This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa File: a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa (raw, json) Hash identifier: U7WHHBm3JHe0v4qhCEVDJLYTr8zH9GZrbvqxtH++q8I= Subject key identifier: 37:D5:35:58:AF:5C:FD:43:BD:AD:0E:AE:FE:41:3E:20:1A:83:C9:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A666DFA3964E33DE296960 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:c000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:66:df:a3:96:4e:33:de:29:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=80c30594-5ad8-4f04-bd71-fe91ecf12d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:15:d9:68:ea:27:46:9d:38:3a:9e:9d:21: f6:7d:08:e5:b6:df:65:45:87:e9:b1:c8:f7:ed:ed: d9:ca:50:fb:de:36:c4:54:3c:28:67:66:d2:0b:37: 54:7c:6b:32:83:0a:0a:05:98:5e:32:42:f5:76:da: 11:dc:7f:9e:a1:cc:cd:c7:7f:df:3f:e1:d3:dd:e7: cf:b5:c7:66:ba:67:ee:fa:0a:6e:2d:c1:25:03:63: fc:7a:7e:91:81:f5:d5:96:4c:4c:88:3e:f7:d7:89: a8:71:fc:2c:d9:d8:3d:94:57:ca:c5:89:2d:72:78: a6:65:a9:c8:d1:49:d0:86:ef:06:43:ec:10:d5:c7: 9b:35:e1:76:d5:df:bc:66:81:06:fe:6b:85:24:d7: 47:07:15:78:8e:82:c7:3b:de:4b:4d:56:6b:71:6d: bd:af:2c:17:f5:bb:35:c2:0f:0a:eb:f3:cb:44:f4: 98:cc:c8:39:a5:57:2b:85:72:ef:50:8f:3d:e7:2d: 1f:9a:54:ea:4d:ac:99:7a:c1:63:b2:c9:f2:51:f0: a2:1e:60:97:e1:d5:6d:c9:3d:7f:67:50:a5:3e:05: 4c:53:74:41:9e:ff:2b:77:ca:67:69:7b:73:10:2c: 13:00:61:81:42:78:28:c3:6d:ce:8f:37:6c:50:ef: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D5:35:58:AF:5C:FD:43:BD:AD:0E:AE:FE:41:3E:20:1A:83:C9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:c000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5d:7b:34:6d:b4:66:50:16:d1:d9:4c:94:53:a5:ce:24:5e: 34:d9:09:20:de:32:09:bb:1e:af:44:13:b3:c3:66:d5:59:1e: ac:22:be:90:93:9c:8f:ef:7e:3d:a5:da:90:21:0d:e7:a6:03: 41:d3:e9:77:88:d8:81:93:de:01:ec:f7:75:b1:58:0a:7c:18: 9c:88:72:b7:2a:3a:b2:49:98:98:3a:b0:ce:cb:fc:a3:5e:3c: 79:63:18:fd:d1:1b:45:96:10:36:e0:e6:2d:a9:c2:76:30:0f: 59:0f:4e:c1:a3:5d:6a:36:e2:a3:9e:81:a1:c9:3a:7f:b9:8e: da:15:7d:62:b0:bf:99:95:7d:5c:a2:fe:19:f8:20:33:5d:12: 8f:97:ea:4a:bc:92:6d:01:6d:b8:b7:b9:a2:3b:0c:31:be:b5: 8d:4b:5a:7e:d8:02:5b:54:2c:c4:bd:81:df:e3:af:1e:e8:4a: 5f:66:89:ce:1a:75:52:85:a8:83:ba:4a:b1:9a:f9:2b:0c:92: c9:de:ee:82:08:a6:f3:49:4a:b1:c1:37:e0:28:bd:0c:4b:97: d9:a8:44:99:b3:be:fe:df:17:92:07:05:60:96:48:b8:04:ed: a5:ea:75:ee:d8:fd:5c:f6:36:9a:2e:5b:d8:3c:4a:1a:ff:a5: 8d:74:24:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpmbfo5ZOM94paWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ODBjMzA1OTQtNWFkOC00ZjA0LWJkNzEtZmU5MWVjZjEyZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkisV2WjqJ0adODqenSH2fQjltt9lRYfpscj3 7e3ZylD73jbEVDwoZ2bSCzdUfGsygwoKBZheMkL1dtoR3H+eoczNx3/fP+HT3efP tcdmumfu+gpuLcElA2P8en6RgfXVlkxMiD7314mocfws2dg9lFfKxYktcnimZanI 0UnQhu8GQ+wQ1cebNeF21d+8ZoEG/muFJNdHBxV4joLHO95LTVZrcW29rywX9bs1 wg8K6/PLRPSYzMg5pVcrhXLvUI895y0fmlTqTayZesFjssnyUfCiHmCX4dVtyT1/ Z1ClPgVMU3RBnv8rd8pnaXtzECwTAGGBQngow23OjzdsUO/5HwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDfVNVivXP1Dva0Orv5BPiAag8kiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNhYmRjZTctOTM4YS0z MmIzLThmYTgtMmIyYjIwN2U1OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZF17NG20ZlAW0dlMlFOlziReNNkJIN4yCbser0QTs8Nm1VkerCK+ kJOcj+9+PaXakCEN56YDQdPpd4jYgZPeAez3dbFYCnwYnIhytyo6skmYmDqwzsv8 o148eWMY/dEbRZYQNuDmLanCdjAPWQ9OwaNdajbio56Bock6f7mO2hV9YrC/mZV9 XKL+GfggM10Sj5fqSrySbQFtuLe5ojsMMb61jUtaftgCW1QsxL2B3+OvHuhKX2aJ zhp1UoWog7pKsZr5KwySyd7uggim80lKscE34Ci9DEuX2ahEmbO+/t8XkgcFYJZI uATtpep17tj9XPY2mi5b2DxKGv+ljXQk9A== -----END CERTIFICATE-----Generated at Sun Jan 11 08:22:05 2026 by rpki-client