This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa File: fcd0f538-be21-3f37-8b95-da810b4284fb.roa (raw, json) Hash identifier: IOV/eGjGIepZ2ce3dKfz/Th44gVUfVIbf2agaacRsWo= Subject key identifier: 6D:E3:AC:D4:0A:B5:A1:04:9A:33:A2:E1:D5:6F:FD:05:DE:6A:73:49 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6697F5974EABA7C8F8A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e89:9400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:69:7f:59:74:ea:ba:7c:8f:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=9c1f9e4f-c072-4ca7-b09f-cc06542b2680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:12:db:bf:3e:d1:98:33:28:cd:2f:74:20: fb:c3:cf:5e:71:6a:67:c3:7c:b0:8b:b8:a5:c4:b9: 7e:92:54:fa:af:96:18:4d:69:23:77:46:a5:ee:40: f7:7f:31:67:58:32:ba:b3:42:cd:cb:5f:55:40:42: 5a:19:7f:ee:00:c2:80:e8:a5:0a:f2:d3:4e:38:1a: 0a:19:d5:8d:42:c2:17:f9:63:48:07:48:81:51:0d: a0:ae:db:ab:5b:74:65:2e:d0:63:12:6e:a6:ef:af: 7a:af:8c:a8:09:be:01:5d:62:10:cb:96:93:7b:ad: 84:da:85:de:3c:3f:24:01:6c:1d:72:8e:2c:97:05: 62:37:d6:ec:92:b6:1e:66:8f:a7:09:64:cb:62:53: 57:6f:c8:d4:23:9b:be:48:67:dd:49:d4:88:59:eb: ce:95:a2:9d:50:17:c5:94:e7:f6:41:12:23:5f:66: 72:59:90:5b:54:29:aa:e8:5e:30:31:10:b9:73:1f: 3f:15:5e:9b:f0:b2:4d:96:cf:43:35:8c:de:0b:b1: 82:6a:83:37:47:c2:cc:fe:9c:50:c1:7e:e2:d9:ca: 1e:08:e5:de:d2:97:09:8e:5c:53:8f:3e:37:65:3c: 8f:3a:99:98:03:80:90:08:92:c1:91:f1:4c:4d:ca: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:AC:D4:0A:B5:A1:04:9A:33:A2:E1:D5:6F:FD:05:DE:6A:73:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:9400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d6:49:0a:3a:8b:45:b5:5a:c1:69:ec:fa:05:ee:c4:4f:04: 09:55:08:cd:79:c4:36:cb:7a:3d:26:ee:a1:48:f5:3a:51:da: b4:cb:db:73:ce:7a:c4:33:b4:fa:fe:d4:e3:cf:d6:45:39:71: 2a:7d:15:8a:7c:91:d0:0b:96:4f:46:12:12:fb:60:91:06:89: 4f:34:62:7d:87:0e:b2:da:60:67:62:b3:51:8e:ce:e8:fd:34: b0:39:c8:42:37:de:f9:f8:c5:5b:ed:3d:cc:22:ba:a5:80:22: f9:e6:47:33:d0:1f:bd:fc:ad:b6:5d:93:64:00:83:01:1f:08: 6e:0f:73:e5:cb:a9:8d:db:34:02:5e:bc:76:65:0a:d9:ef:29: 61:d2:12:c6:6c:01:e5:5f:21:64:89:ec:30:fd:ca:ae:b4:80: fd:d4:7b:34:3a:65:0b:ee:a4:0e:3e:df:a0:cb:63:f8:66:0e: d4:e1:36:e1:93:7b:17:6d:9c:aa:0b:28:cc:19:bc:bc:e2:70: 0b:51:28:cc:49:64:07:ba:05:cf:cb:a6:76:2d:7a:e8:6e:6d: 27:14:8a:c0:e6:2b:6b:75:94:9b:d3:31:83:e4:be:4b:4c:c5: 96:56:fa:2b:2c:c4:73:ec:55:6c:d3:11:a7:8b:29:b2:38:a9: c6:6c:82:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpml/WXTqunyPigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OWMxZjllNGYtYzA3Mi00Y2E3LWIwOWYtY2MwNjU0MmIyNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqgS278+0ZgzKM0vdCD7w89ecWpnw3ywi7il xLl+klT6r5YYTWkjd0al7kD3fzFnWDK6s0LNy19VQEJaGX/uAMKA6KUK8tNOOBoK GdWNQsIX+WNIB0iBUQ2grturW3RlLtBjEm6m7696r4yoCb4BXWIQy5aTe62E2oXe PD8kAWwdco4slwViN9bskrYeZo+nCWTLYlNXb8jUI5u+SGfdSdSIWevOlaKdUBfF lOf2QRIjX2ZyWZBbVCmq6F4wMRC5cx8/FV6b8LJNls9DNYzeC7GCaoM3R8LM/pxQ wX7i2coeCOXe0pcJjlxTjz43ZTyPOpmYA4CQCJLBkfFMTcpDnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG3jrNQKtaEEmjOi4dVv/QXeanNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmNkMGY1MzgtYmUyMS0z ZjM3LThiOTUtZGE4MTBiNDI4NGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiZQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQtZJCjqLRbVawWns+gXuxE8ECVUIzXnENst6PSbuoUj1OlHatMvb c856xDO0+v7U48/WRTlxKn0VinyR0AuWT0YSEvtgkQaJTzRifYcOstpgZ2KzUY7O 6P00sDnIQjfe+fjFW+09zCK6pYAi+eZHM9Afvfyttl2TZACDAR8Ibg9z5cupjds0 Al68dmUK2e8pYdISxmwB5V8hZInsMP3KrrSA/dR7NDplC+6kDj7foMtj+GYO1OE2 4ZN7F22cqgsozBm8vOJwC1EozElkB7oFz8umdi166G5tJxSKwOYra3WUm9Mxg+S+ S0zFllb6KyzEc+xVbNMRp4spsjipxmyClw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:11 2026 by rpki-client