This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa
File: ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa (raw, json)
Hash identifier: /E8mpruEfxW82YUlcOLkYlopfid2bsRgvcggMb5x9Wc=
Subject key identifier: B6:A7:73:45:A8:DE:C9:82:35:1B:40:E4:7E:CD:8E:3B:B2:E2:EF:52
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C42DBDE8E334AB6C6DCD33580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e8a:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:de:8e:33:4a:b6:c6:dc:d3:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=e491b4dd-0144-4668-97de-c44e278d5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:ff:48:68:6c:a8:69:39:9c:38:76:fe:f3:
0a:d1:97:bd:db:2d:36:89:03:77:87:4b:87:74:59:
46:23:cb:de:48:22:44:cd:40:87:b0:76:65:48:e9:
02:0f:10:59:be:41:40:19:08:db:9b:3c:51:c6:12:
32:a7:3a:b8:c9:c5:73:11:3e:90:00:1d:2a:cc:86:
14:a2:a7:fd:0c:6d:c7:c7:17:73:e2:93:55:46:c8:
21:9e:72:a9:a9:da:63:ad:48:45:47:54:ed:63:ec:
f6:1e:ca:a1:c6:89:57:3d:2d:95:83:23:1d:69:a7:
44:93:e5:fa:82:80:fc:f8:56:b2:73:09:56:d2:70:
b7:8c:31:d7:34:8e:55:71:cf:04:11:62:2a:8f:5a:
2a:31:21:a6:76:e6:2e:e1:92:c6:3d:92:b5:76:9b:
5b:81:4f:6a:4b:cf:07:a2:41:0c:43:26:d5:5d:9d:
8a:92:bb:d9:fc:db:12:a6:66:22:19:c1:3b:47:db:
ff:55:b0:60:14:f3:ee:f4:38:f9:7d:73:45:89:30:
4e:0e:6c:cc:09:33:fe:40:6d:d0:87:35:84:18:18:
6b:00:ea:e0:dd:0b:1d:90:3e:0d:36:ce:b4:1a:85:
6a:8e:b5:1f:4a:56:97:ac:f2:6c:89:97:e0:b9:c0:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:73:45:A8:DE:C9:82:35:1B:40:E4:7E:CD:8E:3B:B2:E2:EF:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:1800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d2:da:ae:93:4d:ce:1a:77:ef:f8:d1:e2:a2:c2:0e:fd:57:
6c:61:ee:a7:a2:23:c7:11:4d:38:1d:f2:9c:49:88:19:d6:1d:
24:fb:b1:d6:85:ba:64:4e:2d:d8:20:7d:b6:1f:ba:74:81:0b:
3a:76:bd:da:e0:53:ca:b5:d4:17:8a:8b:13:b1:3b:45:25:e1:
44:cf:9b:7c:bf:65:e8:39:e2:08:e6:7f:a4:9f:95:e1:3f:50:
bc:8e:92:c8:79:e5:e8:21:b4:ba:1c:54:cc:f1:83:4c:f9:d2:
4a:8c:1b:fb:91:7e:b9:53:81:19:59:2a:f5:98:82:53:72:ed:
ee:99:12:26:99:d5:6b:6d:73:70:3e:ed:a5:3a:07:db:fd:1a:
a2:d1:bc:95:7b:21:82:e7:06:76:88:26:c3:0d:36:d9:d6:99:
35:8d:79:39:e0:8c:b5:05:97:48:1d:b7:00:83:b3:2c:c4:b5:
ba:8c:31:7a:33:f0:e9:b2:9e:1b:28:b3:c4:b8:01:04:8b:2f:
d7:d0:9e:51:2a:a3:71:c4:70:ac:a2:ff:0f:86:9f:9b:af:ee:
a5:b2:65:64:df:c1:4f:67:40:a6:0a:6c:16:d5:c0:42:7e:34:
67:43:b0:3d:87:91:d6:d9:44:44:de:49:44:ae:d0:90:89:21:
6f:24:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:27:49 2026 by rpki-client