This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa File: d5d5e260-c995-3494-873b-02e55be73533.roa (raw, json) Hash identifier: s2sqJDFNpjRJ0Fz9ksADeClOHNYt9wu3pAMCMygcuuw= Subject key identifier: 4E:3D:00:AB:CB:3B:D7:D2:BD:33:3F:B0:E4:F7:84:2E:2F:B1:7A:E9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4176862102ACD804D53C5D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8d:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:86:21:02:ac:d8:04:d5:3c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=1be95a6e-73b9-4eb7-8a6d-66ad1ee9ac1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:43:ba:18:d2:18:9a:61:56:3f:83:cf:de: fd:5d:07:18:e6:ac:a0:96:c9:24:0b:86:4f:4e:a7: 0b:fc:e4:17:ef:90:31:5a:4f:4d:53:f8:1c:a7:bd: dc:30:5e:42:76:27:6d:dd:08:82:cc:b9:e5:b3:c8: 7e:d8:97:4c:c1:07:75:d5:76:96:45:5a:ab:35:50: c0:db:a0:de:72:46:7e:fd:14:9d:81:23:d2:b5:87: d5:39:c0:b0:78:00:64:df:2a:28:8b:ce:f4:1c:34: 99:09:af:02:d3:3f:a8:2b:6b:9a:16:de:06:f9:d1: ed:da:34:b1:27:3d:74:98:d7:b0:53:dc:c8:7b:60: 37:d9:e0:36:d3:1d:9c:b0:c1:53:67:ae:e6:55:3d: c0:5a:0e:f5:e8:84:8c:61:96:6a:2b:eb:8c:85:6f: cc:43:c7:c5:de:c5:87:ec:2b:2f:bf:df:76:eb:6f: df:9e:2b:ce:d0:85:65:96:80:a0:94:15:80:8a:61: 15:a7:2c:d7:ce:4d:a7:0c:b9:af:3e:d9:46:f5:d1: 0b:18:e1:d4:a0:e8:89:1d:99:02:a8:d4:90:4d:78: be:99:d4:24:2a:e7:ca:86:20:9f:e6:69:30:89:c7: 56:cf:20:65:1c:19:4c:06:0d:e4:bd:ca:a4:da:59: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:00:AB:CB:3B:D7:D2:BD:33:3F:B0:E4:F7:84:2E:2F:B1:7A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e3:ea:05:9c:bd:f3:ba:c4:34:c5:97:0b:da:07:cd:e4:c2: 2e:63:84:19:c2:19:0d:d9:e1:43:da:b5:b1:aa:4a:8e:e5:5b: f1:d3:ef:41:34:51:98:42:16:6d:71:ea:b7:38:1b:b4:31:59: be:5c:ab:db:79:91:dd:a6:31:e6:f3:f8:f9:7a:be:a3:21:fa: 02:7f:2f:e1:5a:c7:be:fd:f6:95:b7:1d:18:90:e0:db:a4:a7: 21:87:d4:02:f8:d5:21:31:4d:72:84:ce:f8:6a:1c:f5:16:03: 2f:9d:7d:79:3e:10:68:60:9f:97:81:24:b1:8b:4b:2f:0a:29: ba:c0:44:d7:08:17:dc:a7:8b:d6:74:25:bd:41:bd:5d:0b:0d: 9f:2c:97:98:a3:c3:9f:56:20:ec:5c:d7:13:61:ee:05:06:6a: 29:dd:62:97:f7:d9:ca:83:20:d2:70:f7:a7:3b:ec:39:fc:bb: 59:db:6b:d7:7f:c5:cc:ff:dc:f1:56:6b:d1:2e:04:9c:ba:f8: e0:90:39:21:d4:61:9e:b9:ba:a9:5a:ba:73:a4:90:88:93:3b: 96:74:cc:fe:c5:b0:0c:05:04:df:ff:b0:10:5b:e1:d9:b8:b0: 23:7c:33:ed:fb:89:ad:f6:b2:a1:5d:cf:41:8c:48:5f:17:36: d4:fa:d0:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoYhAqzYBNU8XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk MWJlOTVhNmUtNzNiOS00ZWI3LThhNmQtNjZhZDFlZTlhYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizdDuhjSGJphVj+Dz979XQcY5qyglskkC4ZP TqcL/OQX75AxWk9NU/gcp73cMF5Cdidt3QiCzLnls8h+2JdMwQd11XaWRVqrNVDA 26DeckZ+/RSdgSPStYfVOcCweABk3yooi870HDSZCa8C0z+oK2uaFt4G+dHt2jSx Jz10mNewU9zIe2A32eA20x2csMFTZ67mVT3AWg716ISMYZZqK+uMhW/MQ8fF3sWH 7Csvv99262/fnivO0IVlloCglBWAimEVpyzXzk2nDLmvPtlG9dELGOHUoOiJHZkC qNSQTXi+mdQkKufKhiCf5mkwicdWzyBlHBlMBg3kvcqk2lk4GwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE49AKvLO9fSvTM/sOT3hC4vsXrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDVkNWUyNjAtYzk5NS0z NDk0LTg3M2ItMDJlNTViZTczNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujeAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjOPqBZy987rENMWXC9oHzeTCLmOEGcIZDdnhQ9q1sapKjuVb8dPv QTRRmEIWbXHqtzgbtDFZvlyr23mR3aYx5vP4+Xq+oyH6An8v4VrHvv32lbcdGJDg 26SnIYfUAvjVITFNcoTO+Goc9RYDL519eT4QaGCfl4EksYtLLwopusBE1wgX3KeL 1nQlvUG9XQsNnyyXmKPDn1Yg7FzXE2HuBQZqKd1il/fZyoMg0nD3pzvsOfy7Wdtr 13/FzP/c8VZr0S4EnLr44JA5IdRhnrm6qVq6c6SQiJM7lnTM/sWwDAUE3/+wEFvh 2biwI3wz7fuJrfayoV3PQYxIXxc21PrQXA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:53 2026 by rpki-client