This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa File: ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa (raw, json) Hash identifier: obP4ukiUG/fvhk5cn8Vo60ddW8lEzKmzdS0OU+zMQmo= Subject key identifier: 17:94:82:C1:91:DA:01:85:D4:38:06:41:97:32:6F:52:C8:61:1D:0F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C50D195C7DAE35EB62DD74C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e87:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:95:c7:da:e3:5e:b6:2d:d7:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=84c5cdfe-2cc7-4a36-9b1a-cb170b288338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:35:cf:16:37:d3:a3:b0:eb:4b:89:4d:f5: b5:56:90:5e:0d:ef:52:23:b5:e2:e9:a1:56:82:2c: e2:af:fd:00:65:3f:01:8e:23:af:e0:ea:a6:79:73: 54:f7:85:b7:3d:df:24:d7:c2:68:71:79:2c:36:a8: 6f:58:35:7f:f1:4f:0d:37:7c:a9:02:f4:58:1b:80: c9:d7:0b:65:81:da:d3:e3:c3:44:cd:13:65:3c:10: 0e:ef:cd:b6:58:a9:a6:18:e7:96:ea:82:36:59:16: eb:f4:51:9d:4a:63:8a:d1:cd:65:1f:e6:cd:be:67: 06:e3:e5:a1:e6:28:b3:18:50:30:35:0b:93:8b:a1: a6:f3:45:18:7d:c9:a2:84:47:fb:7c:db:27:37:1e: 58:cd:6f:a5:d6:ec:9d:81:f2:b9:29:01:74:0f:09: e3:6d:4c:b3:61:1a:e8:45:49:da:29:37:73:ce:77: 3a:00:c7:ed:bf:25:80:4c:94:cc:d2:9d:c6:14:fb: bf:45:ed:42:9c:50:e8:74:fc:d3:f2:de:01:e4:0e: 18:3a:da:84:15:d0:dc:61:b4:09:e2:3d:d7:4d:be: 2c:74:da:e2:e0:21:6d:7c:52:09:51:d5:36:ac:aa: 0e:6f:24:37:04:a3:8a:a8:ae:09:06:aa:4f:61:b1: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:82:C1:91:DA:01:85:D4:38:06:41:97:32:6F:52:C8:61:1D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c4:1b:d1:5f:27:7c:96:6b:26:64:21:84:11:51:53:68:dc: ac:09:b1:1e:90:94:5e:fc:b5:2c:68:fb:44:56:f0:67:d6:b3: f5:0a:ac:c5:7a:c6:40:a2:94:b3:d1:f0:71:c3:17:f4:e8:90: b2:e6:17:55:10:82:a5:e6:84:0c:e8:71:8c:51:da:8d:8c:18: 01:da:0a:25:9c:26:a2:92:75:c8:72:01:85:7c:61:5c:e9:b8: 54:f7:4e:83:86:6c:48:af:c9:0d:f4:88:85:f6:3d:b9:ea:d9: bb:0e:e1:dc:3d:d5:2b:e1:c8:8c:8a:ff:4d:af:a4:58:f4:71: e0:8f:87:a7:85:b8:ac:80:81:ca:ab:7d:27:31:81:cc:68:10: 70:f1:ee:42:0d:6e:3d:c3:b1:bc:b6:86:5d:84:96:08:e9:6f: 96:b4:e8:8d:b8:69:29:ab:b2:c4:40:d6:0b:55:99:6c:7f:0d: ec:63:51:9a:b4:bc:ff:65:8d:a6:c9:2d:76:8b:c8:1b:59:2c: b0:7b:b9:ec:d2:0f:a7:34:4c:e5:c5:e0:b5:eb:b0:03:0f:09: 15:d3:67:96:68:a9:f4:98:99:b0:b1:a0:32:37:88:9e:cf:90: e9:42:f6:52:a6:fb:1a:7e:19:48:f4:20:bd:90:6b:d7:6c:7d: e3:3e:4e:0b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0ZXH2uNeti3XTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODRjNWNkZmUtMmNjNy00YTM2LTliMWEtY2IxNzBiMjg4MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkA1zxY306Ow60uJTfW1VpBeDe9SI7Xi6aFW gizir/0AZT8BjiOv4OqmeXNU94W3Pd8k18JocXksNqhvWDV/8U8NN3ypAvRYG4DJ 1wtlgdrT48NEzRNlPBAO7822WKmmGOeW6oI2WRbr9FGdSmOK0c1lH+bNvmcG4+Wh 5iizGFAwNQuTi6Gm80UYfcmihEf7fNsnNx5YzW+l1uydgfK5KQF0DwnjbUyzYRro RUnaKTdzznc6AMftvyWATJTM0p3GFPu/Re1CnFDodPzT8t4B5A4YOtqEFdDcYbQJ 4j3XTb4sdNri4CFtfFIJUdU2rKoObyQ3BKOKqK4JBqpPYbEEwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBeUgsGR2gGF1DgGQZcyb1LIYR0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2UyYzYxNzItZmNmMC0z Y2IwLWI2M2MtMzJkYTRhMThkZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOMQb0V8nfJZrJmQhhBFRU2jcrAmxHpCUXvy1LGj7RFbwZ9az9Qqs xXrGQKKUs9HwccMX9OiQsuYXVRCCpeaEDOhxjFHajYwYAdoKJZwmopJ1yHIBhXxh XOm4VPdOg4ZsSK/JDfSIhfY9uerZuw7h3D3VK+HIjIr/Ta+kWPRx4I+Hp4W4rICB yqt9JzGBzGgQcPHuQg1uPcOxvLaGXYSWCOlvlrTojbhpKauyxEDWC1WZbH8N7GNR mrS8/2WNpsktdovIG1kssHu57NIPpzRM5cXgteuwAw8JFdNnlmip9JiZsLGgMjeI ns+Q6UL2Uqb7Gn4ZSPQgvZBr12x94z5OCw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:18 2026 by rpki-client