This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa File: eb421c60-c420-3d40-afd5-0ea39a29fa53.roa (raw, json) Hash identifier: alC1rgsOal9pa+7TW2z+f1mgfMN0Ec1yyjHQnDnECnQ= Subject key identifier: 77:DE:DA:FB:14:F9:32:36:64:6C:CA:2D:4C:6B:2E:FC:D1:33:EF:EB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC11D4196440E24A50B880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:11:d4:19:64:40:e2:4a:50:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=544dfc2b-0a2a-41f0-aaed-8746a2b18d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:d1:27:1d:d3:68:2a:1e:3e:4d:a3:8d:d2: 80:ee:63:f1:98:fc:15:51:55:f2:4e:a4:55:2f:81: 6d:e8:b7:f3:84:ef:12:f5:06:c0:51:6c:18:2b:71: 89:f5:3b:b8:e8:9e:a0:74:88:0c:a3:ca:8d:cf:0a: dd:30:76:dd:8e:7b:22:bb:23:3d:b3:04:2c:d2:6d: 75:d8:42:9a:1e:d8:65:61:fb:36:02:df:61:46:26: 37:34:a7:27:b3:1c:d5:a1:71:e5:bd:c9:2e:d0:2b: 41:f4:83:a5:68:04:cb:0f:44:d0:ef:36:a3:e8:84: 63:3f:ee:ed:7b:15:fd:72:9e:48:29:c3:bb:5d:33: 51:3b:3b:56:1c:c9:e5:a7:7d:0d:12:d9:12:13:49: 8c:87:88:39:86:51:e7:0e:6e:df:be:eb:3c:0a:88: 81:50:9c:b7:f7:bd:23:4a:e5:62:41:a7:6c:c4:26: a0:52:41:79:52:9a:01:09:67:0e:15:f6:e1:a1:bb: 27:a4:1c:25:8f:48:0a:63:1c:11:81:25:57:74:60: 42:67:f2:10:c4:bf:80:73:22:5c:41:b3:aa:e7:2c: 08:00:2a:cf:18:38:19:27:37:51:d2:42:52:12:23: bd:7c:9e:d8:ee:c6:67:fc:df:15:43:4c:45:48:d8: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DE:DA:FB:14:F9:32:36:64:6C:CA:2D:4C:6B:2E:FC:D1:33:EF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fb:5f:34:94:42:ec:43:e4:e0:0c:c7:62:ce:56:07:7c:13: 49:fb:a3:95:21:21:e8:d7:c5:3a:9e:4a:df:50:56:31:ff:98: 62:f1:ac:b3:66:c6:32:b1:a2:09:55:ad:c0:c2:ac:b4:4c:53: fd:07:90:51:6a:36:c7:42:80:10:12:33:ef:28:b1:4b:cf:1e: 99:53:7b:ef:8f:52:87:76:4d:8b:90:ec:ab:6e:8a:40:72:1a: 40:7f:dd:18:af:0a:09:59:7d:25:0d:f8:e1:04:b8:34:11:72: 1f:a7:b7:a6:3d:81:09:f6:31:ed:80:ba:3d:d3:bd:27:02:2c: b0:0f:55:39:4c:57:cf:53:7f:dd:46:35:5e:69:9b:ec:aa:26: b3:16:98:6d:05:f3:52:88:7b:28:74:35:a1:03:7e:93:f2:5c: f3:5a:af:3d:a0:54:c2:a8:5b:18:b9:84:2d:d4:0d:a1:29:ff: 42:d2:1c:48:9e:8a:cf:1b:69:5f:33:fa:13:f9:50:18:2a:87: 4a:ca:d9:af:dd:d9:85:f2:13:85:b8:cf:4e:12:b2:3c:67:8a: fe:d6:87:93:dc:de:a4:63:d7:a2:7f:be:32:b1:26:12:25:b7: 03:64:d9:c9:d6:a4:cf:ef:b0:b4:3a:24:90:a6:84:89:91:d8: 38:06:fe:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3BHUGWRA4kpQuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTQ0ZGZjMmItMGEyYS00MWYwLWFhZWQtODc0NmEyYjE4ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoTRJx3TaCoePk2jjdKA7mPxmPwVUVXyTqRV L4Ft6LfzhO8S9QbAUWwYK3GJ9Tu46J6gdIgMo8qNzwrdMHbdjnsiuyM9swQs0m11 2EKaHthlYfs2At9hRiY3NKcnsxzVoXHlvcku0CtB9IOlaATLD0TQ7zaj6IRjP+7t exX9cp5IKcO7XTNROztWHMnlp30NEtkSE0mMh4g5hlHnDm7fvus8CoiBUJy3970j SuViQadsxCagUkF5UpoBCWcOFfbhobsnpBwlj0gKYxwRgSVXdGBCZ/IQxL+AcyJc QbOq5ywIACrPGDgZJzdR0kJSEiO9fJ7Y7sZn/N8VQ0xFSNit6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHfe2vsU+TI2ZGzKLUxrLvzRM+/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWI0MjFjNjAtYzQyMC0z ZDQwLWFmZDUtMGVhMzlhMjlmYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVPtfNJRC7EPk4AzHYs5WB3wTSfujlSEh6NfFOp5K31BWMf+YYvGs s2bGMrGiCVWtwMKstExT/QeQUWo2x0KAEBIz7yixS88emVN7749Sh3ZNi5Dsq26K QHIaQH/dGK8KCVl9JQ344QS4NBFyH6e3pj2BCfYx7YC6PdO9JwIssA9VOUxXz1N/ 3UY1Xmmb7KomsxaYbQXzUoh7KHQ1oQN+k/Jc81qvPaBUwqhbGLmELdQNoSn/QtIc SJ6KzxtpXzP6E/lQGCqHSsrZr93ZhfIThbjPThKyPGeK/taHk9zepGPXon++MrEm EiW3A2TZydakz++wtDokkKaEiZHYOAb+wA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:42 2026 by rpki-client