This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa File: f597dc93-c66b-3570-afe6-71622af75858.roa (raw, json) Hash identifier: R4zNw5VPlILM/fXn0CB+VzxOEKWnqSV9njPiOeuuOts= Subject key identifier: 88:3F:B2:16:66:1A:F8:4F:C6:C8:E9:8F:0B:DB:92:6F:3F:F6:DC:48 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A82FB2935683575BE968E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:dc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2f:b2:93:56:83:57:5b:e9:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=332903de-ce66-4de8-8728-0d228710578c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:10:fa:14:8b:1b:6f:8a:22:7a:cd:88:98: 0f:52:10:19:a5:e4:8e:f1:3a:e4:f4:13:d7:85:11: ea:ac:b7:23:87:5c:8c:70:8c:88:a7:dc:5e:c7:f1: 02:45:cd:14:46:80:e9:2c:14:73:ff:da:08:47:90: 7b:09:cb:f8:38:2a:cc:78:f3:be:1f:e3:4b:2c:74: 6b:3d:dc:98:81:a3:a0:e4:5b:ac:27:fe:96:f7:9a: 90:c4:70:9f:7b:61:e3:ce:6b:e2:8f:e8:0c:5a:b6: 17:4f:59:2d:5f:56:50:71:57:60:75:b5:7b:04:a0: 29:e2:0c:22:26:f0:a1:25:d7:0d:5c:04:f9:f8:e3: df:e0:cb:17:67:e7:53:2f:b6:53:78:41:0f:9e:24: 8d:92:f8:3e:7a:6e:24:b9:25:dc:f4:0a:c6:73:ed: b4:77:14:ef:2f:e0:57:59:93:3e:07:24:6e:53:fa: cb:16:21:11:da:fb:eb:17:37:46:5e:97:b2:94:2b: b4:8d:95:2f:60:ec:5a:89:28:d2:c9:7b:51:de:16: d6:4b:f6:a0:82:e2:c4:95:99:25:79:96:05:19:08: 2e:0c:4b:0d:6a:22:ca:f9:e3:87:e2:d7:af:6c:01: 22:6a:6d:8e:cc:13:f6:b7:08:0f:b0:71:58:56:18: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3F:B2:16:66:1A:F8:4F:C6:C8:E9:8F:0B:DB:92:6F:3F:F6:DC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:dc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f9:87:32:c1:2a:7a:48:c2:8d:04:f2:0a:4c:09:90:15:ae: 9f:83:83:ec:c1:23:d1:c2:b0:5e:20:1f:4b:d8:29:18:88:a5: 98:e4:14:64:0b:4c:1d:f6:69:08:05:76:d8:89:5c:6a:94:ec: 51:16:17:f4:27:9e:f0:d7:70:c0:69:7d:d1:fa:f1:9b:ee:06: fa:d7:95:36:f4:bf:12:43:61:74:06:18:20:fd:9c:bf:10:49: 03:a8:5e:01:76:40:bb:87:4b:20:7d:60:fb:fa:32:c1:30:4f: 74:b7:9a:99:c5:f6:83:ce:f6:60:15:a0:9f:38:ad:70:ab:87: a4:d2:40:c3:34:ba:50:b7:fd:c8:2e:c0:2b:41:f7:90:47:22: 4d:0e:19:03:8b:49:23:3b:a3:1f:e2:db:06:63:85:c6:93:5a: 51:76:bc:12:88:f8:13:58:2d:51:4f:50:ad:13:6c:92:23:69: 11:f8:f2:42:bd:8a:95:fd:cc:6b:fb:36:73:89:b8:3a:eb:e1: a8:f2:bd:10:c2:eb:2b:5d:9d:24:59:8e:90:46:d7:7f:42:c5: 96:e1:29:8e:aa:b5:f0:39:42:f2:ab:66:ce:83:06:c3:1f:c2: 31:83:c5:4a:1b:a8:00:23:a7:88:68:67:ac:d4:6d:ef:6b:75: 5a:e1:d8:de -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqC+yk1aDV1vpaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzMyOTAzZGUtY2U2Ni00ZGU4LTg3MjgtMGQyMjg3MTA1NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMoQ+hSLG2+KInrNiJgPUhAZpeSO8Trk9BPX hRHqrLcjh1yMcIyIp9xex/ECRc0URoDpLBRz/9oIR5B7Ccv4OCrMePO+H+NLLHRr PdyYgaOg5FusJ/6W95qQxHCfe2Hjzmvij+gMWrYXT1ktX1ZQcVdgdbV7BKAp4gwi JvChJdcNXAT5+OPf4MsXZ+dTL7ZTeEEPniSNkvg+em4kuSXc9ArGc+20dxTvL+BX WZM+ByRuU/rLFiER2vvrFzdGXpeylCu0jZUvYOxaiSjSyXtR3hbWS/agguLElZkl eZYFGQguDEsNaiLK+eOH4tevbAEiam2OzBP2twgPsHFYVhgmJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIg/shZmGvhPxsjpjwvbkm8/9txIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjU5N2RjOTMtYzY2Yi0z NTcwLWFmZTYtNzE2MjJhZjc1ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuidww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXPmHMsEqekjCjQTyCkwJkBWun4OD7MEj0cKwXiAfS9gpGIilmOQU ZAtMHfZpCAV22IlcapTsURYX9Cee8NdwwGl90frxm+4G+teVNvS/EkNhdAYYIP2c vxBJA6heAXZAu4dLIH1g+/oywTBPdLeamcX2g872YBWgnzitcKuHpNJAwzS6ULf9 yC7AK0H3kEciTQ4ZA4tJIzujH+LbBmOFxpNaUXa8Eoj4E1gtUU9QrRNskiNpEfjy Qr2Klf3Ma/s2c4m4OuvhqPK9EMLrK12dJFmOkEbXf0LFluEpjqq18DlC8qtmzoMG wx/CMYPFShuoACOniGhnrNRt72t1WuHY3g== -----END CERTIFICATE-----Generated at Sat Jan 10 22:29:06 2026 by rpki-client