This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa File: e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa (raw, json) Hash identifier: z2P5TAhEXoUNFCkTo15tIP63TUa+ojYABRzzWiVQ8yk= Subject key identifier: 52:E3:66:7A:D4:38:3F:8A:E0:F4:91:72:CD:B6:43:B4:20:D2:93:C9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A68E91E5EA0DE6F1DBDF80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:8e:91:e5:ea:0d:e6:f1:db:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=39aef74e-1bb7-4d49-bb56-9ef2580230e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:22:ec:61:e7:20:01:2b:5d:dc:41:d8:73: 02:bc:56:16:8d:ec:36:4f:73:ca:9b:32:c2:da:b9: 5f:78:46:de:60:02:dc:3e:ea:ef:e1:e0:6e:c6:49: 68:fb:fb:ac:6d:b4:ef:8a:cb:1b:f4:33:0f:98:2b: 63:f8:27:c3:2b:91:1a:4e:1c:ae:5b:4a:c4:0b:ec: d6:c5:28:64:10:71:94:7f:b0:13:48:d8:09:68:ba: 25:bc:b0:ab:68:39:c1:79:22:5e:4b:86:fd:ae:17: 14:d0:3b:00:7d:02:a9:b8:cf:8c:28:78:eb:7f:eb: fe:1a:8b:b0:f3:a7:ab:a9:78:97:1d:c8:57:f0:05: a0:76:56:e3:65:d2:46:a0:07:b1:8c:07:5d:c9:7e: 0e:a3:ac:d4:fd:a4:3a:0e:78:6e:19:48:90:d4:69: 65:46:27:7e:88:f0:6e:a4:06:42:b8:ca:09:bb:e8: 47:2f:81:98:1d:85:dc:9e:27:97:29:e9:49:bf:5f: ba:59:34:9f:09:d8:53:8c:e8:0c:aa:7c:2e:5c:07: 4a:c1:68:cc:a2:51:73:74:1e:b3:d8:52:fc:87:ad: 60:a0:4c:dc:64:ec:6b:85:c1:e3:d9:f1:66:30:05: cc:62:0e:dc:e6:84:b0:0b:d8:a3:97:2b:2b:e2:18: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:66:7A:D4:38:3F:8A:E0:F4:91:72:CD:B6:43:B4:20:D2:93:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fd:eb:6e:2b:0d:98:ca:9b:39:85:1a:a5:74:0a:e6:3f:89: 01:02:80:c1:84:1d:14:36:98:32:47:98:d7:b8:aa:ca:5e:64: a6:89:95:b0:6e:c4:ac:01:67:1b:e4:9b:86:92:b3:98:48:f5: b2:1f:42:bd:22:2a:54:9a:80:b9:87:83:3e:45:47:fb:65:d9: 6a:50:22:22:e2:93:13:4d:8e:10:6c:8c:2d:42:1e:c2:24:b4: 50:77:17:c8:b2:c6:c7:1d:9f:76:97:8d:60:f2:b2:1d:5b:0b: 5b:0f:d6:73:95:e3:bd:f1:e0:3c:4a:da:9f:2e:fe:96:c8:3b: ad:5d:e1:b0:73:29:6d:1e:bc:ea:f2:cd:51:90:15:b5:85:df: 15:7b:31:fc:6d:c5:71:a6:83:17:31:0c:e2:7d:a4:3f:23:1c: 1f:9c:45:20:74:be:09:2e:67:41:38:38:93:e6:19:01:6f:f1: d1:10:4f:4b:a6:1b:c6:f5:c7:44:d6:d8:4b:08:f6:d3:a9:73: 44:ba:21:77:65:e9:1f:ab:87:5d:82:30:ce:8b:53:de:49:d9: 92:2f:c0:de:32:a1:d9:19:a9:7a:11:ab:3c:17:86:e4:dc:da: bc:d6:bf:17:28:1a:a9:c9:86:73:86:41:74:30:4e:ad:eb:af: ba:1e:8d:aa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpo6R5eoN5vHb34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzlhZWY3NGUtMWJiNy00ZDQ5LWJiNTYtOWVmMjU4MDIzMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQi7GHnIAErXdxB2HMCvFYWjew2T3PKmzLC 2rlfeEbeYALcPurv4eBuxklo+/usbbTvissb9DMPmCtj+CfDK5EaThyuW0rEC+zW xShkEHGUf7ATSNgJaLolvLCraDnBeSJeS4b9rhcU0DsAfQKpuM+MKHjrf+v+Gouw 86erqXiXHchX8AWgdlbjZdJGoAexjAddyX4Oo6zU/aQ6DnhuGUiQ1GllRid+iPBu pAZCuMoJu+hHL4GYHYXcnieXKelJv1+6WTSfCdhTjOgMqnwuXAdKwWjMolFzdB6z 2FL8h61goEzcZOxrhcHj2fFmMAXMYg7c5oSwC9ijlysr4hjvAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFLjZnrUOD+K4PSRcs22Q7Qg0pPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTUwZTc3ZDgtZDA1ZC0z NjQ4LThkZGYtMTgxOGIzYWNiODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujSgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALv3rbisNmMqbOYUapXQK5j+JAQKAwYQdFDaYMkeY17iqyl5kpomV sG7ErAFnG+SbhpKzmEj1sh9CvSIqVJqAuYeDPkVH+2XZalAiIuKTE02OEGyMLUIe wiS0UHcXyLLGxx2fdpeNYPKyHVsLWw/Wc5XjvfHgPErany7+lsg7rV3hsHMpbR68 6vLNUZAVtYXfFXsx/G3FcaaDFzEM4n2kPyMcH5xFIHS+CS5nQTg4k+YZAW/x0RBP S6YbxvXHRNbYSwj206lzRLohd2XpH6uHXYIwzotT3knZki/A3jKh2RmpehGrPBeG 5NzavNa/FygaqcmGc4ZBdDBOreuvuh6Nqg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:00 2026 by rpki-client