This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc98f8a6-2ed5-3446-b04b-614ba76c53fa.roa File: fc98f8a6-2ed5-3446-b04b-614ba76c53fa.roa (raw, json) Hash identifier: 45VtI4z9eAx+726cdq53+Q4GnQzxSZsW/9TnRgT3Jlk= Subject key identifier: 8C:E0:81:36:19:C1:2B:3B:5F:BF:A5:EE:95:C5:DE:EF:2B:2C:41:1D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BF08084F7C53A5DBC4E0EB620 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc98f8a6-2ed5-3446-b04b-614ba76c53fa.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2e87:dc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:84:f7:c5:3a:5d:bc:4e:0e:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=79c0528b-744e-41d5-b053-dab69e6071da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:74:98:c9:22:f1:95:ed:13:b4:24:d3:ed: a0:23:d3:97:31:dd:07:2d:9e:38:84:e2:06:38:50: a3:4b:79:a6:e8:6e:d8:30:f0:31:4d:65:49:ed:58: 25:d1:bf:9a:04:55:a1:85:94:5f:d0:68:17:bf:cb: 51:dc:ea:48:79:84:de:be:a6:63:ee:a9:17:3f:01: cb:52:ce:7e:c9:11:d1:9c:8a:e5:66:52:b7:04:08: f4:b9:ec:f3:d2:52:6c:f1:26:b5:76:b4:d9:7c:21: 4a:ae:3f:8c:61:af:f3:6a:b3:7d:01:e1:ce:47:d7: 57:3a:43:9b:8d:ed:fd:02:cb:c8:e1:2d:1a:33:1f: af:01:3b:d9:c2:e0:f6:26:74:c3:c1:2d:cd:72:78: bb:a3:ec:b7:eb:98:0b:f4:c0:4b:28:e7:77:6e:3c: d6:a5:27:9f:dc:ae:f8:4f:d5:9f:69:bc:a1:1e:3e: 2e:00:89:94:18:2d:8b:60:c0:74:54:1f:3f:6a:26: 0c:e7:d0:df:c9:bf:42:11:ff:26:89:9f:5c:d1:51: 64:bd:aa:ab:af:f8:77:bf:75:21:83:fa:72:63:4a: 6e:8f:e5:a4:27:a3:0a:58:f8:46:07:3c:47:f2:0e: 59:24:a0:26:e1:2c:3b:59:92:fa:6e:82:55:4d:94: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:81:36:19:C1:2B:3B:5F:BF:A5:EE:95:C5:DE:EF:2B:2C:41:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc98f8a6-2ed5-3446-b04b-614ba76c53fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:dc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c9:3d:e3:ba:04:90:3f:31:36:e7:b3:91:06:78:ed:f4:b4: 43:b5:3e:76:c0:ff:96:e7:66:9f:e8:e7:35:8d:d3:90:41:3d: e6:9a:de:6b:60:22:83:7e:7d:5d:ac:61:d1:a3:30:07:56:8b: 39:d0:d7:58:65:11:7f:89:a4:3c:e1:d0:71:08:54:9a:df:88: b7:c7:e3:dd:5b:8e:ce:15:d6:29:dd:2c:dd:92:03:b8:52:25: a6:a0:c2:1f:0f:8e:78:20:7c:43:a1:6b:7e:af:45:67:a9:2b: 3b:8d:b6:51:bb:4b:7f:67:55:61:8a:81:a8:e4:46:80:12:53: 6e:da:97:d2:2c:72:b1:29:9e:d6:4c:f1:e7:7c:21:33:68:ae: 89:2a:c6:bd:6b:c1:dd:15:3c:17:d2:3c:d7:24:c8:0d:de:82: b8:4f:8e:f2:87:87:fb:b3:57:6c:26:84:d2:50:80:db:20:ab: 3b:92:4d:2a:d3:b2:1d:a5:49:2e:03:1c:96:fa:b8:0d:6a:8a: 5c:5c:28:4d:ad:f9:33:34:01:52:53:5f:ad:51:27:8d:31:1d: 7a:af:70:92:6d:42:4f:ca:f4:b3:07:79:a4:79:d2:65:c9:35: 3d:42:38:d1:4f:35:51:ee:d5:d0:ff:ff:14:5e:9d:53:d0:fd: 3a:be:83:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvwgIT3xTpdvE4OtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk NzljMDUyOGItNzQ0ZS00MWQ1LWIwNTMtZGFiNjllNjA3MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh190mMki8ZXtE7Qk0+2gI9OXMd0HLZ44hOIG OFCjS3mm6G7YMPAxTWVJ7Vgl0b+aBFWhhZRf0GgXv8tR3OpIeYTevqZj7qkXPwHL Us5+yRHRnIrlZlK3BAj0uezz0lJs8Sa1drTZfCFKrj+MYa/zarN9AeHOR9dXOkOb je39AsvI4S0aMx+vATvZwuD2JnTDwS3Ncni7o+y365gL9MBLKOd3bjzWpSef3K74 T9WfabyhHj4uAImUGC2LYMB0VB8/aiYM59Dfyb9CEf8miZ9c0VFkvaqrr/h3v3Uh g/pyY0puj+WkJ6MKWPhGBzxH8g5ZJKAm4Sw7WZL6boJVTZRC9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIzggTYZwSs7X7+l7pXF3u8rLEEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmM5OGY4YTYtMmVkNS0z NDQ2LWIwNGItNjE0YmE3NmM1M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh9ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUsk947oEkD8xNuezkQZ47fS0Q7U+dsD/ludmn+jnNY3TkEE95pre a2Aig359Xaxh0aMwB1aLOdDXWGURf4mkPOHQcQhUmt+It8fj3VuOzhXWKd0s3ZID uFIlpqDCHw+OeCB8Q6Frfq9FZ6krO422UbtLf2dVYYqBqORGgBJTbtqX0ixysSme 1kzx53whM2iuiSrGvWvB3RU8F9I81yTIDd6CuE+O8oeH+7NXbCaE0lCA2yCrO5JN KtOyHaVJLgMclvq4DWqKXFwoTa35MzQBUlNfrVEnjTEdeq9wkm1CT8r0swd5pHnS Zck1PUI40U81Ue7V0P//FF6dU9D9Or6DRA== -----END CERTIFICATE-----Generated at Tue Nov 25 13:59:08 2025 by rpki-client