This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa File: 4970289e-0c50-35cd-a171-04bce26a0a5c.roa (raw, json) Hash identifier: vSb7WdKUL+9FGmfD/8Bxew/2ZjYBNvWpAeUnLWBhPfk= Subject key identifier: EC:AA:E8:4D:9B:8E:C0:F6:C6:0B:34:52:63:7C:0D:2C:41:F4:F8:65 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C50D1942B4EC9E3E434B1E100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e87:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:94:2b:4e:c9:e3:e4:34:b1:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=056dd0e5-2a35-4980-93ab-3749e944d4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:8f:27:49:a3:e5:c7:a7:94:aa:0e:a9:e4: e0:36:1f:af:ec:6b:a6:65:c7:05:cd:2e:c1:8f:97: db:3f:46:08:13:fa:6f:99:8b:9a:d5:9f:5b:6f:f9: df:77:05:ec:79:2a:0d:dc:e1:25:54:d3:7f:35:de: a5:25:b4:b2:cd:62:e7:aa:a6:a7:b4:d6:1b:e1:d3: 5e:2a:84:3f:bc:cb:69:51:8d:31:d2:72:19:53:f5: 79:89:a4:27:0e:f5:f1:84:02:77:3d:f0:7b:56:56: 02:cd:0d:d0:74:0d:44:45:8a:e8:da:64:be:75:3b: 8e:e5:a6:03:d2:e6:c6:42:e2:53:60:4e:54:42:e0: 3c:f3:7f:0c:49:bf:b3:dc:21:a5:45:a8:19:10:1e: 9f:da:cd:e3:d1:e5:45:57:c4:47:b5:9e:bb:ee:88: c7:a5:3f:76:64:52:69:c6:e6:8b:16:0f:8a:0f:b0: b5:02:56:b4:03:81:02:7b:7e:5b:17:bc:52:e4:e9: 67:2f:60:cd:6e:89:2c:03:22:83:51:a4:dd:f9:8d: 44:f1:a1:79:77:cb:3f:1f:7f:89:25:70:ee:fc:01: bc:dd:10:63:04:b6:23:73:fa:79:cc:f5:b9:77:ec: f1:38:57:00:fd:4a:69:55:6f:ef:d5:c0:96:77:b1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:E8:4D:9B:8E:C0:F6:C6:0B:34:52:63:7C:0D:2C:41:F4:F8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1c:14:b1:1c:d5:06:60:1f:d4:0b:91:2d:d8:8c:63:c6:11: 85:0d:ab:e3:7f:52:04:9d:be:34:07:14:aa:cc:78:5c:03:ab: 25:cc:55:66:b6:2c:d4:26:d1:73:1f:00:50:db:dd:d0:fa:62: 79:18:3b:a0:fa:ce:49:50:99:b9:e3:2d:44:62:ae:1d:99:16: c0:85:a1:cb:01:89:fd:a8:23:22:90:cc:b2:14:dc:62:da:d9: 04:98:e4:f3:30:97:ec:b8:e8:f2:e7:a4:52:59:0e:40:46:2a: 30:15:38:cc:46:7d:cb:21:62:6b:60:58:3c:90:23:61:bd:09: 3d:1d:9f:63:03:b6:0c:5c:36:a0:64:2f:68:1d:08:9b:14:93: 35:fc:76:fe:57:99:49:31:d7:a7:cf:48:19:a7:92:f9:53:9e: 6d:c3:c9:43:09:8b:f3:4c:72:13:36:ba:ad:f7:52:d0:07:0c: 22:ec:6c:23:72:fe:48:9c:1c:49:47:a0:60:3e:d4:ab:ca:7f: 1b:c1:83:0a:2b:bb:30:ac:69:9c:43:e1:87:a9:77:21:f1:cb: ec:0c:78:a9:e1:7d:a8:8e:e2:a2:a2:6b:76:75:46:2a:0a:1d: 77:e5:9b:d6:73:88:68:06:cb:23:78:fc:aa:fc:34:c7:d9:2c: 10:7b:f7:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0ZQrTsnj5DSx4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDU2ZGQwZTUtMmEzNS00OTgwLTkzYWItMzc0OWU5NDRkNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoiPJ0mj5cenlKoOqeTgNh+v7GumZccFzS7B j5fbP0YIE/pvmYua1Z9bb/nfdwXseSoN3OElVNN/Nd6lJbSyzWLnqqantNYb4dNe KoQ/vMtpUY0x0nIZU/V5iaQnDvXxhAJ3PfB7VlYCzQ3QdA1ERYro2mS+dTuO5aYD 0ubGQuJTYE5UQuA8838MSb+z3CGlRagZEB6f2s3j0eVFV8RHtZ677ojHpT92ZFJp xuaLFg+KD7C1Ala0A4ECe35bF7xS5OlnL2DNboksAyKDUaTd+Y1E8aF5d8s/H3+J JXDu/AG83RBjBLYjc/p5zPW5d+zxOFcA/UppVW/v1cCWd7FLeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOyq6E2bjsD2xgs0UmN8DSxB9PhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDk3MDI4OWUtMGM1MC0z NWNkLWExNzEtMDRiY2UyNmEwYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXxwUsRzVBmAf1AuRLdiMY8YRhQ2r439SBJ2+NAcUqsx4XAOrJcxV ZrYs1CbRcx8AUNvd0PpieRg7oPrOSVCZueMtRGKuHZkWwIWhywGJ/agjIpDMshTc YtrZBJjk8zCX7Ljo8uekUlkOQEYqMBU4zEZ9yyFia2BYPJAjYb0JPR2fYwO2DFw2 oGQvaB0ImxSTNfx2/leZSTHXp89IGaeS+VOebcPJQwmL80xyEza6rfdS0AcMIuxs I3L+SJwcSUegYD7Uq8p/G8GDCiu7MKxpnEPhh6l3IfHL7Ax4qeF9qI7ioqJrdnVG Kgodd+Wb1nOIaAbLI3j8qvw0x9ksEHv3hA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:28 2026 by rpki-client