This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa File: cc4ac44a-2d8c-3d40-884e-7009af004650.roa (raw, json) Hash identifier: ze4E5qpVtEQdp1J+gOGdkVHBmm61250ILuWKb/z7sd8= Subject key identifier: AF:EE:AF:7C:51:F7:18:A8:C3:A3:50:40:91:DE:A2:93:12:6D:97:A8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A8452D240AF4E086C90E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:45:2d:24:0a:f4:e0:86:c9:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=07fea577-a14b-43a0-bbed-e616773ec975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:a5:ef:9a:18:ed:8e:d3:a9:bb:2a:24:bd: 5d:a9:e8:96:23:ec:26:cf:0f:9e:d4:2b:b6:2f:94: d4:4b:c6:a3:74:05:22:5d:63:d0:a6:03:5b:d5:cc: 77:25:34:d7:ed:f6:65:61:01:e7:19:09:69:9e:73: c9:ca:41:66:e1:bf:12:c3:d4:80:f4:6a:1f:15:3f: 41:a0:8f:81:ad:65:af:a6:10:35:46:a3:83:56:ac: dd:65:20:60:30:c5:d1:97:1c:c7:2c:e2:a4:b8:81: 63:3e:59:35:44:3b:bd:53:1a:c9:96:cb:44:8d:0e: 7f:f7:0e:dc:16:91:48:5e:4d:36:f8:04:a0:80:59: 29:b2:59:35:ca:85:5c:5a:d2:a0:59:65:a5:03:72: 3d:98:61:c1:10:80:01:8d:8e:c2:19:ec:33:75:e2: f7:e4:0b:a1:32:54:76:8f:90:a7:24:e5:53:a4:cb: a1:3d:6d:43:10:38:e7:71:d6:60:ad:8b:00:82:45: c6:9b:ba:30:58:04:3a:b3:94:c1:a4:bd:3b:18:be: a3:72:09:77:e4:cb:bc:64:52:7a:7f:b1:15:af:33: bb:28:4a:2c:8f:e3:39:98:98:a5:0d:bd:d3:3a:2f: cc:2e:b3:a5:10:9f:08:61:53:df:73:c0:90:12:da: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EE:AF:7C:51:F7:18:A8:C3:A3:50:40:91:DE:A2:93:12:6D:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:99:0a:c6:03:39:73:60:a9:72:30:66:a9:09:27:44:50:f3: de:11:33:b7:40:26:8d:b8:bb:e3:3c:67:be:b3:32:5a:57:9c: d5:7b:81:0c:03:d3:0f:3f:c8:74:c9:0a:3e:8e:a4:5c:0b:9b: 86:28:6a:bd:6a:91:55:bb:bd:05:56:7d:55:d6:eb:c6:ff:1a: 63:d5:dd:22:ea:f9:99:3a:61:85:3b:99:3b:67:3b:ae:d2:ed: dd:06:64:5a:e8:2f:a8:82:98:3a:79:18:2e:36:9c:56:4c:b7: 90:e2:14:d6:71:81:8f:0f:b8:7d:bb:c7:11:f8:e6:52:e8:a6: d1:f3:15:fe:e4:8a:6d:ef:52:ba:1c:d2:6f:0e:74:98:38:e4: 78:64:4b:a7:e3:9a:d1:cd:0c:b4:37:06:04:a7:5d:d2:61:80: f8:a1:e0:0f:e1:21:76:f0:2f:f1:bf:93:c9:e2:a6:2b:ae:0c: e7:06:e2:9e:89:16:65:bc:03:8d:15:d3:f7:14:65:2e:f9:dd: 95:35:c1:68:93:8f:77:4c:54:7c:5b:f0:c3:60:c1:f0:38:b4: 44:d7:8f:2e:19:87:bf:3a:2b:94:26:1e:60:d4:47:43:a9:32: 9e:cf:8d:79:b8:4c:64:4a:e4:f5:b4:2d:07:63:47:a2:ce:e1: dd:63:00:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqEUtJAr04IbJDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MDdmZWE1NzctYTE0Yi00M2EwLWJiZWQtZTYxNjc3M2VjOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCGl75oY7Y7TqbsqJL1dqeiWI+wmzw+e1Cu2 L5TUS8ajdAUiXWPQpgNb1cx3JTTX7fZlYQHnGQlpnnPJykFm4b8Sw9SA9GofFT9B oI+BrWWvphA1RqODVqzdZSBgMMXRlxzHLOKkuIFjPlk1RDu9UxrJlstEjQ5/9w7c FpFIXk02+ASggFkpslk1yoVcWtKgWWWlA3I9mGHBEIABjY7CGewzdeL35AuhMlR2 j5CnJOVTpMuhPW1DEDjncdZgrYsAgkXGm7owWAQ6s5TBpL07GL6jcgl35Mu8ZFJ6 f7EVrzO7KEosj+M5mJilDb3TOi/MLrOlEJ8IYVPfc8CQEtogdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK/ur3xR9xiow6NQQJHeopMSbZeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2M0YWM0NGEtMmQ4Yy0z ZDQwLTg4NGUtNzAwOWFmMDA0NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuitgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO5kKxgM5c2CpcjBmqQknRFDz3hEzt0Amjbi74zxnvrMyWlec1XuB DAPTDz/IdMkKPo6kXAubhihqvWqRVbu9BVZ9Vdbrxv8aY9XdIur5mTphhTuZO2c7 rtLt3QZkWugvqIKYOnkYLjacVky3kOIU1nGBjw+4fbvHEfjmUuim0fMV/uSKbe9S uhzSbw50mDjkeGRLp+Oa0c0MtDcGBKdd0mGA+KHgD+EhdvAv8b+TyeKmK64M5wbi nokWZbwDjRXT9xRlLvndlTXBaJOPd0xUfFvww2DB8Di0RNePLhmHvzorlCYeYNRH Q6kyns+NebhMZErk9bQtB2NHos7h3WMABA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:29:01 2026 by rpki-client