This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa File: 4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa (raw, json) Hash identifier: Be1XDc0tMb5i8xq7NBYXdPPwp4it3hXHGfJ94D5+xUs= Subject key identifier: 62:C4:F1:98:26:D2:76:FF:DA:FB:95:F1:6A:84:73:E0:EC:69:16:88 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C06D6163AD235E20E34734200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8c:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:16:3a:d2:35:e2:0e:34:73:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=9a4432c3-e1c4-4e3a-85e3-991d4385224c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:42:93:9e:d2:f5:81:57:ee:c7:7f:38:ea: 44:fe:87:04:e2:b9:18:ec:22:85:4a:a9:7c:6f:8e: f1:8b:3a:16:83:cb:2a:a7:a9:d9:ae:4d:bb:0b:09: eb:46:40:83:1c:f3:27:be:ce:40:a7:0a:fc:b4:dd: 9e:f1:3f:4d:8f:c1:f1:5e:af:e2:e2:f2:13:44:8f: b6:9e:7c:7c:bd:bc:83:e8:2d:4f:40:cd:57:cd:87: 9d:a1:a8:d8:4c:62:0c:dc:24:f5:31:7d:03:5c:40: dd:c9:11:53:18:7d:92:8f:c7:2a:9a:5a:3c:67:b3: 2c:44:35:71:d6:7e:52:ad:13:b7:45:27:ec:69:37: 8f:35:8e:24:63:f0:82:32:45:6b:9f:a3:cf:72:e0: 57:17:91:9a:00:29:22:5d:4b:7f:77:71:5f:14:40: d6:c9:68:c7:8f:6b:0e:b8:cf:8b:ab:ce:00:8b:8c: 0f:8b:f8:81:e1:c6:38:f1:e5:27:17:a2:ca:c6:78: 98:9c:5a:30:ed:e2:e2:c2:85:3d:a7:2d:bc:cb:33: fe:4b:ba:1d:d4:f0:70:6d:21:46:d1:f1:67:be:9e: d2:5f:44:6d:6f:7e:4a:d6:fe:9e:6c:bf:31:fa:a8: d6:f3:f2:d0:dd:fd:28:5b:08:13:77:94:6a:7a:db: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:F1:98:26:D2:76:FF:DA:FB:95:F1:6A:84:73:E0:EC:69:16:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3d:2b:37:b9:2a:97:6a:d4:07:88:41:62:99:ee:ed:74:82: b8:98:dd:5a:5a:94:3b:29:f3:5f:81:89:98:da:5d:8e:ca:b2: 23:12:fb:b3:17:95:a5:6e:23:4a:cc:7d:4f:c5:1f:48:f0:f5: d3:3a:84:64:32:d5:6d:64:0a:b7:4d:28:96:01:91:4e:43:0b: db:4a:6b:2f:55:ed:43:b6:95:36:09:91:25:cc:0c:64:c6:1f: 17:b2:da:69:de:02:94:bc:64:55:48:e2:b5:46:4b:2d:98:66: 2f:95:52:39:d4:ec:62:83:1b:b7:f4:58:33:5c:db:98:94:a5: e7:67:8f:9a:5c:aa:47:5b:2a:fc:0f:88:4d:35:22:11:5e:21: 9b:2d:26:b4:b3:54:21:3c:17:ca:55:58:47:84:4d:44:18:27: 2d:70:88:9d:b9:1b:20:32:3a:ca:5e:c7:77:b8:ad:33:88:59: 29:f5:69:e4:b6:93:ab:4e:a8:d8:8f:8d:b1:2e:9a:58:85:00: b0:c5:03:e6:26:63:da:cf:78:32:fa:c7:f2:c4:ab:d9:25:1f: 75:f1:54:e9:a0:ca:08:a0:8d:92:57:5f:17:bf:94:03:00:fa: 5a:de:42:06:aa:a7:ad:6a:0e:bf:8c:a9:97:d0:68:7f:e4:bc: e6:27:c2:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwG1hY60jXiDjRzQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk OWE0NDMyYzMtZTFjNC00ZTNhLTg1ZTMtOTkxZDQzODUyMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnhCk57S9YFX7sd/OOpE/ocE4rkY7CKFSql8 b47xizoWg8sqp6nZrk27CwnrRkCDHPMnvs5Apwr8tN2e8T9Nj8HxXq/i4vITRI+2 nnx8vbyD6C1PQM1XzYedoajYTGIM3CT1MX0DXEDdyRFTGH2Sj8cqmlo8Z7MsRDVx 1n5SrRO3RSfsaTePNY4kY/CCMkVrn6PPcuBXF5GaACkiXUt/d3FfFEDWyWjHj2sO uM+Lq84Ai4wPi/iB4cY48eUnF6LKxniYnFow7eLiwoU9py28yzP+S7od1PBwbSFG 0fFnvp7SX0Rtb35K1v6ebL8x+qjW8/LQ3f0oWwgTd5RqetujmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGLE8Zgm0nb/2vuV8WqEc+DsaRaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQ1YWQxZGUtZGIxOC0z NDkyLTlkOWYtM2M3MjkzNDE5ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKT0rN7kql2rUB4hBYpnu7XSCuJjdWlqUOynzX4GJmNpdjsqyIxL7 sxeVpW4jSsx9T8UfSPD10zqEZDLVbWQKt00olgGRTkML20prL1XtQ7aVNgmRJcwM ZMYfF7Laad4ClLxkVUjitUZLLZhmL5VSOdTsYoMbt/RYM1zbmJSl52ePmlyqR1sq /A+ITTUiEV4hmy0mtLNUITwXylVYR4RNRBgnLXCInbkbIDI6yl7Hd7itM4hZKfVp 5LaTq06o2I+NsS6aWIUAsMUD5iZj2s94MvrH8sSr2SUfdfFU6aDKCKCNkldfF7+U AwD6Wt5CBqqnrWoOv4ypl9Bof+S85ifCLA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:19 2025 by rpki-client