This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa
File: b676ee1c-2986-3918-a733-65b7aa3030e6.roa (raw, json)
Hash identifier: nTBNmVz+FV5me0/j7sOkgPUfbeNrgnEeP2WRsycshNw=
Subject key identifier: 83:DA:89:85:5D:43:B5:8D:1C:19:76:28:BC:CF:69:44:A4:58:A0:38
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C48712D4F23AE44A3A85F6500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8b:6c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:2d:4f:23:ae:44:a3:a8:5f:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=b7aad3f4-3586-41c9-b086-e448af3dbaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:d5:fb:32:46:0d:23:d7:68:71:98:8f:6f:
db:03:b5:fa:c2:a7:b5:63:fa:f8:3c:84:6a:de:2d:
30:12:8a:1f:8d:81:4d:9f:46:11:20:ef:21:1c:b2:
7f:4f:ab:af:03:9b:04:74:b1:34:ba:b9:b6:4c:c1:
35:f7:90:3d:f3:de:6c:6f:45:64:8b:7f:4e:70:57:
da:04:5b:ba:84:34:ed:8f:7f:7b:3e:d7:1e:c1:03:
f7:8e:a4:30:22:35:df:0f:82:0b:0a:1b:b7:b3:c9:
32:7b:38:75:9c:34:6b:3a:93:31:b0:42:f9:9c:95:
78:d9:40:c2:cd:f5:96:44:79:af:75:6d:59:06:45:
2c:0f:01:2b:70:c1:16:94:1d:28:e3:a5:07:f7:92:
e1:cd:17:fc:58:3c:22:5b:13:39:a4:ab:cd:41:79:
d4:ca:08:93:f9:e6:d1:f7:7b:2c:71:00:f7:49:6f:
78:ea:0e:7c:b1:24:de:6c:5d:58:ef:da:e3:fb:d2:
35:51:ad:70:99:e8:8a:b0:69:61:04:e6:21:bd:10:
42:a7:a6:b3:80:f7:f8:07:49:64:c7:29:4c:7d:84:
3e:1d:2b:04:3a:85:5a:ce:cb:84:d7:71:60:9e:94:
4a:cc:a0:ca:91:55:64:f2:6e:68:94:97:18:d4:da:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:89:85:5D:43:B5:8D:1C:19:76:28:BC:CF:69:44:A4:58:A0:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:6c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:02:e1:b9:aa:04:9d:47:05:84:a0:a8:52:66:f9:1c:ef:f2:
68:bf:d5:bd:f4:3e:35:06:04:c8:97:d0:5b:a2:05:4c:45:4c:
e4:5a:7b:b0:c1:e3:07:12:83:1e:ab:03:e4:01:36:c7:40:d3:
e1:b7:db:08:95:e6:31:6c:78:f1:6d:db:e5:95:b7:ec:ee:41:
6c:32:9e:f7:13:29:63:5d:9b:a8:1a:28:2b:9d:46:b4:b6:88:
33:6a:01:e3:01:35:1b:8e:22:33:3b:cd:f7:43:66:26:00:84:
91:a0:fb:61:80:cb:de:40:b5:f6:be:88:9c:7d:ad:7a:0a:98:
24:d8:6a:e5:fa:78:5d:e6:f3:4d:f6:c6:0b:03:0f:f7:a0:35:
77:91:d3:b1:ac:d8:6d:a2:24:60:51:4e:b0:63:5e:1d:31:1a:
d9:d1:8d:01:74:4c:36:34:42:f5:3f:f0:73:6e:33:97:77:86:
70:68:7e:05:72:47:32:b8:82:7e:47:50:06:73:e5:3c:3c:e0:
36:a0:9e:83:e8:b1:cf:6c:c0:b8:36:5a:92:17:d3:fb:e8:5a:
ec:d1:66:ba:9b:87:d8:25:67:68:89:ca:2a:07:c9:f4:e1:77:
bb:ce:d1:93:58:17:54:bf:06:ef:dc:61:52:0b:c0:cc:c6:52:
62:37:ea:8a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcS1PI65Eo6hfZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk
YjdhYWQzZjQtMzU4Ni00MWM5LWIwODYtZTQ0OGFmM2RiYWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsvV+zJGDSPXaHGYj2/bA7X6wqe1Y/r4PIRq
3i0wEoofjYFNn0YRIO8hHLJ/T6uvA5sEdLE0urm2TME195A9895sb0Vki39OcFfa
BFu6hDTtj397PtcewQP3jqQwIjXfD4ILChu3s8kyezh1nDRrOpMxsEL5nJV42UDC
zfWWRHmvdW1ZBkUsDwErcMEWlB0o46UH95LhzRf8WDwiWxM5pKvNQXnUygiT+ebR
93sscQD3SW946g58sSTebF1Y79rj+9I1Ua1wmeiKsGlhBOYhvRBCp6azgPf4B0lk
xylMfYQ+HSsEOoVazsuE13FgnpRKzKDKkVVk8m5olJcY1NrpuQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIPaiYVdQ7WNHBl2KLzPaUSkWKA4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjY3NmVlMWMtMjk4Ni0z
OTE4LWE3MzMtNjViN2FhMzAzMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABwLhuaoEnUcFhKCoUmb5HO/yaL/VvfQ+NQYEyJfQW6IFTEVM5Fp7
sMHjBxKDHqsD5AE2x0DT4bfbCJXmMWx48W3b5ZW37O5BbDKe9xMpY12bqBooK51G
tLaIM2oB4wE1G44iMzvN90NmJgCEkaD7YYDL3kC19r6InH2tegqYJNhq5fp4Xebz
TfbGCwMP96A1d5HTsazYbaIkYFFOsGNeHTEa2dGNAXRMNjRC9T/wc24zl3eGcGh+
BXJHMriCfkdQBnPlPDzgNqCeg+ixz2zAuDZakhfT++ha7NFmupuH2CVnaInKKgfJ
9OF3u87Rk1gXVL8G79xhUgvAzMZSYjfqig==
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:29:02 2026 by rpki-client