This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0d4ca7-6fb9-332a-92bf-1cf6e7e5d97c.roa File: aa0d4ca7-6fb9-332a-92bf-1cf6e7e5d97c.roa (raw, json) Hash identifier: tSnkCX/B6hD6tFjWNB0n0fOcpOLk0V2NfpM5Ye84YPw= Subject key identifier: 1C:48:B2:92:13:28:1C:0B:05:39:26:16:10:2D:5B:85:95:5A:E6:4A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BC3400B705480E0293414C880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0d4ca7-6fb9-332a-92bf-1cf6e7e5d97c.roa Signing time: Wed 05 Nov 2025 20:59:22 +0000 ROA not before: Wed 05 Nov 2025 20:59:22 +0000 ROA not after: Tue 03 Feb 2026 20:59:22 +0000 asID: 19905 IP address blocks: 2604:2e8f:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:40:0b:70:54:80:e0:29:34:14:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 5 20:59:22 2025 GMT Not After : Feb 3 20:59:22 2026 GMT Subject: CN=b5c4c3f0-913d-49f6-87b8-a30b1972481a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:7b:be:59:ad:26:de:77:23:b8:dc:28:06: ed:1a:db:7b:44:7f:6b:f3:ad:99:d7:c5:e8:f6:cf: 14:73:9f:21:86:c4:94:40:0e:20:86:f5:2d:fd:ab: c2:36:83:1b:08:0b:65:b8:68:f2:1f:1b:26:0b:ec: 9f:d1:93:6e:b1:c5:2e:b5:cb:6f:9d:9c:62:5c:20: 9a:2b:53:d7:75:5b:85:42:78:7e:1a:46:8a:cd:8b: f9:61:68:06:d5:1d:0b:4b:01:fb:9b:47:b9:b6:5c: 7e:08:4b:03:9b:3a:cd:cb:df:87:fc:bb:99:24:3c: ea:62:d0:5d:be:67:6c:1f:de:73:20:97:79:e3:69: 71:74:23:f4:7f:5d:65:ea:74:f6:b6:f5:33:22:76: ff:88:f9:74:b9:b8:19:6d:0a:3f:a4:e3:da:0a:d7: e2:32:51:8e:40:8b:c7:d0:76:cb:b4:4e:4c:76:1f: 17:4d:7b:51:81:34:2a:2b:39:23:af:30:f4:b2:3b: a2:d4:a9:2c:8d:64:52:cc:42:08:bc:fc:3c:48:00: ee:12:70:1a:f5:c3:3a:c5:e9:4b:04:cf:bf:fa:20: 3e:f6:de:5e:61:83:c3:d6:ef:35:2b:31:9c:df:51: 92:a7:30:4b:ea:fc:1f:7a:dd:ba:c2:9a:38:21:5d: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:B2:92:13:28:1C:0B:05:39:26:16:10:2D:5B:85:95:5A:E6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0d4ca7-6fb9-332a-92bf-1cf6e7e5d97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:96:b7:89:b3:93:e4:f1:6a:d5:30:2d:d7:32:1e:22:24:41: e1:6e:fe:88:0b:7f:02:b8:73:44:c6:f5:80:93:c8:ed:e2:68: 65:9e:c6:e1:6e:48:a0:97:11:17:c1:79:bd:9c:34:d3:24:f3: 7d:21:69:bb:27:e9:21:9e:79:10:06:35:27:bc:b5:9f:fe:79: a0:c9:ce:af:ad:f2:e2:17:f1:ab:28:c1:c7:6e:98:0b:bc:f6: ca:67:de:37:af:3d:55:be:7b:be:b8:f5:5e:93:83:f6:9c:8b: 75:8f:93:44:49:7e:fa:ae:32:a6:2e:fc:ae:83:92:00:99:54: 63:9c:37:21:dc:02:62:8f:bd:c5:8e:ec:33:d7:1d:8c:e5:95: 85:12:09:5b:30:05:83:89:a5:0e:bd:74:89:8a:b1:fa:e6:4f: 7e:c3:cc:a4:cc:bd:46:97:57:ce:63:c8:c1:6b:52:5f:22:80: 83:15:31:8d:c7:b9:d2:96:ca:36:c9:49:e5:ed:b2:9e:3a:1e: d2:b7:de:9f:2c:0f:55:c8:1b:2c:af:26:b9:bd:ce:fd:60:eb: 81:97:a7:dd:9d:a5:16:fd:82:47:7a:3c:53:ed:2c:24:12:f5: 83:3c:e3:b3:2a:b8:38:a7:3b:e9:36:9f:4c:2f:69:b8:f0:5f: 4e:ce:f0:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvDQAtwVIDgKTQUyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwNTIwNTkyMloXDTI2MDIwMzIwNTkyMlowLzEtMCsGA1UEAxMk YjVjNGMzZjAtOTEzZC00OWY2LTg3YjgtYTMwYjE5NzI0ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Z7vlmtJt53I7jcKAbtGtt7RH9r862Z18Xo 9s8Uc58hhsSUQA4ghvUt/avCNoMbCAtluGjyHxsmC+yf0ZNuscUutctvnZxiXCCa K1PXdVuFQnh+GkaKzYv5YWgG1R0LSwH7m0e5tlx+CEsDmzrNy9+H/LuZJDzqYtBd vmdsH95zIJd542lxdCP0f11l6nT2tvUzInb/iPl0ubgZbQo/pOPaCtfiMlGOQIvH 0HbLtE5Mdh8XTXtRgTQqKzkjrzD0sjui1KksjWRSzEIIvPw8SADuEnAa9cM6xelL BM+/+iA+9t5eYYPD1u81KzGc31GSpzBL6vwfet26wpo4IV1PzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBxIspITKBwLBTkmFhAtW4WVWuZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZDRjYTctNmZiOS0z MzJhLTkyYmYtMWNmNmU3ZTVkOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANZa3ibOT5PFq1TAt1zIeIiRB4W7+iAt/ArhzRMb1gJPI7eJoZZ7G 4W5IoJcRF8F5vZw00yTzfSFpuyfpIZ55EAY1J7y1n/55oMnOr63y4hfxqyjBx26Y C7z2ymfeN689Vb57vrj1XpOD9pyLdY+TREl++q4ypi78roOSAJlUY5w3IdwCYo+9 xY7sM9cdjOWVhRIJWzAFg4mlDr10iYqx+uZPfsPMpMy9RpdXzmPIwWtSXyKAgxUx jce50pbKNslJ5e2ynjoe0rfenywPVcgbLK8mub3O/WDrgZen3Z2lFv2CR3o8U+0s JBL1gzzjsyq4OKc76TafTC9puPBfTs7wFQ== -----END CERTIFICATE-----Generated at Tue Nov 25 17:02:14 2025 by rpki-client