This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02011ba6-8bf7-3f28-860d-ad4ed3a0be5b.roa File: 02011ba6-8bf7-3f28-860d-ad4ed3a0be5b.roa (raw, json) Hash identifier: W1rnH68sDNN6smLtWtb9IOVliNEPi40LrzAw7BT5Xvw= Subject key identifier: 33:99:37:61:36:47:9D:FC:A2:DA:17:BE:6E:E9:BA:69:CB:29:D5:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C0E919D5247F06CD459345F60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02011ba6-8bf7-3f28-860d-ad4ed3a0be5b.roa Signing time: Tue 02 Dec 2025 20:29:21 +0000 ROA not before: Tue 02 Dec 2025 20:29:21 +0000 ROA not after: Mon 02 Mar 2026 20:29:21 +0000 asID: 30036 IP address blocks: 2604:2e8a:5800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0e:91:9d:52:47:f0:6c:d4:59:34:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 2 20:29:21 2025 GMT Not After : Mar 2 20:29:21 2026 GMT Subject: CN=d2a75524-c813-42f2-93bc-cf24047b26e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:f0:86:cb:c2:ce:31:33:8e:3b:c7:21:5d: 91:c5:c7:40:a0:5e:a0:ce:b7:6b:54:a9:a1:8f:fb: c4:ad:18:bc:6c:38:56:dc:c0:95:5c:36:32:ac:42: c9:59:46:0d:5d:0d:25:f2:6b:89:c9:ef:ec:da:87: 40:ec:a5:4d:ba:0c:6d:fb:bd:af:fa:82:af:49:18: 1a:c6:33:37:55:83:a0:70:b0:36:76:db:39:da:79: 6f:ed:52:ed:9f:36:05:b3:46:c0:bf:50:21:4c:e7: 57:ed:81:6a:ca:f0:e7:1b:a4:02:a7:c1:8a:fd:b7: 51:41:55:51:28:dc:3f:4e:e3:8f:41:d8:51:82:30: cb:bd:46:62:b8:b6:ca:ef:0d:d9:4d:ca:5c:f6:70: 38:8d:fd:63:30:5e:f7:c2:1f:fb:1c:1f:ec:2b:bd: 65:16:5c:61:b1:ed:38:2d:e7:e6:b8:14:e4:f5:9f: 3d:8b:1e:5a:e0:b1:f0:42:2d:e0:8f:0c:e1:9d:35: 24:7d:0b:87:c6:86:66:f9:b2:47:d0:56:50:8f:57: ef:0d:6d:91:2f:26:9c:b3:ac:27:ab:a1:76:3f:ec: 99:be:46:04:3e:38:69:80:82:b8:39:c5:9a:ad:1a: 42:d1:9f:56:56:7e:3d:6d:d6:53:23:70:68:c4:08: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:99:37:61:36:47:9D:FC:A2:DA:17:BE:6E:E9:BA:69:CB:29:D5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02011ba6-8bf7-3f28-860d-ad4ed3a0be5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:5800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:23:80:08:8c:a4:3d:bb:70:6f:63:a6:ba:2c:ed:a9:68:f3: 13:eb:4b:48:4b:90:97:f8:b3:49:dd:0e:77:58:d0:7c:8f:cf: 0f:17:ae:0a:9f:6f:81:32:fb:c4:49:f2:b1:69:66:1d:49:42: ad:ad:d8:b8:03:08:fb:d7:c0:0b:96:cf:b1:83:44:8d:65:6f: 57:14:c0:d3:a9:ee:c6:e4:ae:2f:d4:a9:bb:4e:e0:7b:e4:a5: 2d:15:a6:8b:1d:c0:ca:a5:3d:23:86:85:58:ca:b9:88:80:36: 36:a1:36:76:06:26:65:3f:a5:a2:20:48:0b:be:b1:6e:8c:65: 5d:15:c8:ad:16:59:55:e7:d3:6f:66:db:25:1b:55:48:da:66: c3:38:de:ee:e6:6b:af:8f:72:2b:2a:8d:ef:8e:db:1f:df:c4: 8e:28:cf:4b:e5:8c:4a:52:96:6a:9d:f0:2e:80:b9:9b:50:8e: b2:8e:53:75:eb:20:da:f4:e5:99:68:2a:31:34:62:20:63:41: 05:b1:05:d4:e4:ca:4d:93:90:84:ab:ac:0d:60:01:15:42:1d: 5b:8c:69:9a:8c:61:54:50:33:40:67:cb:fe:32:6b:67:46:08: 4b:51:f7:0e:a6:f6:c4:e0:c5:50:5e:05:d3:c3:c5:4d:1a:4f: d3:e2:73:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwOkZ1SR/Bs1Fk0X2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIwMjIwMjkyMVoXDTI2MDMwMjIwMjkyMVowLzEtMCsGA1UEAxMk ZDJhNzU1MjQtYzgxMy00MmYyLTkzYmMtY2YyNDA0N2IyNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg3whsvCzjEzjjvHIV2RxcdAoF6gzrdrVKmh j/vErRi8bDhW3MCVXDYyrELJWUYNXQ0l8muJye/s2odA7KVNugxt+72v+oKvSRga xjM3VYOgcLA2dts52nlv7VLtnzYFs0bAv1AhTOdX7YFqyvDnG6QCp8GK/bdRQVVR KNw/TuOPQdhRgjDLvUZiuLbK7w3ZTcpc9nA4jf1jMF73wh/7HB/sK71lFlxhse04 LefmuBTk9Z89ix5a4LHwQi3gjwzhnTUkfQuHxoZm+bJH0FZQj1fvDW2RLyacs6wn q6F2P+yZvkYEPjhpgIK4OcWarRpC0Z9WVn49bdZTI3BoxAiXmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDOZN2E2R538otoXvm7pumnLKdW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDIwMTFiYTYtOGJmNy0z ZjI4LTg2MGQtYWQ0ZWQzYTBiZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuilgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWCOACIykPbtwb2OmuiztqWjzE+tLSEuQl/izSd0Od1jQfI/PDxeu Cp9vgTL7xEnysWlmHUlCra3YuAMI+9fAC5bPsYNEjWVvVxTA06nuxuSuL9Spu07g e+SlLRWmix3AyqU9I4aFWMq5iIA2NqE2dgYmZT+loiBIC76xboxlXRXIrRZZVefT b2bbJRtVSNpmwzje7uZrr49yKyqN747bH9/EjijPS+WMSlKWap3wLoC5m1COso5T desg2vTlmWgqMTRiIGNBBbEF1OTKTZOQhKusDWABFUIdW4xpmoxhVFAzQGfL/jJr Z0YIS1H3Dqb2xODFUF4F08PFTRpP0+JzFg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:05 2025 by rpki-client