This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa File: d5af3607-fb29-3174-a269-a00e5d3a69cc.roa (raw, json) Hash identifier: U/anoJUDXT+11YYOXyuLmM3nHj7qgZqqiUVb+fKNnrE= Subject key identifier: 44:E0:AC:1F:15:FB:B3:BB:D5:3A:34:5E:55:49:12:DB:01:A5:EE:EF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BD40F0EAE23713D6646B046C8 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa Signing time: Tue 11 Nov 2025 21:29:25 +0000 ROA not before: Tue 11 Nov 2025 21:29:25 +0000 ROA not after: Mon 09 Feb 2026 21:29:25 +0000 asID: 19905 IP address blocks: 2604:2e8f:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d4:0f:0e:ae:23:71:3d:66:46:b0:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 11 21:29:25 2025 GMT Not After : Feb 9 21:29:25 2026 GMT Subject: CN=0fb7923a-1355-48fd-9f51-822ae66eb59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:75:56:a1:ee:cf:03:95:c5:68:c1:ef:8a: e8:6d:9a:ce:14:ff:37:cb:aa:aa:8a:9c:1b:0e:ea: 2f:27:4f:18:78:84:eb:0a:59:80:25:69:0d:dd:3b: ba:86:20:fa:54:01:73:dc:2e:19:24:8a:ca:35:53: 31:f3:c2:3a:2e:8d:9b:ed:82:16:9a:57:ef:65:cb: 2e:1c:d8:fe:9a:b7:f9:d5:94:d9:82:e3:9e:41:1e: 60:bb:17:9b:1a:38:a1:ba:5e:7b:49:53:2f:7e:ff: 91:40:33:2b:3a:45:b6:79:23:58:56:ec:44:04:fd: 25:02:68:ce:b0:f8:7a:68:8b:87:10:15:cf:30:96: 28:41:89:e4:c5:8c:02:b9:20:a7:ee:10:ca:f3:da: 19:18:d6:33:03:7e:7f:05:65:34:f4:aa:d5:e5:b1: cb:f7:41:93:92:69:e6:cd:ff:29:b2:9f:80:49:38: 1d:3e:25:26:a1:6a:ee:1a:cc:2d:b4:0b:da:2f:8c: 7e:11:d8:b1:9b:c5:07:03:d6:07:09:09:91:c2:a1: 3c:ee:c0:7e:2a:6d:ed:09:fa:7f:fd:a6:31:f8:84: f8:bd:f9:9c:fd:e1:1a:93:c8:0f:36:cf:44:06:92: 9d:31:37:15:d2:5b:65:e8:65:23:da:d6:f0:4b:2b: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:AC:1F:15:FB:B3:BB:D5:3A:34:5E:55:49:12:DB:01:A5:EE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fd:2f:f8:ae:7b:5b:1c:0b:27:54:67:6e:38:4f:3d:61:8f: 12:5d:d9:08:87:f1:95:e3:43:2e:af:3f:79:2e:a7:07:60:96: 04:60:3b:ef:e5:b6:a5:37:90:f8:cb:f4:99:f7:94:f6:36:0d: 4c:e2:04:0c:cb:69:b0:40:8b:2f:4a:09:28:0a:60:ec:96:f3: 82:17:2d:aa:99:11:09:88:b2:c4:c7:00:ca:f3:e5:ad:4d:9e: 46:54:32:bb:49:ec:69:ba:46:38:bd:dd:0b:20:05:a6:3c:2d: ef:08:51:43:2f:4f:14:67:3b:c5:b9:f7:c5:4a:2f:1c:90:7b: 46:93:29:09:b5:a3:f8:bb:d7:35:71:11:d7:84:7f:90:9c:8c: 43:e0:1a:3d:74:a0:08:21:df:a3:c1:c7:ef:2d:69:a8:5e:7a: cd:6f:29:fd:75:1f:07:37:bc:22:a1:94:88:3a:1e:f0:76:e3: f2:fb:2e:9c:9d:07:16:74:7f:e3:53:85:8b:0f:84:a1:35:9f: b1:35:87:82:57:55:05:16:01:cd:72:9f:40:39:ca:ef:53:46: 28:3d:16:56:6b:77:4e:bf:e1:04:26:d3:6b:26:50:c8:81:a3: e8:ec:b5:bd:77:55:53:b3:f1:bd:ab:78:ae:1b:81:15:e8:56: 32:a8:8a:60 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvUDw6uI3E9ZkawRsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExMTIxMjkyNVoXDTI2MDIwOTIxMjkyNVowLzEtMCsGA1UEAxMk MGZiNzkyM2EtMTM1NS00OGZkLTlmNTEtODIyYWU2NmViNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQN1VqHuzwOVxWjB74robZrOFP83y6qqipwb DuovJ08YeITrClmAJWkN3Tu6hiD6VAFz3C4ZJIrKNVMx88I6Lo2b7YIWmlfvZcsu HNj+mrf51ZTZguOeQR5guxebGjihul57SVMvfv+RQDMrOkW2eSNYVuxEBP0lAmjO sPh6aIuHEBXPMJYoQYnkxYwCuSCn7hDK89oZGNYzA35/BWU09KrV5bHL90GTkmnm zf8psp+ASTgdPiUmoWruGswttAvaL4x+Edixm8UHA9YHCQmRwqE87sB+Km3tCfp/ /aYx+IT4vfmc/eEak8gPNs9EBpKdMTcV0ltl6GUj2tbwSyvjNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFETgrB8V+7O71To0XlVJEtsBpe7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDVhZjM2MDctZmIyOS0z MTc0LWEyNjktYTAwZTVkM2E2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj8gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKP0v+K57WxwLJ1RnbjhPPWGPEl3ZCIfxleNDLq8/eS6nB2CWBGA7 7+W2pTeQ+Mv0mfeU9jYNTOIEDMtpsECLL0oJKApg7JbzghctqpkRCYiyxMcAyvPl rU2eRlQyu0nsabpGOL3dCyAFpjwt7whRQy9PFGc7xbn3xUovHJB7RpMpCbWj+LvX NXER14R/kJyMQ+AaPXSgCCHfo8HH7y1pqF56zW8p/XUfBze8IqGUiDoe8Hbj8vsu nJ0HFnR/41OFiw+EoTWfsTWHgldVBRYBzXKfQDnK71NGKD0WVmt3Tr/hBCbTayZQ yIGj6Oy1vXdVU7Pxvat4rhuBFehWMqiKYA== -----END CERTIFICATE-----Generated at Tue Nov 25 17:02:12 2025 by rpki-client