2:E2:5D:B8:1F:1B:B9:FB:0A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d5:b9:b5:a6:86:8c:07:66:a4:4f:f6:10:fe:28:14:4e:be: b0:a1:59:ba:05:04:67:a1:8d:cc:ed:12:b0:b4:b1:66:19:3a: 20:5a:44:4b:6e:bb:6f:ea:e5:07:85:49:65:54:ba:c2:9b:a4: 03:2f:fc:46:4e:b9:5e:8f:50:71:53:4a:67:6f:02:86:d3:74: 63:15:5c:14:46:d1:9f:1b:81:3c:9c:83:ac:e5:3a:6b:d0:4b: 89:fb:e7:27:3c:c8:0b:c2:62:1c:77:58:60:2e:55:78:8c:72: 24:61:6f:fd:a1:82:8a:31:f7:18:7e:23:e1:56:5c:d9:1d:59: c8:cc:b2:8d:94:99:09:9f:e1:a1:03:0c:41:dd:7f:65:f6:0a: ae:3d:ad:ec:af:b7:94:5b:ae:77:a7:7e:db:89:de:e5:96:84: b5:d7:b1:b7:05:b9:a9:c0:8b:78:28:53:75:29:bd:ce:1b:70: ca:8e:8a:e1:91:17:65:8b:04:d2:4b:d0:45:ac:01:ff:ae:a9: ba:20:f9:69:be:7a:e8:c2:87:55:3b:7c:56:7e:90:8b:6a:73: 29:a3:38:85:0d:5b:c9:b2:49:7a:71:da:45:ab:b3:b7:6f:36: a8:cc:58:59:9e:c9:d0:60:78:92:fe:0a:a5:d9:be:1c:7f:7c: 94:2e:6a:aa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdk/A664PU2LMscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk OGFjYTk1NWQtYmJkMy00ZTBmLWJlMjQtYTYxMjQyODUxYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PkgIgtHgxf2kFGutr+17YHSMtZO6vETUrdm pAY15DKPWTswX5cbEUaXR6E7UkXqJIc5CtvX4AhKo/G/Rbu7wd9UF5zodAx1Crz4 4HeWy/zZBV6ll+poZ2IGaR77+2Lvgrgl63lP2Ix++uvWQllM0ODCp9kjsBkq+z06 QShmfwqjTsOUo7AalGcAoNT6dwqAgRhjMXFCksVBwcduvXgXG0p9TnqIsFTf22e3 dkWIDdFGL5B5+S4eWl/bTZ/d8JI+2HWVP6UtCWgYTlwqD7w2S93yQQidycFfKIR2 s/dGUkcYzPUYuv5tEjKWD8ZWnerN4YAxg+S+5F5DZ4ca7muYkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHBZDXGZYt+5iw3S4l24Hxu5+wppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTMzYzc3YTItM2MxZi0z OGVkLWI3ZWItNjc1NmI5ZDA3NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAA9W5taaGjAdmpE/2EP4oFE6+sKFZugUEZ6GNzO0SsLSxZhk6IFpE S267b+rlB4VJZVS6wpukAy/8Rk65Xo9QcVNKZ28ChtN0YxVcFEbRnxuBPJyDrOU6 a9BLifvnJzzIC8JiHHdYYC5VeIxyJGFv/aGCijH3GH4j4VZc2R1ZyMyyjZSZCZ/h oQMMQd1/ZfYKrj2t7K+3lFuud6d+24ne5ZaEtdextwW5qcCLeChTdSm9zhtwyo6K 4ZEXZYsE0kvQRawB/66puiD5ab566MKHVTt8Vn6Qi2pzKaM4hQ1bybJJenHaRauz t282qMxYWZ7J0GB4kv4Kpdm+HH98lC5qqg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:34 2026 by rpki-client