This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fefe6fa3-9a35-3cb9-9a3b-dfc2daaeb380.roa File: fefe6fa3-9a35-3cb9-9a3b-dfc2daaeb380.roa (raw, json) Hash identifier: RJKk35K8wr0N3xvU3DIAh1NCtigyrMbZ/mj0ZAG/WtM= Subject key identifier: 90:52:60:8F:D5:12:F6:02:FA:74:31:64:A7:5B:2D:08:15:C2:B9:99 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC0D5DE2E98E8274E52880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fefe6fa3-9a35-3cb9-9a3b-dfc2daaeb380.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e8c:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:0d:5d:e2:e9:8e:82:74:e5:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=daf2b560-3149-4cf0-ae88-9bcc5a414830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9c:35:cb:8c:37:09:7d:7d:45:27:b3:b5:a0: fc:7a:62:19:ca:1b:00:16:0f:7d:73:55:88:9d:ba: d4:c3:b8:2a:49:e9:3e:fa:6a:0c:fa:89:a7:0b:c1: bb:79:ca:d3:3f:1e:ac:b6:5c:44:52:13:32:7b:37: db:b9:00:dd:d9:f0:d1:88:56:49:d8:26:53:e8:56: 46:f7:e6:75:e7:aa:9a:ff:59:82:66:81:48:c4:53: 02:59:6c:7c:b5:a1:c9:2f:e6:cc:14:22:4c:ed:e9: e6:a0:4e:a8:b0:fd:02:41:0e:7b:9b:27:9a:b1:82: cd:97:1f:e2:1a:07:64:cf:b0:5f:61:68:08:68:45: c0:ea:fd:d1:31:0d:3f:05:f9:ea:ef:55:f1:20:59: c2:02:cb:89:d4:08:25:c8:a2:88:12:fc:ca:3b:16: 40:fb:d9:d7:64:f4:db:95:09:27:73:80:25:43:5b: c4:f4:10:30:cf:ba:a1:c0:86:1d:7e:47:24:a1:97: 40:5f:28:8c:cd:2a:5f:4e:0b:ac:0a:3a:6b:86:06: 6a:9f:2a:16:a6:5e:3b:ec:c1:e9:c5:a7:f5:2f:5d: 9a:7e:27:a9:29:24:82:8e:af:9d:33:8b:f2:74:6d: 6c:cc:a1:b4:a7:42:e7:cb:f5:fa:03:92:5f:6d:f0: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:60:8F:D5:12:F6:02:FA:74:31:64:A7:5B:2D:08:15:C2:B9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fefe6fa3-9a35-3cb9-9a3b-dfc2daaeb380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e8:03:61:09:02:e2:b1:ba:ca:0e:8d:45:77:95:b0:ba:d0: 31:70:1c:bb:0d:77:2f:41:14:c7:72:5a:3d:70:64:c0:21:9d: ef:62:71:08:63:66:b6:15:c6:0a:43:e1:14:37:6f:0d:37:a7: f1:eb:78:ea:27:a0:ad:52:65:7d:48:69:a7:43:85:10:f2:0b: 3b:28:6b:e6:48:df:96:a3:ea:75:68:c0:f5:80:21:77:54:32: 94:bc:5b:08:06:64:96:00:6c:f8:f9:f1:9e:f2:28:02:06:88: 57:03:f0:b6:33:56:21:b7:c2:d9:36:fe:d2:24:03:63:97:a9: 56:15:43:78:d7:f8:8e:f2:4e:c0:5f:66:c8:85:df:6c:16:a9: 41:3f:62:ec:01:1d:d1:5d:d4:4e:fa:bb:87:9a:3b:9d:cf:ef: b0:7c:fd:f3:59:50:9c:28:5f:81:23:90:f7:b8:53:75:e5:d0: be:ea:52:b9:39:dd:2b:ca:d9:22:3d:58:e5:76:18:c3:1c:fe: 0b:97:63:15:d8:12:f1:ad:4a:36:16:f5:6d:91:35:c6:7a:bd: 21:d6:ae:ce:c6:eb:01:0a:48:4b:9e:fd:20:e7:63:0b:65:01: 44:6a:b9:b4:cf:bd:8a:a5:c7:f6:55:d0:0f:b2:6c:24:69:1b: 00:77:72:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3A1d4umOgnTlKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGFmMmI1NjAtMzE0OS00Y2YwLWFlODgtOWJjYzVhNDE0ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zw1y4w3CX19RSeztaD8emIZyhsAFg99c1WI nbrUw7gqSek++moM+omnC8G7ecrTPx6stlxEUhMyezfbuQDd2fDRiFZJ2CZT6FZG 9+Z156qa/1mCZoFIxFMCWWx8taHJL+bMFCJM7enmoE6osP0CQQ57myeasYLNlx/i Ggdkz7BfYWgIaEXA6v3RMQ0/Bfnq71XxIFnCAsuJ1AglyKKIEvzKOxZA+9nXZPTb lQknc4AlQ1vE9BAwz7qhwIYdfkckoZdAXyiMzSpfTgusCjprhgZqnyoWpl477MHp xaf1L12afiepKSSCjq+dM4vydG1szKG0p0Lny/X6A5JfbfDMTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJBSYI/VEvYC+nQxZKdbLQgVwrmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmVmZTZmYTMtOWEzNS0z Y2I5LTlhM2ItZGZjMmRhYWViMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALegDYQkC4rG6yg6NRXeVsLrQMXAcuw13L0EUx3JaPXBkwCGd72Jx CGNmthXGCkPhFDdvDTen8et46iegrVJlfUhpp0OFEPILOyhr5kjflqPqdWjA9YAh d1QylLxbCAZklgBs+PnxnvIoAgaIVwPwtjNWIbfC2Tb+0iQDY5epVhVDeNf4jvJO wF9myIXfbBapQT9i7AEd0V3UTvq7h5o7nc/vsHz981lQnChfgSOQ97hTdeXQvupS uTndK8rZIj1Y5XYYwxz+C5djFdgS8a1KNhb1bZE1xnq9IdauzsbrAQpIS579IOdj C2UBRGq5tM+9iqXH9lXQD7JsJGkbAHdysQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:12 2026 by rpki-client