This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa File: b38de647-501d-397c-bfa1-f0f2ba6b6022.roa (raw, json) Hash identifier: Cs+mWstXpEGI4altwxVuKN1ABRDiBuI4lECyFWKbTMY= Subject key identifier: 47:B7:72:20:72:B5:9F:14:92:27:4C:3E:FD:A6:27:BB:28:94:EB:42 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A8292895C9B1D111C067C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:29:28:95:c9:b1:d1:11:c0:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=23e27afa-3ca2-417c-ac53-7417484a00ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:d4:ea:ec:b3:83:84:17:62:a8:3a:01:51: f1:4c:4e:67:0b:d9:41:df:74:ab:68:0d:a4:94:37: 7c:e0:db:c0:ab:00:87:80:b5:be:ec:ad:00:e8:cb: 4d:f7:56:be:15:88:6f:c8:fb:cb:04:86:23:7c:cf: 99:18:63:c3:78:32:04:74:50:48:4e:ef:b7:0e:f2: f4:8e:2c:02:a7:bf:e7:a3:ee:82:0d:3f:fa:d7:eb: 8e:5b:af:b5:b1:2b:b1:c6:e4:52:47:26:ba:0a:3f: f4:93:51:82:7d:9a:0f:28:6b:f8:1f:c2:54:7a:0a: c0:32:a0:65:3a:2c:67:00:af:ff:9c:ba:c7:09:06: d8:db:1f:36:51:d8:c4:b7:73:9c:57:5a:8c:ff:ba: 1a:d5:ab:66:b7:2e:6a:ee:8c:27:94:97:f9:cc:81: 01:bb:46:f3:7a:05:5e:03:e1:c4:54:c9:8e:a4:9f: 63:55:2b:ca:c8:a7:71:2e:af:05:10:65:f9:c7:f4: 3e:c0:ae:b1:d6:2f:da:7e:58:6e:b5:8d:65:0c:d7: 6c:d7:f6:6e:58:6c:2a:7f:1a:c3:db:9d:93:ab:4d: b2:f6:b9:c4:49:9f:35:99:61:bb:b6:c2:58:f2:52: a1:9a:f2:94:a4:15:de:f0:f8:62:6d:1e:09:a9:fd: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B7:72:20:72:B5:9F:14:92:27:4C:3E:FD:A6:27:BB:28:94:EB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b9:d0:da:26:19:a4:4f:c0:11:8b:e2:70:43:54:84:2a:59: f1:bb:98:9d:88:46:77:48:62:d0:4a:12:ef:20:52:c5:00:4c: ea:a5:ae:03:42:51:f7:14:0b:cb:c5:39:7f:a8:d7:0c:96:e5: 6f:23:bf:60:dc:67:45:18:ed:d6:6c:af:db:7a:44:5a:91:f1: c5:12:65:5a:9b:68:dd:40:9f:cb:bf:75:80:0d:64:49:da:72: 0f:4d:d0:d6:28:c1:c6:30:0f:55:22:66:03:eb:2f:e0:36:2f: fc:60:fd:01:54:a1:b3:41:14:1e:c5:1e:97:fa:b3:e1:61:55: 89:0e:59:96:6d:de:e2:9e:61:b1:93:f7:6d:73:e4:bb:c9:e4: 7a:9e:cc:3a:ec:12:25:0e:53:d3:8a:ef:68:96:f2:98:ab:4b: a7:07:1e:ee:c8:ab:ab:b8:ec:f4:84:55:74:d3:1b:37:e7:75: 1c:7d:cf:5f:12:1c:3c:e9:ed:88:e2:1e:94:2c:c2:31:c8:50: 68:64:0e:8b:ec:0a:95:a6:99:ce:9c:5f:a9:e4:00:59:bd:d5: 12:f1:74:a4:1b:aa:8d:02:87:d0:27:82:42:f2:a7:f0:8f:8f: 97:5b:16:f5:28:ea:7c:23:0f:31:33:86:89:ec:41:81:53:36: e0:0a:36:3d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCkolcmx0RHAZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjNlMjdhZmEtM2NhMi00MTdjLWFjNTMtNzQxNzQ4NGEwMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWrU6uyzg4QXYqg6AVHxTE5nC9lB33SraA2k lDd84NvAqwCHgLW+7K0A6MtN91a+FYhvyPvLBIYjfM+ZGGPDeDIEdFBITu+3DvL0 jiwCp7/no+6CDT/61+uOW6+1sSuxxuRSRya6Cj/0k1GCfZoPKGv4H8JUegrAMqBl OixnAK//nLrHCQbY2x82UdjEt3OcV1qM/7oa1atmty5q7ownlJf5zIEBu0bzegVe A+HEVMmOpJ9jVSvKyKdxLq8FEGX5x/Q+wK6x1i/aflhutY1lDNds1/ZuWGwqfxrD 252Tq02y9rnESZ81mWG7tsJY8lKhmvKUpBXe8PhibR4Jqf3r3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEe3ciBytZ8UkidMPv2mJ7solOtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjM4ZGU2NDctNTAxZC0z OTdjLWJmYTEtZjBmMmJhNmI2MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAebnQ2iYZpE/AEYvicENUhCpZ8buYnYhGd0hi0EoS7yBSxQBM6qWu A0JR9xQLy8U5f6jXDJblbyO/YNxnRRjt1myv23pEWpHxxRJlWpto3UCfy791gA1k SdpyD03Q1ijBxjAPVSJmA+sv4DYv/GD9AVShs0EUHsUel/qz4WFViQ5Zlm3e4p5h sZP3bXPku8nkep7MOuwSJQ5T04rvaJbymKtLpwce7sirq7js9IRVdNMbN+d1HH3P XxIcPOntiOIelCzCMchQaGQOi+wKlaaZzpxfqeQAWb3VEvF0pBuqjQKH0CeCQvKn 8I+Pl1sW9SjqfCMPMTOGiexBgVM24Ao2PQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:55 2026 by rpki-client