This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json) Hash identifier: P2qCpf5ntokCS3VTXKEX4CZNbvyimSlxN9soyqs75MM= Subject key identifier: 98:1F:64:45:B4:98:51:79:A4:A1:4F:7D:B4:E7:77:A8:38:42:5E:10 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A8454C8A176B015EB18490 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:45:4c:8a:17:6b:01:5e:b1:84:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e26d5287-ffab-4c5f-9427-f0d6c0167aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fc:a4:e9:ef:e4:e3:02:90:cc:05:f5:a9:40: 2d:42:6b:46:60:fc:2b:f6:75:7e:da:ea:bb:fb:30: 41:90:81:4b:a8:04:fe:53:b0:7b:42:71:9b:5c:2d: 71:c9:47:f6:7b:f3:00:6b:16:a2:92:d6:96:59:7b: a2:b0:51:5a:ad:f4:1f:6a:1f:58:99:7a:0b:76:8f: 80:3e:53:8e:14:7b:88:5f:1f:c9:ea:29:1e:6f:db: d2:cd:28:ab:24:36:d1:2a:a1:82:c4:46:81:ee:1e: 2e:d2:b2:db:19:3b:43:5b:de:32:c3:bc:1f:ae:a1: db:d9:40:00:eb:84:25:27:80:7a:ff:54:36:7b:28: 03:db:0a:df:b4:00:42:4b:1f:3f:dd:03:da:84:5d: 16:0d:6f:90:93:a5:24:57:10:26:47:91:81:93:13: de:2c:61:95:4f:a3:03:8e:df:7d:42:5a:4b:2b:cc: e0:c0:d2:fe:af:a9:43:44:1e:f1:7a:6a:42:c0:e4: 7b:97:ac:5a:f3:a6:13:db:2f:b7:8c:59:b3:c5:f4: e2:ef:6a:de:0c:69:73:e4:fa:4c:7c:94:80:8c:e0: f1:07:38:a7:c1:43:69:38:56:63:ae:cf:fd:24:af: 07:eb:01:44:bd:d0:f4:91:c2:0a:64:cd:64:4c:65: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:64:45:B4:98:51:79:A4:A1:4F:7D:B4:E7:77:A8:38:42:5E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:30:e2:56:d0:1f:9e:e7:14:7c:7f:4b:08:61:fb:73:18:a4: b3:13:10:a0:43:16:aa:5d:7b:76:33:be:2a:fa:83:ef:38:ab: f2:a7:fb:1f:64:85:3e:2f:58:d8:84:fe:81:61:c8:cc:ef:d9: 03:b9:d9:e6:45:54:c7:aa:1c:45:79:5b:ea:15:4a:ef:c2:d7: 7f:59:fe:c8:ab:21:48:09:ff:17:3c:6d:3e:9a:70:18:bd:ea: 5f:b9:8c:c3:81:0e:a8:a4:9b:67:c3:cd:28:c2:8d:9a:86:b8: bc:8a:2c:1d:dc:a5:98:e4:1b:a5:22:b3:f2:86:a0:ed:70:5e: 3e:39:fb:5b:a5:15:3d:21:a4:aa:fb:57:13:5b:6f:17:8d:a1: f4:78:8b:4e:16:ba:28:f7:80:b5:8a:d2:e1:0c:7c:68:74:a5: b1:53:00:ce:4b:6f:80:d2:a4:74:e1:4e:b0:f6:99:2b:98:40: 09:a4:15:48:51:9e:68:09:24:2b:b9:0d:78:4b:47:af:6d:25: ac:8a:a5:c3:f3:12:43:ea:9d:5b:52:31:7f:87:16:d5:7b:a6: 97:57:18:30:a2:be:cc:14:7b:a5:a2:e5:31:44:55:93:12:ac: 38:79:03:19:2d:c9:69:f9:c8:9b:67:44:d4:27:7d:1f:60:7b: ed:d3:3c:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqEVMihdrAV6xhJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTI2ZDUyODctZmZhYi00YzVmLTk0MjctZjBkNmMwMTY3YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/yk6e/k4wKQzAX1qUAtQmtGYPwr9nV+2uq7 +zBBkIFLqAT+U7B7QnGbXC1xyUf2e/MAaxaiktaWWXuisFFarfQfah9YmXoLdo+A PlOOFHuIXx/J6ikeb9vSzSirJDbRKqGCxEaB7h4u0rLbGTtDW94yw7wfrqHb2UAA 64QlJ4B6/1Q2eygD2wrftABCSx8/3QPahF0WDW+Qk6UkVxAmR5GBkxPeLGGVT6MD jt99QlpLK8zgwNL+r6lDRB7xempCwOR7l6xa86YT2y+3jFmzxfTi72reDGlz5PpM fJSAjODxBzinwUNpOFZjrs/9JK8H6wFEvdD0kcIKZM1kTGViPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJgfZEW0mFF5pKFPfbTnd6g4Ql4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGI4NWFiYjktY2QzNC0z MTJmLWE2YTItNzhkYjI0ZTA1YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuioww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFDDiVtAfnucUfH9LCGH7cxiksxMQoEMWql17djO+KvqD7zir8qf7 H2SFPi9Y2IT+gWHIzO/ZA7nZ5kVUx6ocRXlb6hVK78LXf1n+yKshSAn/FzxtPppw GL3qX7mMw4EOqKSbZ8PNKMKNmoa4vIosHdylmOQbpSKz8oag7XBePjn7W6UVPSGk qvtXE1tvF42h9HiLTha6KPeAtYrS4Qx8aHSlsVMAzktvgNKkdOFOsPaZK5hACaQV SFGeaAkkK7kNeEtHr20lrIqlw/MSQ+qdW1Ixf4cW1Xuml1cYMKK+zBR7paLlMURV kxKsOHkDGS3JafnIm2dE1Cd9H2B77dM8YQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:37 2026 by rpki-client