This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa File: c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa (raw, json) Hash identifier: /oWyx1GkM9+SuvV/mgk3vKkZC/IMJ1uR65FT+XSYBdU= Subject key identifier: 85:01:FF:A5:55:83:E5:C9:03:D2:01:A9:34:3D:55:B1:88:E4:0F:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A840532C517B5336730300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:e800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:40:53:2c:51:7b:53:36:73:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3b3aa32a-aeb4-4bea-97d8-07ef2985c517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:06:4f:19:23:e6:9d:ae:dd:3b:33:2b:fd: 55:71:ac:c9:58:8e:dc:63:6e:bd:fc:bb:58:76:c1: f0:cb:91:fe:05:08:09:48:ab:69:eb:c1:05:19:e6: 3e:97:36:29:0a:57:75:6e:f4:b4:61:35:7d:2d:94: ec:c0:87:77:b3:5e:d5:ee:a7:ec:16:8a:ef:b9:25: 21:d1:c6:04:1b:e4:b6:20:71:08:5d:b7:96:15:04: f3:05:34:eb:41:43:17:b5:ca:da:e6:50:20:34:66: 79:82:a6:5e:5c:ec:cc:be:20:59:ba:ef:05:92:b9: 95:01:fa:97:03:09:95:21:5b:22:f1:2b:18:f2:0b: 11:2a:d8:75:22:84:27:58:c6:11:64:4e:d5:74:af: f1:36:6a:23:80:92:0a:46:9d:ca:5e:55:a7:62:c6: b1:75:99:66:e4:20:b3:a5:eb:e7:ad:05:e4:1f:de: 33:c9:f5:3b:e9:dd:82:45:9b:ed:92:65:dc:83:5c: 69:a9:43:73:2a:81:69:1c:e9:d1:d4:7b:c2:2f:65: d2:6c:77:2e:a4:1a:4e:9f:97:fb:9b:68:3f:f6:84: 87:77:58:6f:c6:d6:11:55:c7:7b:05:2d:dc:f9:7c: 7c:cd:f3:a1:2b:e2:ad:4c:cc:d9:91:d7:1e:e1:8c: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:FF:A5:55:83:E5:C9:03:D2:01:A9:34:3D:55:B1:88:E4:0F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:e800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:66:f7:8b:ce:ec:af:ee:8c:50:96:c5:10:24:d3:bd:64:41: c9:7d:05:3c:53:1f:8d:7d:e8:a1:be:d7:7b:b6:7a:ad:37:f5: 5a:42:16:54:24:90:db:9b:ec:07:dc:cd:e1:5c:79:2d:88:40: 42:55:36:3b:f1:48:dd:fb:27:16:f8:9d:09:69:6c:4c:3a:19: f3:4f:c0:ed:1f:16:45:f7:99:39:97:76:1a:43:cd:b7:f5:be: 0c:19:a3:3a:da:9f:27:cf:76:20:e0:1a:f4:f3:c7:5b:8b:2b: 12:d0:ba:cf:f4:58:37:a0:bb:87:80:c4:ea:e3:c6:18:85:d3: a3:46:31:cd:d9:a9:10:ae:59:91:f5:6a:4e:5e:f0:41:23:33: d8:c3:02:f4:71:4f:48:06:72:c9:49:60:ba:53:4f:a1:97:f2: 7c:f3:80:5a:cf:ff:44:a2:55:1f:69:0e:6c:34:02:63:fe:b7: 91:51:b9:b9:b0:6d:74:18:0a:55:9d:f7:61:99:c3:55:42:d7: 6f:91:be:13:85:30:43:7c:23:12:29:3b:1f:f8:e3:0b:c8:14: e1:03:d8:40:4e:c7:24:fd:5c:3a:da:e6:73:67:da:a0:0c:09: d8:73:bb:d9:a2:1d:c1:40:f6:85:51:0f:ee:52:26:de:96:4b: a1:c8:06:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqEBTLFF7UzZzAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2IzYWEzMmEtYWViNC00YmVhLTk3ZDgtMDdlZjI5ODVjNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzQGTxkj5p2u3TszK/1VcazJWI7cY269/LtY dsHwy5H+BQgJSKtp68EFGeY+lzYpCld1bvS0YTV9LZTswId3s17V7qfsForvuSUh 0cYEG+S2IHEIXbeWFQTzBTTrQUMXtcra5lAgNGZ5gqZeXOzMviBZuu8FkrmVAfqX AwmVIVsi8SsY8gsRKth1IoQnWMYRZE7VdK/xNmojgJIKRp3KXlWnYsaxdZlm5CCz pevnrQXkH94zyfU76d2CRZvtkmXcg1xpqUNzKoFpHOnR1HvCL2XSbHcupBpOn5f7 m2g/9oSHd1hvxtYRVcd7BS3c+Xx8zfOhK+KtTMzZkdce4YxgPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIUB/6VVg+XJA9IBqTQ9VbGI5A95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzljNGU5NTgtNmVjYi0z ZTUzLTgzYjctMjhhNWZmNzQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiugw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjmb3i87sr+6MUJbFECTTvWRByX0FPFMfjX3oob7Xe7Z6rTf1WkIW VCSQ25vsB9zN4Vx5LYhAQlU2O/FI3fsnFvidCWlsTDoZ80/A7R8WRfeZOZd2GkPN t/W+DBmjOtqfJ892IOAa9PPHW4srEtC6z/RYN6C7h4DE6uPGGIXTo0YxzdmpEK5Z kfVqTl7wQSMz2MMC9HFPSAZyyUlgulNPoZfyfPOAWs//RKJVH2kObDQCY/63kVG5 ubBtdBgKVZ33YZnDVULXb5G+E4UwQ3wjEik7H/jjC8gU4QPYQE7HJP1cOtrmc2fa oAwJ2HO72aIdwUD2hVEP7lIm3pZLocgGsw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:57:11 2026 by rpki-client