This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa File: cf819398-649a-3a62-9382-4ab483cf9621.roa (raw, json) Hash identifier: elkJBcnysQOxJbxtRZp9VvA1xNv00spglWz3m8UKMTc= Subject key identifier: 4A:A6:F1:BC:0D:8F:DD:47:CE:FC:A1:1F:2D:72:A4:E8:50:53:98:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BCC35BA50EF2B1D07CBFC5C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e87:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:ba:50:ef:2b:1d:07:cb:fc:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=a08ae53a-816f-4565-a08e-8ca7f36053ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b4:e8:c6:ca:ae:4c:9c:80:fa:be:2f:6e:37: 87:13:f9:a9:88:db:ae:d5:f8:52:f2:c1:5c:ec:a0: cb:ef:1e:08:c5:6d:22:4f:33:57:9b:16:b6:ff:d0: 82:b9:00:c6:a5:b2:5b:cf:a0:82:13:0d:1c:d9:4e: 70:16:59:c0:31:fa:9c:74:67:5f:11:b3:f6:01:05: 5b:15:93:89:43:c0:28:ba:82:2b:10:7c:e4:a4:ab: 94:ea:40:2d:14:7e:59:cc:98:18:cf:53:85:6c:b1: 26:69:4d:92:28:18:ff:76:9a:44:a8:82:11:d1:d4: bc:4b:d4:60:79:b8:c0:33:e9:40:be:ae:19:34:73: 58:5a:5a:c9:ce:01:a7:fd:36:c6:3d:ba:b7:8e:e8: d6:54:cf:aa:c1:b6:0f:22:61:3b:df:64:f0:d2:30: 7b:91:cc:5a:66:20:86:fa:c4:f6:6b:a4:62:42:23: 37:ac:a9:8d:57:13:80:5f:84:9f:76:a6:27:f0:9c: 59:fc:40:d2:df:d6:35:fb:a4:f1:a3:a5:dc:98:8d: 6b:db:98:41:09:09:ac:34:47:40:ca:9b:cd:e5:d3: 49:30:40:87:19:f3:5a:43:d7:56:d9:e1:51:f2:96: c4:dc:78:23:04:26:44:b8:3b:ac:fc:81:3b:77:f0: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A6:F1:BC:0D:8F:DD:47:CE:FC:A1:1F:2D:72:A4:E8:50:53:98:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:75:bb:35:97:46:9d:e9:98:b1:f9:6d:5a:3d:08:20:ad:ba: a0:51:b4:12:bc:08:d4:d9:8d:e9:f0:c7:cb:17:5b:30:14:82: bb:27:d0:a0:08:b7:fa:dd:d2:16:0c:5d:3b:42:51:db:0b:23: da:4b:86:92:61:54:ea:b5:a1:9d:61:a3:95:3c:1f:ab:f0:6a: fc:bd:17:81:f6:3e:4a:66:81:af:98:95:26:e9:75:df:ad:d6: cd:d8:16:d1:69:73:23:49:54:5a:37:cf:c4:4e:86:14:76:1d: e3:b6:95:a3:94:11:9d:32:b1:42:0e:2f:c0:a6:4a:2b:b8:ab: 69:05:96:79:f2:9b:ce:96:8d:75:ef:df:0e:93:fd:e4:fd:70: 4c:9f:ef:82:c7:66:9d:88:a8:29:01:39:81:9d:00:6a:9e:bb: a5:a1:2c:45:78:09:a3:6e:d4:51:5e:63:39:d8:df:52:5c:d9: 4e:83:d0:9a:4d:f6:c8:4b:6c:2b:14:1a:76:6b:19:79:88:04: 85:6e:5b:ce:af:18:38:4f:1e:3f:86:f4:04:fa:70:0c:79:2a: 98:5b:16:e7:13:31:f5:de:d9:a6:6f:39:06:96:a5:00:7d:c2: 8b:a2:96:e8:01:8e:fa:2b:b7:78:d1:73:16:32:52:e2:6d:9d: 22:c6:6d:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvMNbpQ7ysdB8v8XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk YTA4YWU1M2EtODE2Zi00NTY1LWEwOGUtOGNhN2YzNjA1M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrToxsquTJyA+r4vbjeHE/mpiNuu1fhS8sFc 7KDL7x4IxW0iTzNXmxa2/9CCuQDGpbJbz6CCEw0c2U5wFlnAMfqcdGdfEbP2AQVb FZOJQ8AouoIrEHzkpKuU6kAtFH5ZzJgYz1OFbLEmaU2SKBj/dppEqIIR0dS8S9Rg ebjAM+lAvq4ZNHNYWlrJzgGn/TbGPbq3jujWVM+qwbYPImE732Tw0jB7kcxaZiCG +sT2a6RiQiM3rKmNVxOAX4SfdqYn8JxZ/EDS39Y1+6Txo6XcmI1r25hBCQmsNEdA ypvN5dNJMECHGfNaQ9dW2eFR8pbE3HgjBCZEuDus/IE7d/D8aQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEqm8bwNj91HzvyhHy1ypOhQU5j7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Y4MTkzOTgtNjQ5YS0z YTYyLTkzODItNGFiNDgzY2Y5NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcHW7NZdGnemYsfltWj0IIK26oFG0ErwI1NmN6fDHyxdbMBSCuyfQ oAi3+t3SFgxdO0JR2wsj2kuGkmFU6rWhnWGjlTwfq/Bq/L0XgfY+SmaBr5iVJul1 363WzdgW0WlzI0lUWjfPxE6GFHYd47aVo5QRnTKxQg4vwKZKK7iraQWWefKbzpaN de/fDpP95P1wTJ/vgsdmnYioKQE5gZ0Aap67paEsRXgJo27UUV5jOdjfUlzZToPQ mk32yEtsKxQadmsZeYgEhW5bzq8YOE8eP4b0BPpwDHkqmFsW5xMx9d7Zpm85Bpal AH3Ci6KW6AGO+iu3eNFzFjJS4m2dIsZtsw== -----END CERTIFICATE-----Generated at Tue Nov 25 17:07:31 2025 by rpki-client