This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb7316a3-573a-3326-971a-8d7373172d9a.roa File: cb7316a3-573a-3326-971a-8d7373172d9a.roa (raw, json) Hash identifier: Wo4QckI3BS8WIOKeCrzENGwPpX3jyTtVUYOr9wGq1Bk= Subject key identifier: D9:2E:82:5A:D1:A9:07:62:E7:B6:A5:70:B7:81:7B:C6:D0:C5:7F:DB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4871DD35490556FFD8978280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb7316a3-573a-3326-971a-8d7373172d9a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:dd:35:49:05:56:ff:d8:97:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=0613258d-8ca2-4877-a1f0-5527d47b3337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:49:5d:a8:c2:7c:37:b4:4a:75:8f:cc:26: d6:31:7e:ca:a2:4b:1c:6c:77:3f:b2:cd:01:02:e0: 9d:c8:4f:9a:c2:a3:e4:d0:fc:f5:dd:34:13:f5:41: 89:27:db:31:70:e6:55:57:28:57:35:d1:3b:0e:b7: b3:36:f2:59:fd:f0:8b:f8:69:52:6c:a7:36:25:56: 52:71:5e:0c:32:da:fd:70:09:81:d3:69:2d:af:2e: f9:5e:5f:2d:f1:31:07:6f:a2:6b:ac:f4:1d:34:55: 1e:30:1a:9e:d7:94:c8:ea:6c:a1:16:9c:37:67:69: 27:c9:a5:c3:7b:55:db:78:e6:b4:56:da:7a:72:08: 22:e0:76:88:d2:98:1e:68:77:bc:b7:50:47:26:b5: 57:52:a5:61:70:7c:b6:4a:7b:50:b1:aa:c0:cf:aa: c5:65:f6:1e:de:d8:ce:e4:85:04:72:e7:9d:32:23: 57:51:ab:1f:36:2e:87:f9:30:1d:c1:6c:f5:86:28: 62:eb:8c:e5:d8:a0:ce:fa:9d:b4:20:b7:0c:eb:22: bb:fe:45:5d:72:99:12:b3:10:f0:e5:9e:e6:c1:9d: 4f:b6:2d:02:94:74:73:13:74:b4:7f:00:b2:5b:99: 07:ad:fa:a2:ea:88:c7:03:2c:c6:26:dd:39:17:d1: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:82:5A:D1:A9:07:62:E7:B6:A5:70:B7:81:7B:C6:D0:C5:7F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb7316a3-573a-3326-971a-8d7373172d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ea:cb:f2:25:50:93:ef:13:c0:0f:08:be:7d:ed:e1:d8:67: 8e:ce:98:09:75:f9:3f:68:2a:01:6e:59:2e:98:3d:bf:77:f1: f5:52:be:23:97:4a:bc:ab:07:1c:80:0b:66:42:54:71:73:f4: 1c:23:87:e5:b4:7d:34:86:03:58:47:f2:38:9a:23:aa:e7:dc: a0:c9:91:9a:b6:0e:d5:a7:0e:e0:69:08:8b:e9:08:15:cd:14: 97:24:2c:1b:b1:e0:60:35:61:22:81:b4:db:90:9d:72:31:75: 07:bc:ec:2c:1a:28:b0:37:7a:50:27:9a:28:72:1c:55:a6:07: a3:c1:86:cb:52:09:13:c8:5c:8b:93:41:26:78:51:c8:df:bf: f4:c4:00:91:94:78:b0:c0:53:48:ed:78:e8:bf:fd:f4:e4:d3: c9:52:f0:f8:41:fe:d6:5e:89:8c:f3:4a:81:29:7f:86:81:72: b5:f7:8c:9a:b8:b3:f6:87:46:c4:7f:71:e6:a7:af:c7:3f:dd: 57:e4:29:a8:c1:3a:72:bc:de:ff:98:00:26:16:10:89:99:89: dd:ef:9b:31:2c:22:46:2e:28:cc:8d:8a:31:b8:46:9a:e1:f6: 54:1a:8b:76:57:2f:27:4e:19:ab:26:51:8b:6e:2b:2f:13:45: 95:42:bd:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExIcd01SQVW/9iXgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MDYxMzI1OGQtOGNhMi00ODc3LWExZjAtNTUyN2Q0N2IzMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPNJXajCfDe0SnWPzCbWMX7KokscbHc/ss0B AuCdyE+awqPk0Pz13TQT9UGJJ9sxcOZVVyhXNdE7DrezNvJZ/fCL+GlSbKc2JVZS cV4MMtr9cAmB02ktry75Xl8t8TEHb6JrrPQdNFUeMBqe15TI6myhFpw3Z2knyaXD e1XbeOa0Vtp6cggi4HaI0pgeaHe8t1BHJrVXUqVhcHy2SntQsarAz6rFZfYe3tjO 5IUEcuedMiNXUasfNi6H+TAdwWz1hihi64zl2KDO+p20ILcM6yK7/kVdcpkSsxDw 5Z7mwZ1Pti0ClHRzE3S0fwCyW5kHrfqi6ojHAyzGJt05F9FQ4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNkuglrRqQdi57alcLeBe8bQxX/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2I3MzE2YTMtNTczYS0z MzI2LTk3MWEtOGQ3MzczMTcyZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQurL8iVQk+8TwA8Ivn3t4dhnjs6YCXX5P2gqAW5ZLpg9v3fx9VK+ I5dKvKsHHIALZkJUcXP0HCOH5bR9NIYDWEfyOJojqufcoMmRmrYO1acO4GkIi+kI Fc0UlyQsG7HgYDVhIoG025CdcjF1B7zsLBoosDd6UCeaKHIcVaYHo8GGy1IJE8hc i5NBJnhRyN+/9MQAkZR4sMBTSO146L/99OTTyVLw+EH+1l6JjPNKgSl/hoFytfeM mriz9odGxH9x5qevxz/dV+QpqME6crze/5gAJhYQiZmJ3e+bMSwiRi4ozI2KMbhG muH2VBqLdlcvJ04ZqyZRi24rLxNFlUK98A== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:57 2026 by rpki-client