This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa File: d8139d9e-5227-3aa7-b104-a3988ca2a909.roa (raw, json) Hash identifier: kbRRx8+dn54/83VHdPa4L2JVVt1hpr9CNuoT4oZnmbg= Subject key identifier: F0:45:68:EB:81:D7:98:59:16:7A:C7:EA:C8:BB:3C:CE:83:06:E6:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C417685A9C03404FB13CEB200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8b:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:85:a9:c0:34:04:fb:13:ce:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=a364bc20-d641-42d1-9182-cbc4e56749f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:18:4d:4f:e0:ce:e2:a8:e8:cd:85:41:55: 57:00:f9:41:54:60:26:92:34:c1:47:86:67:7a:be: dc:28:bc:40:0f:5d:b7:ed:6e:2a:6a:4b:c6:2e:d3: ad:b9:8a:95:8f:75:6a:26:dc:af:72:5e:b1:aa:9d: 2d:b0:a2:8e:55:a2:5b:22:db:48:bb:72:7d:48:80: c3:65:8b:fa:8a:39:2c:3f:4f:3a:a6:57:8d:a2:ad: 7b:5d:d7:7b:4f:5b:a1:7e:b7:87:10:88:10:84:75: 2c:c8:fc:bd:d4:bf:82:a4:b0:c7:f1:8b:6e:d4:1c: 1f:83:5b:e9:08:33:2d:eb:71:9a:7f:f4:8b:f4:4a: 11:8d:c3:9b:cb:b6:d3:ec:ac:70:37:cd:db:1b:b5: 49:64:6e:c8:98:01:c9:cb:9c:b7:48:c4:1a:2b:5f: 4f:58:24:2a:7b:c3:60:06:a0:6d:a2:91:08:4b:c8: c1:92:ef:71:26:41:84:f6:3d:7a:d7:d5:07:11:a7: 17:86:61:93:c0:f9:e3:6c:7c:17:c0:d8:48:27:a3: 49:e4:1c:2b:f9:33:62:f9:0f:b5:67:fd:9e:21:ed: 87:ae:b5:d1:04:d3:7b:9b:ce:b7:b4:ff:c0:b2:71: 4d:7b:ed:d0:a1:46:5a:40:f2:c6:98:66:84:b0:5b: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:45:68:EB:81:D7:98:59:16:7A:C7:EA:C8:BB:3C:CE:83:06:E6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:ac00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:11:18:47:d6:2f:d2:fd:84:8d:3a:a5:79:3f:ac:08:73:31: 30:6c:49:e4:2d:f2:7c:43:fd:87:2a:61:f1:1c:00:db:3c:85: d3:3a:5a:06:81:a0:3e:8f:ea:d0:b7:81:13:c2:19:a1:b8:55: c4:55:42:76:00:2e:a9:fa:ec:8d:a7:48:af:d2:27:2a:55:8b: fc:b9:d0:ef:c7:3d:e3:d4:45:bc:70:15:9b:04:71:84:69:60: 79:d1:00:1c:75:4d:e0:68:a3:96:af:e5:87:33:e4:c4:6b:8d: 42:6a:e7:9f:01:b2:9e:60:23:20:52:47:0b:68:c2:38:80:eb: 1b:b7:e2:a1:54:3e:72:06:65:7a:cc:a5:ac:2b:13:77:7d:b8: 1a:39:c6:c5:10:b5:70:e3:d7:3d:70:85:f7:52:8a:65:45:ff: 13:fb:ea:f5:7a:bb:1c:f6:80:3d:55:8b:03:a4:19:86:f7:d0: 8d:44:3e:cd:dc:43:fe:ec:01:d2:57:03:38:0f:a0:ee:46:6c: ad:ce:e2:6f:a5:a9:48:62:5a:1f:23:89:ba:41:17:d9:3c:3f: c6:33:49:a7:4e:73:d1:56:61:c2:6f:04:b8:ee:f7:23:c2:53: 84:3b:50:eb:e2:aa:ac:d5:a9:e7:68:31:29:9e:14:ea:cb:48: 18:16:a5:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoWpwDQE+xPOsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YTM2NGJjMjAtZDY0MS00MmQxLTkxODItY2JjNGU1Njc0OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroQYTU/gzuKo6M2FQVVXAPlBVGAmkjTBR4Zn er7cKLxAD1237W4qakvGLtOtuYqVj3VqJtyvcl6xqp0tsKKOVaJbIttIu3J9SIDD ZYv6ijksP086pleNoq17Xdd7T1uhfreHEIgQhHUsyPy91L+CpLDH8Ytu1Bwfg1vp CDMt63Gaf/SL9EoRjcOby7bT7KxwN83bG7VJZG7ImAHJy5y3SMQaK19PWCQqe8Ng BqBtopEIS8jBku9xJkGE9j1619UHEacXhmGTwPnjbHwXwNhIJ6NJ5Bwr+TNi+Q+1 Z/2eIe2HrrXRBNN7m863tP/AsnFNe+3QoUZaQPLGmGaEsFsZmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPBFaOuB15hZFnrH6si7PM6DBuYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDgxMzlkOWUtNTIyNy0z YWE3LWIxMDQtYTM5ODhjYTJhOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui6ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKxEYR9Yv0v2EjTqleT+sCHMxMGxJ5C3yfEP9hyph8RwA2zyF0zpa BoGgPo/q0LeBE8IZobhVxFVCdgAuqfrsjadIr9InKlWL/LnQ78c949RFvHAVmwRx hGlgedEAHHVN4Gijlq/lhzPkxGuNQmrnnwGynmAjIFJHC2jCOIDrG7fioVQ+cgZl esylrCsTd324GjnGxRC1cOPXPXCF91KKZUX/E/vq9Xq7HPaAPVWLA6QZhvfQjUQ+ zdxD/uwB0lcDOA+g7kZsrc7ib6WpSGJaHyOJukEX2Tw/xjNJp05z0VZhwm8EuO73 I8JThDtQ6+KqrNWp52gxKZ4U6stIGBalfA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:28 2026 by rpki-client