This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa File: d7cebbec-ff11-336f-af75-67555f640fad.roa (raw, json) Hash identifier: 3bEVDts8uxStCUPnGalONckOtKdZ111BK9BDvMezho4= Subject key identifier: 14:F3:71:44:7F:B2:E6:96:29:7B:44:AC:F8:6F:77:03:66:EB:7B:9A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BE7C67BAF4A2401BE6FD29A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa Signing time: Tue 18 Nov 2025 22:59:21 +0000 ROA not before: Tue 18 Nov 2025 22:59:21 +0000 ROA not after: Mon 16 Feb 2026 22:59:21 +0000 asID: 30036 IP address blocks: 2604:2e8f:dc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:c6:7b:af:4a:24:01:be:6f:d2:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 18 22:59:21 2025 GMT Not After : Feb 16 22:59:21 2026 GMT Subject: CN=f84d5f4f-708e-49d8-af99-31174a3f54cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:80:56:d4:89:bd:80:68:73:61:8f:aa:ac: cc:4b:7e:36:ff:e0:96:dc:70:10:35:b8:9f:b8:c6: 65:86:1e:d8:e0:8a:8a:6d:6b:47:ff:0b:08:c1:e1: 1c:04:af:3d:fa:ea:56:ef:b8:af:54:af:ea:4c:20: 42:01:6b:5d:80:1d:14:f8:e1:3a:ca:24:8f:ae:b5: 5f:96:ac:6f:90:52:2c:70:aa:5b:32:3b:3c:e2:5d: ea:5b:35:0e:f2:dd:ed:72:47:d8:ae:f8:47:f6:81: 9b:64:29:79:92:19:9e:be:b7:bd:19:eb:1d:18:66: a4:eb:22:01:f9:c6:f1:66:ce:0b:da:dd:f0:31:b2: 8e:f7:b6:b8:b6:6d:5a:ae:c4:24:52:b6:e9:70:4d: 85:45:98:db:e7:32:47:34:be:53:dd:53:bb:f4:25: 0c:8c:2d:a6:c1:52:84:4a:f6:ff:c9:9f:12:6b:d6: 75:32:3b:7c:02:5a:97:55:b6:5d:1d:2c:59:9a:bf: 9b:ca:02:21:e9:ea:35:14:25:82:9c:a0:71:48:09: 69:b0:c5:b7:71:e4:c0:a6:f2:f3:7d:f4:3a:8c:55: 4a:87:e9:c3:44:14:90:3d:00:26:64:11:82:7b:ab: 2f:26:31:c1:1e:cc:60:34:b0:0e:e0:f2:db:d6:41: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F3:71:44:7F:B2:E6:96:29:7B:44:AC:F8:6F:77:03:66:EB:7B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:dc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2b:5a:af:8e:12:1f:f2:16:3c:53:07:e5:64:3f:44:c2:14: 9d:87:86:b2:fd:c0:50:bd:fc:fb:53:27:f9:2f:d8:e9:35:72: ec:7b:b7:04:84:6e:39:74:1d:07:e3:03:9c:bd:c7:d8:44:b9: a5:0e:ab:0d:69:e6:d4:fe:91:7d:15:63:0a:6f:7f:4c:35:3c: 1f:8b:85:f8:da:0b:89:77:37:79:9d:4d:0a:2d:69:ce:35:38: 00:44:9b:6d:28:e2:5e:08:cc:3d:8a:74:2a:a5:3b:c8:df:7f: d0:e0:b0:4b:92:df:39:5f:c6:71:b6:37:3b:c9:8e:08:e5:e3: 99:f1:a2:84:2b:21:8a:52:ea:4e:02:f5:9e:94:bf:86:8a:82: 79:27:92:b6:d5:7c:f7:cf:87:01:be:18:b7:f2:52:93:c6:10: f6:de:77:4f:0e:2b:ea:33:5f:04:2b:3b:f9:e4:00:50:ac:db: cf:c4:5a:65:60:93:8f:7a:43:14:07:8c:7a:79:43:e4:39:67: 2e:ab:5d:62:7b:76:ec:87:74:fe:51:31:a8:81:92:58:a7:f7: 19:f7:e7:7d:36:e5:dd:48:45:46:18:13:ca:59:59:58:5b:a3: 74:e0:26:d2:92:04:1b:88:29:74:a8:14:8b:69:8c:ae:62:5f: a1:01:33:5f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvnxnuvSiQBvm/SmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExODIyNTkyMVoXDTI2MDIxNjIyNTkyMVowLzEtMCsGA1UEAxMk Zjg0ZDVmNGYtNzA4ZS00OWQ4LWFmOTktMzExNzRhM2Y1NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXqAVtSJvYBoc2GPqqzMS342/+CW3HAQNbif uMZlhh7Y4IqKbWtH/wsIweEcBK89+upW77ivVK/qTCBCAWtdgB0U+OE6yiSPrrVf lqxvkFIscKpbMjs84l3qWzUO8t3tckfYrvhH9oGbZCl5khmevre9GesdGGak6yIB +cbxZs4L2t3wMbKO97a4tm1arsQkUrbpcE2FRZjb5zJHNL5T3VO79CUMjC2mwVKE Svb/yZ8Sa9Z1Mjt8AlqXVbZdHSxZmr+bygIh6eo1FCWCnKBxSAlpsMW3ceTApvLz ffQ6jFVKh+nDRBSQPQAmZBGCe6svJjHBHsxgNLAO4PLb1kEbKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBTzcUR/suaWKXtErPhvdwNm63uaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDdjZWJiZWMtZmYxMS0z MzZmLWFmNzUtNjc1NTVmNjQwZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj9ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPCtar44SH/IWPFMH5WQ/RMIUnYeGsv3AUL38+1Mn+S/Y6TVy7Hu3 BIRuOXQdB+MDnL3H2ES5pQ6rDWnm1P6RfRVjCm9/TDU8H4uF+NoLiXc3eZ1NCi1p zjU4AESbbSjiXgjMPYp0KqU7yN9/0OCwS5LfOV/GcbY3O8mOCOXjmfGihCshilLq TgL1npS/hoqCeSeSttV898+HAb4Yt/JSk8YQ9t53Tw4r6jNfBCs7+eQAUKzbz8Ra ZWCTj3pDFAeMenlD5DlnLqtdYnt27Id0/lExqIGSWKf3GffnfTbl3UhFRhgTyllZ WFujdOAm0pIEG4gpdKgUi2mMrmJfoQEzXw== -----END CERTIFICATE-----Generated at Tue Nov 25 13:55:27 2025 by rpki-client