This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da794840-c157-39fa-9b2e-031a2118920c.roa File: da794840-c157-39fa-9b2e-031a2118920c.roa (raw, json) Hash identifier: YRyUFEzaHFwatGDnpF9Dt8rRLSyDfS2RbY5t43jygSE= Subject key identifier: 44:A4:08:8E:F5:31:3F:3B:0F:E9:65:0A:D1:6D:CE:99:C0:80:75:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A833CA7B01C739E1AFE580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da794840-c157-39fa-9b2e-031a2118920c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:33:ca:7b:01:c7:39:e1:af:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=af483dda-e1cb-4627-8532-25ca9702bd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:55:6a:29:d5:97:6b:9e:d8:e1:2d:84:16: 7c:95:e5:6d:73:9e:33:78:d6:de:c1:84:c9:5a:52: 9e:79:51:c8:df:13:a6:0e:2c:69:84:a2:80:96:b8: 9b:6e:e8:a4:58:1b:4a:e8:15:bb:44:3d:db:72:da: 82:ff:ed:97:d1:d0:86:25:60:55:0e:a5:c0:46:d2: 7d:b1:bc:42:b4:3c:d6:7a:d6:57:dc:56:32:53:a9: 1a:89:63:9d:ce:74:92:1d:f7:97:48:19:5c:04:4c: 5c:ef:74:69:4a:a8:24:e5:b9:bb:92:6c:08:6f:65: 2a:70:3b:36:c1:79:83:ef:a3:b8:cf:83:83:d1:ef: 3a:60:9d:fd:93:3e:16:7a:0c:4d:3f:68:6b:ab:a9: cb:a7:d7:0a:f6:46:3d:89:78:74:4c:6f:c8:37:9f: 94:bc:a2:d0:24:a7:72:7a:ba:99:07:32:33:66:b1: c8:d2:ed:08:a0:af:63:72:6e:43:eb:76:73:26:ff: 2a:28:2f:4b:96:53:cb:51:b5:c8:66:2f:ce:bb:8e: 4a:36:19:d0:c7:4b:c0:d2:c5:c0:02:f7:13:cf:46: d2:b1:ac:ea:76:26:f8:ac:1a:58:06:ac:ed:5a:72: 3f:e6:8a:b3:a2:8b:ce:67:0b:88:a6:18:b8:32:27: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:08:8E:F5:31:3F:3B:0F:E9:65:0A:D1:6D:CE:99:C0:80:75:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da794840-c157-39fa-9b2e-031a2118920c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:8c:76:c4:de:78:c7:20:73:a3:a7:5f:66:d5:f8:16:69:b1: 28:7e:a7:b7:e9:13:cc:fe:3b:68:83:77:60:5c:01:c2:61:04: 56:35:09:d9:69:ad:d6:c0:cc:c1:17:c6:f4:24:f0:d7:95:d1: 58:e1:d2:b6:24:82:37:96:70:8e:99:74:16:25:75:c2:38:8b: 4e:e8:d7:f7:f3:a1:fc:5c:51:ad:04:da:e0:88:23:35:e6:d0: bf:67:44:2c:84:e7:b7:a2:e0:90:c0:c4:e1:d4:01:90:ee:62: d9:98:76:19:84:99:ae:c1:37:cf:1d:a0:d6:33:46:95:19:b2: 78:f8:cc:19:0e:c5:55:ab:60:7d:51:a3:4d:10:1f:12:08:75: b3:f7:98:41:b5:76:0f:9f:aa:c0:61:fd:80:e4:50:27:39:ee: 26:7d:61:68:f2:32:62:81:73:01:27:d5:73:16:d0:20:19:56: 10:4d:29:80:01:c3:89:89:cf:c2:4b:5f:2b:08:44:bd:b2:ad: 97:22:03:0e:55:f3:71:1b:ea:4d:a8:cf:0f:c7:98:41:83:71: 50:11:e9:3e:17:c0:a5:c4:ea:8f:b5:77:b5:db:35:8b:88:08: 97:da:0b:7b:50:5d:54:35:3f:c1:0c:81:e4:26:3d:63:8f:7d: 4b:b9:30:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqDPKewHHOeGv5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YWY0ODNkZGEtZTFjYi00NjI3LTg1MzItMjVjYTk3MDJiZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ5VainVl2ue2OEthBZ8leVtc54zeNbewYTJ WlKeeVHI3xOmDixphKKAlribbuikWBtK6BW7RD3bctqC/+2X0dCGJWBVDqXARtJ9 sbxCtDzWetZX3FYyU6kaiWOdznSSHfeXSBlcBExc73RpSqgk5bm7kmwIb2UqcDs2 wXmD76O4z4OD0e86YJ39kz4WegxNP2hrq6nLp9cK9kY9iXh0TG/IN5+UvKLQJKdy erqZBzIzZrHI0u0IoK9jcm5D63ZzJv8qKC9LllPLUbXIZi/Ou45KNhnQx0vA0sXA AvcTz0bSsazqdib4rBpYBqztWnI/5oqzoovOZwuIphi4MifM6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFESkCI71MT87D+llCtFtzpnAgHVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGE3OTQ4NDAtYzE1Ny0z OWZhLTliMmUtMDMxYTIxMTg5MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuivAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApIx2xN54xyBzo6dfZtX4FmmxKH6nt+kTzP47aIN3YFwBwmEEVjUJ 2Wmt1sDMwRfG9CTw15XRWOHStiSCN5Zwjpl0FiV1wjiLTujX9/Oh/FxRrQTa4Igj NebQv2dELITnt6LgkMDE4dQBkO5i2Zh2GYSZrsE3zx2g1jNGlRmyePjMGQ7FVatg fVGjTRAfEgh1s/eYQbV2D5+qwGH9gORQJznuJn1haPIyYoFzASfVcxbQIBlWEE0p gAHDiYnPwktfKwhEvbKtlyIDDlXzcRvqTajPD8eYQYNxUBHpPhfApcTqj7V3tds1 i4gIl9oLe1BdVDU/wQyB5CY9Y499S7kwgA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:22:04 2026 by rpki-client