This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa File: d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa (raw, json) Hash identifier: CO2n1ffM6k4cKgNdWUR5KZPhm8ysOIdorPbp0N4/AWY= Subject key identifier: B6:D3:9B:8C:52:B9:0C:9D:5D:9F:FB:30:18:0B:3D:51:0F:39:7F:8F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A831FDB1FA313F34D7F180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:31:fd:b1:fa:31:3f:34:d7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1c89bd87-9cb5-42b0-b9e0-a8d7616aea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:a5:a1:1c:99:76:cb:53:bc:f1:5b:42:8b: 5e:bc:5d:86:13:f8:61:52:f4:69:49:7d:7f:0a:71: 43:f7:c9:ce:64:f1:63:8e:94:96:df:51:7f:c9:a8: 1e:73:82:5d:14:c8:b3:9d:9d:a8:31:d3:fd:79:94: b0:e8:41:ec:3f:f9:bf:2e:9d:96:73:15:3e:40:c1: 3d:36:25:0c:bc:52:00:1a:d3:b4:00:27:6f:30:54: 8d:c7:6f:9a:1c:7e:1b:8e:83:52:ef:18:d6:08:9e: f6:97:d8:31:93:01:d8:04:0b:ac:6f:c9:f6:a3:72: bc:58:d3:78:32:c6:2f:84:f2:92:9a:66:45:03:47: fa:a0:79:f1:0e:97:2e:a8:00:03:6f:9f:4d:87:f3: 0f:cf:f3:31:16:b3:97:25:01:35:56:83:2b:e1:13: 17:cd:5b:fa:c3:8e:f6:8f:c5:eb:61:66:c8:d3:b3: 24:71:76:28:ff:a8:3c:40:47:90:ef:0a:55:f7:f2: 18:2b:c7:ef:73:90:ef:66:b8:46:a7:90:37:7c:95: 37:7c:89:74:72:d3:57:38:45:86:bb:db:1c:bc:ca: 7c:e4:83:2c:f3:85:41:d6:22:e3:b7:67:1c:fe:20: a4:7c:21:a3:86:29:6f:a3:b9:1e:54:76:66:08:03: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:9B:8C:52:B9:0C:9D:5D:9F:FB:30:18:0B:3D:51:0F:39:7F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ea:cb:c0:6d:6b:a7:14:eb:12:d5:4f:24:6f:85:15:29:24: 26:29:15:cc:9b:2a:52:d1:05:64:3f:37:2d:00:98:56:4e:07: 4f:54:6d:b2:6c:fb:90:5f:8a:b4:6f:92:2f:a2:33:f9:e8:d1: 23:3e:a4:b8:5f:ca:e8:89:28:69:9c:8f:8f:46:6e:98:30:49: 54:25:65:29:d9:ba:96:6a:e2:3c:55:dc:cd:70:1a:50:bb:05: b5:7d:20:7b:47:07:e8:95:0c:39:9c:e8:25:06:6b:4e:f5:21: 9f:21:fd:cb:19:d1:b3:1c:80:7a:9d:04:46:0d:2d:6a:0f:31: 43:54:94:cf:19:a0:ad:82:e9:81:b8:19:6f:01:22:a4:e8:5f: 5d:0a:b9:c3:7b:4a:b4:2b:32:12:a4:c3:10:73:c6:c5:f5:3a: 0f:05:0c:e7:67:23:ea:4b:3c:c6:85:78:fa:5c:d4:d3:81:95: c8:a2:8b:57:5f:98:e4:d0:ee:62:59:04:70:48:ac:4c:d5:d9: ac:35:cf:65:01:ec:80:7f:42:ee:4a:84:25:bf:03:81:14:ab: 31:2a:d9:07:38:a6:37:ac:97:c1:ff:3b:d3:c4:95:c7:57:81: d3:98:06:65:7a:27:b2:44:ee:28:b4:68:e4:d9:7d:72:fd:5c: 0b:98:fc:e3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDH9sfoxPzTX8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWM4OWJkODctOWNiNS00MmIwLWI5ZTAtYThkNzYxNmFlYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBCloRyZdstTvPFbQotevF2GE/hhUvRpSX1/ CnFD98nOZPFjjpSW31F/yagec4JdFMiznZ2oMdP9eZSw6EHsP/m/Lp2WcxU+QME9 NiUMvFIAGtO0ACdvMFSNx2+aHH4bjoNS7xjWCJ72l9gxkwHYBAusb8n2o3K8WNN4 MsYvhPKSmmZFA0f6oHnxDpcuqAADb59Nh/MPz/MxFrOXJQE1VoMr4RMXzVv6w472 j8XrYWbI07MkcXYo/6g8QEeQ7wpV9/IYK8fvc5DvZrhGp5A3fJU3fIl0ctNXOEWG u9scvMp85IMs84VB1iLjt2cc/iCkfCGjhilvo7keVHZmCAPboQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLbTm4xSuQydXZ/7MBgLPVEPOX+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDg0NTA3ODQtYTBhMS0z Yjc3LWFiMGUtZTU1MjNmZjk1MWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiogw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALurLwG1rpxTrEtVPJG+FFSkkJikVzJsqUtEFZD83LQCYVk4HT1Rt smz7kF+KtG+SL6Iz+ejRIz6kuF/K6IkoaZyPj0ZumDBJVCVlKdm6lmriPFXczXAa ULsFtX0ge0cH6JUMOZzoJQZrTvUhnyH9yxnRsxyAep0ERg0tag8xQ1SUzxmgrYLp gbgZbwEipOhfXQq5w3tKtCsyEqTDEHPGxfU6DwUM52cj6ks8xoV4+lzU04GVyKKL V1+Y5NDuYlkEcEisTNXZrDXPZQHsgH9C7kqEJb8DgRSrMSrZBzimN6yXwf8708SV x1eB05gGZXonskTuKLRo5Nl9cv1cC5j84w== -----END CERTIFICATE-----Generated at Sat Jan 10 22:24:57 2026 by rpki-client