This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json) Hash identifier: C4pB6rg9NNidCtWL1lNVPNAFF2uQu31Ax7FCMbcZSfo= Subject key identifier: C1:D9:89:6B:CA:79:1B:5C:4F:10:F7:69:24:C9:C2:86:D8:4B:A1:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A8253E3A1DA40B4DFD4100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:25:3e:3a:1d:a4:0b:4d:fd:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=22d4c7b9-1d73-42d1-84a4-cb2e99f54682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:18:a9:53:12:73:30:dd:93:9c:fc:c4:96: 6b:5a:3d:11:9c:56:50:ec:8f:71:75:8c:67:98:41: 74:36:e4:84:f0:4a:33:0f:5f:b3:99:44:0e:1b:ee: 70:91:bd:0c:f7:7e:70:2c:eb:eb:40:d6:2a:fa:02: 1a:8f:26:f3:48:aa:f0:88:ad:62:9b:4d:df:18:ee: 7f:7b:b8:b1:ed:6a:9c:c1:bf:18:3e:7a:93:60:d0: 9a:78:b8:49:cb:78:48:e7:78:49:d8:f6:cb:4f:41: 69:36:5b:b6:a2:86:3c:f5:ad:4b:b7:9f:87:24:42: f0:ee:91:60:da:10:1f:32:9e:b8:3c:15:27:20:be: 87:6b:08:90:d9:49:df:ec:5c:0e:00:c0:a2:08:3a: f1:b9:db:72:81:25:8d:44:a6:d7:49:9f:03:03:60: 70:06:61:49:cd:91:65:50:bc:9c:d1:d6:e9:37:80: 43:42:54:35:fd:22:f4:3d:fd:d2:ff:f6:d9:36:ec: 4e:e8:11:de:bb:04:ff:87:d9:5f:46:5d:8c:03:bb: 24:ad:e2:a1:3d:8e:c4:5f:f5:83:06:6e:97:3d:a3: 6e:27:3c:fd:13:1e:2f:86:98:d6:d4:0a:2c:93:89: 11:b0:0c:1e:bf:bc:24:3b:21:00:a3:96:50:6d:94: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:89:6B:CA:79:1B:5C:4F:10:F7:69:24:C9:C2:86:D8:4B:A1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f6:31:7b:cd:47:c0:65:f6:50:98:93:e2:11:6b:72:02:39: e8:a4:52:91:d1:b6:48:0b:e5:53:51:7d:c1:65:43:89:a3:d4: 9c:02:ea:6d:17:f8:04:77:64:49:fb:6d:cd:22:9b:87:95:c4: 41:af:a2:48:2a:a6:3d:26:29:a4:67:93:cf:97:d2:af:d3:91: 8e:99:f0:f0:b1:5a:48:cd:ff:8e:71:2e:49:4c:df:f7:f7:35: 53:59:40:f4:48:48:fe:fd:36:25:1c:be:c2:2d:ca:ed:c4:d2: 34:3c:ec:92:a8:31:f1:81:4e:4d:cf:b6:1c:3d:07:ab:2b:29: ad:71:0a:b2:d2:ef:55:6a:ec:57:49:65:72:ba:df:6d:ff:01: 25:a5:37:23:a5:58:93:14:24:72:80:41:8c:20:f7:a8:fe:36: bb:04:f4:15:f0:59:fc:f2:30:b5:1d:00:85:76:3e:ba:ab:da: c2:77:10:fb:fa:35:4c:54:23:2b:c0:38:4a:42:67:d8:9f:d7: 73:e2:1c:2c:f2:fc:78:1c:4b:b1:3b:40:48:8a:4b:87:58:04: a5:2a:6e:73:ed:75:d7:c6:36:5f:0f:92:26:bf:8a:ae:e1:62: 56:39:72:02:ca:da:30:f9:06:73:3c:d2:7e:f9:a3:b8:5c:33: be:a4:50:fb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCU+Oh2kC039QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjJkNGM3YjktMWQ3My00MmQxLTg0YTQtY2IyZTk5ZjU0NjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUwYqVMSczDdk5z8xJZrWj0RnFZQ7I9xdYxn mEF0NuSE8EozD1+zmUQOG+5wkb0M935wLOvrQNYq+gIajybzSKrwiK1im03fGO5/ e7ix7Wqcwb8YPnqTYNCaeLhJy3hI53hJ2PbLT0FpNlu2ooY89a1Lt5+HJELw7pFg 2hAfMp64PBUnIL6HawiQ2Unf7FwOAMCiCDrxudtygSWNRKbXSZ8DA2BwBmFJzZFl ULyc0dbpN4BDQlQ1/SL0Pf3S//bZNuxO6BHeuwT/h9lfRl2MA7skreKhPY7EX/WD Bm6XPaNuJzz9Ex4vhpjW1Aosk4kRsAwev7wkOyEAo5ZQbZR4AQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHZiWvKeRtcTxD3aSTJwobYS6H7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZjU0MzEtNWZjZS0z NmQwLTg0YTgtMGExOWY3YTAzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX/Yxe81HwGX2UJiT4hFrcgI56KRSkdG2SAvlU1F9wWVDiaPUnALq bRf4BHdkSfttzSKbh5XEQa+iSCqmPSYppGeTz5fSr9ORjpnw8LFaSM3/jnEuSUzf 9/c1U1lA9EhI/v02JRy+wi3K7cTSNDzskqgx8YFOTc+2HD0HqysprXEKstLvVWrs V0llcrrfbf8BJaU3I6VYkxQkcoBBjCD3qP42uwT0FfBZ/PIwtR0AhXY+uqvawncQ +/o1TFQjK8A4SkJn2J/Xc+IcLPL8eBxLsTtASIpLh1gEpSpuc+1118Y2Xw+SJr+K ruFiVjlyAsraMPkGczzSfvmjuFwzvqRQ+w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:53 2026 by rpki-client