This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecb6586f-5a8c-3f54-92b9-536b7e3fb596.roa File: ecb6586f-5a8c-3f54-92b9-536b7e3fb596.roa (raw, json) Hash identifier: ZdcsknftBG+SK3/qY5/YDx/bHC4oR4NUwKHlM7D5Gsg= Subject key identifier: E0:3C:99:AF:C0:86:20:E5:95:4E:F4:69:34:A4:14:3B:D0:08:D5:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBE1E8DE3A84531A821600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecb6586f-5a8c-3f54-92b9-536b7e3fb596.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e1:e8:de:3a:84:53:1a:82:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ea1ab82d-3fc4-4bce-ac7e-e81709f8909c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:11:31:41:da:55:0b:93:af:a9:62:ae:ab: 6b:2f:12:31:98:2d:c9:a0:11:3b:d1:94:85:55:c0: 78:e0:0a:15:09:46:8d:28:b2:0f:ff:41:f4:91:b5: 7c:11:12:13:42:2f:bc:5f:0d:54:a9:58:06:1a:74: 7c:a5:cc:be:58:b8:be:86:39:f1:57:40:af:bb:e6: 72:1a:40:74:8f:b3:5c:71:cb:cd:1f:1f:58:ea:96: b4:75:ae:dc:a6:b1:85:60:90:71:15:84:5f:64:1b: aa:5a:bc:4f:a1:d1:7a:3f:b3:ef:22:88:aa:b1:9f: b5:a7:f3:e4:a9:e1:0e:e8:47:c4:f7:d7:db:23:06: b7:76:35:bf:cf:c5:a6:e6:3a:b4:6d:15:c2:8f:ae: 5b:64:e4:f4:dd:df:59:ba:fd:88:45:4c:fa:8e:95: e3:6b:53:38:54:bb:2a:3d:dd:1c:b7:13:50:69:60: af:88:da:d9:7f:35:e1:f2:33:ca:53:24:ba:e6:8e: 65:6f:db:36:a2:e0:f3:66:0d:3a:26:d2:e7:00:9b: 7b:6f:05:1d:59:68:6f:2a:f0:f1:7e:1f:dd:6a:2f: b3:06:36:93:c3:42:4c:13:ee:20:73:46:27:0b:ed: bb:97:3b:8b:d2:fe:0e:3e:50:88:7b:cb:b3:3e:0c: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3C:99:AF:C0:86:20:E5:95:4E:F4:69:34:A4:14:3B:D0:08:D5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecb6586f-5a8c-3f54-92b9-536b7e3fb596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:dc:b2:a9:2d:52:04:64:57:ee:bf:34:67:d5:df:90:91:bb: a2:2a:f7:dc:0c:97:3d:4d:33:fd:13:0f:cf:04:94:28:78:25: 05:68:f3:af:50:fc:82:38:43:56:d4:b2:aa:2b:54:22:85:f9: 92:30:14:74:2e:1c:6b:cc:d4:83:b0:0f:da:59:a9:5e:53:b6: bc:42:23:01:87:9e:53:7e:35:b9:c3:6e:5e:4c:3c:39:86:fe: 93:34:1a:80:01:82:02:ff:d6:a3:d8:f5:5f:a6:42:42:3f:b9: 8a:28:cd:3f:ff:b1:26:61:64:af:f1:e2:3b:4f:d2:2b:44:dd: ca:e2:ed:3d:17:95:77:f2:3c:5a:eb:10:14:87:97:2d:5b:a5: dd:1b:cb:76:14:4d:97:bf:a6:70:42:04:60:b7:7e:a9:a9:0f: b5:a4:fd:7b:b9:43:4c:f3:97:f7:02:08:b6:6a:78:d0:b9:b8: 72:a9:38:de:e7:d0:7c:10:f0:35:4b:df:28:63:34:00:ba:ad: 22:1e:88:f8:1c:8d:e5:ba:75:4e:a7:19:57:88:a8:bc:4d:f1: ac:56:1d:2f:1e:79:0c:42:bb:01:90:56:31:78:15:c4:9b:4d: ad:1d:6d:10:e3:ce:58:70:af:d3:a8:61:e6:c7:57:40:d1:36: fd:e6:b6:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2+Ho3jqEUxqCFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWExYWI4MmQtM2ZjNC00YmNlLWFjN2UtZTgxNzA5Zjg5MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk8RMUHaVQuTr6lirqtrLxIxmC3JoBE70ZSF VcB44AoVCUaNKLIP/0H0kbV8ERITQi+8Xw1UqVgGGnR8pcy+WLi+hjnxV0Cvu+Zy GkB0j7NcccvNHx9Y6pa0da7cprGFYJBxFYRfZBuqWrxPodF6P7PvIoiqsZ+1p/Pk qeEO6EfE99fbIwa3djW/z8Wm5jq0bRXCj65bZOT03d9Zuv2IRUz6jpXja1M4VLsq Pd0ctxNQaWCviNrZfzXh8jPKUyS65o5lb9s2ouDzZg06JtLnAJt7bwUdWWhvKvDx fh/dai+zBjaTw0JME+4gc0YnC+27lzuL0v4OPlCIe8uzPgwluQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOA8ma/AhiDllU70aTSkFDvQCNX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWNiNjU4NmYtNWE4Yy0z ZjU0LTkyYjktNTM2YjdlM2ZiNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuikww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANNyyqS1SBGRX7r80Z9XfkJG7oir33AyXPU0z/RMPzwSUKHglBWjz r1D8gjhDVtSyqitUIoX5kjAUdC4ca8zUg7AP2lmpXlO2vEIjAYeeU341ucNuXkw8 OYb+kzQagAGCAv/Wo9j1X6ZCQj+5iijNP/+xJmFkr/HiO0/SK0TdyuLtPReVd/I8 WusQFIeXLVul3RvLdhRNl7+mcEIEYLd+qakPtaT9e7lDTPOX9wIItmp40Lm4cqk4 3ufQfBDwNUvfKGM0ALqtIh6I+ByN5bp1TqcZV4iovE3xrFYdLx55DEK7AZBWMXgV xJtNrR1tEOPOWHCv06hh5sdXQNE2/ea2zg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:59 2026 by rpki-client