This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa File: d6a8f18b-5e76-3449-a876-a38c58d3808a.roa (raw, json) Hash identifier: zLErbm5UpqpnSi+CwqbAKTgAhlEJ/B9RZhJbLvxlBfU= Subject key identifier: A9:90:01:FC:C6:4A:B0:60:C7:C5:2B:EA:A3:70:2C:13:24:9D:8E:0B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBC0659D00D5284B296280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:ec00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c0:65:9d:00:d5:28:4b:29:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2d143ef1-0a22-4c4a-aa99-60e913a4588b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:5b:aa:53:b3:9e:92:47:1a:ba:60:0f:d0: 1a:e1:56:b0:9f:9d:6a:ff:46:b5:2c:ce:b8:32:5a: c7:a5:43:9e:25:6e:46:8d:2c:e2:d7:7b:18:55:ad: 7d:70:66:44:93:f6:9b:a4:d8:9a:1b:d0:5f:0a:92: b5:05:b6:39:92:be:8a:97:72:db:81:9a:a2:7d:f3: c2:e6:f6:6a:c5:63:2e:b0:1f:39:5e:a8:1a:02:04: 98:30:b0:a4:b9:e2:d3:7d:78:49:ad:bf:d0:01:1a: 39:90:b5:8e:cc:85:a1:d7:7d:d3:fb:06:62:ae:ec: 4c:9c:83:32:40:f5:7a:a3:db:04:4e:0f:5d:dc:4c: 44:94:d1:2b:44:4b:6e:bb:a6:ea:05:24:42:6a:b7: 77:20:10:e0:b9:43:84:49:e2:51:f9:dc:dd:04:33: 26:4d:fe:0d:6e:78:81:ca:d4:1f:63:cb:ed:20:ff: 33:9d:ef:7f:79:87:1e:c5:90:b0:d1:2a:5e:0f:c8: 49:57:ec:78:21:7c:06:81:8f:09:f0:51:7e:63:16: d4:e9:28:08:94:87:71:9a:8b:f7:98:ad:d9:08:b1: 20:04:c7:0f:e1:77:8f:1e:3d:29:3a:b4:73:15:95: a1:30:84:94:da:91:94:5c:2f:14:11:89:29:d8:e5: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:90:01:FC:C6:4A:B0:60:C7:C5:2B:EA:A3:70:2C:13:24:9D:8E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:ec00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ec:fa:70:1a:ce:72:a8:2e:b8:2d:ef:64:18:54:69:41:b6: e6:1c:a7:61:46:f2:2e:13:13:c7:1b:66:ee:d2:58:5d:5a:26: 2c:ba:4c:c7:fc:10:63:dd:48:22:4e:87:db:5e:4f:21:e9:6b: 83:50:54:b6:8d:09:bb:c0:ac:4d:6d:82:8c:fc:04:36:49:d2: 90:d3:95:d9:36:2d:f7:c7:99:51:ee:0a:4c:c9:c9:77:88:0b: 19:10:97:c7:3d:8d:08:0a:33:97:98:ab:50:70:0c:e5:37:68: 7f:88:bd:b0:72:60:aa:0b:3d:13:04:38:c2:43:41:0f:cd:bd: d3:e8:a0:df:69:5d:e5:35:9d:3e:71:17:5e:7b:ff:0d:4f:74: 29:d4:96:6a:4c:8a:33:e7:be:b2:47:60:9c:cd:85:b2:f6:0f: e9:08:7b:05:9c:bd:9a:2c:fe:0c:b2:17:06:37:58:73:16:68: ad:74:04:93:28:43:fc:2e:e9:c5:84:67:43:e9:81:f5:fa:dd: 55:24:5c:e3:be:7f:81:e1:af:f4:ba:99:07:c4:dc:6a:45:44: 48:84:2b:f0:8b:6c:a6:de:fa:8f:c1:52:a7:1c:81:0a:4b:f0: c1:7f:4b:9b:7d:80:14:5c:47:8b:18:a4:c8:d3:60:c3:f9:a8: b1:e4:9b:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC28BlnQDVKEspYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmQxNDNlZjEtMGEyMi00YzRhLWFhOTktNjBlOTEzYTQ1ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV1bqlOznpJHGrpgD9Aa4Vawn51q/0a1LM64 MlrHpUOeJW5GjSzi13sYVa19cGZEk/abpNiaG9BfCpK1BbY5kr6Kl3LbgZqiffPC 5vZqxWMusB85XqgaAgSYMLCkueLTfXhJrb/QARo5kLWOzIWh133T+wZiruxMnIMy QPV6o9sETg9d3ExElNErREtuu6bqBSRCard3IBDguUOESeJR+dzdBDMmTf4NbniB ytQfY8vtIP8zne9/eYcexZCw0SpeD8hJV+x4IXwGgY8J8FF+YxbU6SgIlIdxmov3 mK3ZCLEgBMcP4XePHj0pOrRzFZWhMISU2pGUXC8UEYkp2OVF0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKmQAfzGSrBgx8Ur6qNwLBMknY4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDZhOGYxOGItNWU3Ni0z NDQ5LWE4NzYtYTM4YzU4ZDM4MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuieww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM+z6cBrOcqguuC3vZBhUaUG25hynYUbyLhMTxxtm7tJYXVomLLpM x/wQY91IIk6H215PIelrg1BUto0Ju8CsTW2CjPwENknSkNOV2TYt98eZUe4KTMnJ d4gLGRCXxz2NCAozl5irUHAM5Tdof4i9sHJgqgs9EwQ4wkNBD8290+ig32ld5TWd PnEXXnv/DU90KdSWakyKM+e+skdgnM2FsvYP6Qh7BZy9miz+DLIXBjdYcxZorXQE kyhD/C7pxYRnQ+mB9frdVSRc475/geGv9LqZB8TcakVESIQr8Itspt76j8FSpxyB CkvwwX9Lm32AFFxHixikyNNgw/moseSbHA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:11 2026 by rpki-client