This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce29fb66-6d86-3b22-a091-a1de6440d1ce.roa File: ce29fb66-6d86-3b22-a091-a1de6440d1ce.roa (raw, json) Hash identifier: Wef6dL4efbMv3L4ySw/BikiVTKjpmMF0qi4g/AgORcI= Subject key identifier: 5A:0B:DB:1A:CD:BA:EA:06:38:1F:D8:6F:CF:E4:5E:F0:82:FB:DE:88 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C1401C5143195F7EE864CC800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce29fb66-6d86-3b22-a091-a1de6440d1ce.roa Signing time: Thu 04 Dec 2025 19:14:22 +0000 ROA not before: Thu 04 Dec 2025 19:14:22 +0000 ROA not after: Wed 04 Mar 2026 19:14:22 +0000 asID: 30036 IP address blocks: 2604:2e8f:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:01:c5:14:31:95:f7:ee:86:4c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 4 19:14:22 2025 GMT Not After : Mar 4 19:14:22 2026 GMT Subject: CN=7e0ac625-49ed-4a38-9c48-2ad6ddf1758d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:31:55:89:e3:d7:08:91:14:f3:8a:38:ba: d7:0c:8a:7b:d7:3b:80:a5:d1:eb:97:74:61:ee:c4: b7:7d:50:74:b2:5c:bc:89:cb:c4:d5:a4:56:fc:c0: b6:9b:a1:d9:c3:1b:c5:60:b8:47:95:e5:15:4a:fa: f6:d0:1f:74:6f:11:da:d6:94:b1:62:cc:f7:84:f4: b5:00:5f:28:78:86:4c:17:df:3b:64:dc:ba:36:51: d4:de:de:ff:04:16:6e:9f:4c:5a:29:85:ae:4d:dc: a7:93:d6:f9:ca:21:aa:bf:bd:9c:00:36:99:9a:b5: 2c:5c:01:97:f1:ce:97:bd:7d:8f:27:f2:94:10:62: 42:5f:b5:3e:d8:5d:e3:e5:a0:ab:b6:c6:b5:bb:88: 49:7d:4f:85:7b:06:0d:8c:71:be:64:a4:d3:21:aa: 94:63:78:b6:5e:ba:04:89:c8:c6:95:31:c0:c2:7b: de:9a:08:17:d7:ce:fd:65:d0:09:64:64:3d:ae:ca: 76:81:13:32:e8:c6:7c:7b:65:62:da:b5:1b:9f:e4: f2:3a:8e:8a:f8:d2:e9:59:c8:09:82:64:2a:dc:b1: 06:18:f0:f9:56:5e:31:75:75:2c:38:50:52:4e:ab: 5b:97:bd:21:47:c2:d7:d5:12:53:68:11:b1:8a:e2: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:DB:1A:CD:BA:EA:06:38:1F:D8:6F:CF:E4:5E:F0:82:FB:DE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce29fb66-6d86-3b22-a091-a1de6440d1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ca:cc:58:76:7a:c4:38:76:77:50:62:a5:95:a1:7c:25:df: 65:d3:45:5b:b1:b0:74:d7:97:4f:ad:20:00:df:20:54:09:75: b8:55:bd:67:46:5a:8e:d1:9e:d1:80:06:48:bc:7a:b2:b9:04: e1:8a:03:40:c1:c9:9b:a3:ea:9a:be:59:70:d6:03:5e:72:ad: af:3b:48:27:35:7e:ba:d2:95:e4:fb:9d:3d:29:cf:51:17:3c: 75:c2:81:d7:ce:79:0b:4e:0a:a1:86:03:ec:0f:dc:cb:f2:aa: ff:a8:0d:81:10:ee:77:c3:ac:9a:83:d5:17:ed:45:94:8d:eb: f4:9a:7a:79:b5:9e:fb:e7:57:18:ef:ce:b1:80:29:c8:fe:54: ce:0c:03:1e:55:d1:cd:cc:79:13:49:ef:72:e2:52:05:03:8b: 84:4b:29:a5:b3:c6:48:b2:d8:bc:c1:5b:75:b3:52:79:ed:e1: a9:0e:aa:43:76:6e:fa:4f:ec:8c:4c:25:38:a2:69:78:b8:c2: d0:04:5e:62:9c:be:1f:f4:bc:66:82:ef:1d:82:ab:5b:01:07: db:ff:d4:4c:8c:c5:c4:79:ff:4e:1b:94:3e:ed:62:b3:15:29: c2:d6:5a:81:da:f4:5f:d8:db:b2:cf:2f:d1:e4:9c:b6:dc:2a: be:92:c9:a7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwUAcUUMZX37oZMyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIwNDE5MTQyMloXDTI2MDMwNDE5MTQyMlowLzEtMCsGA1UEAxMk N2UwYWM2MjUtNDllZC00YTM4LTljNDgtMmFkNmRkZjE3NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhsxVYnj1wiRFPOKOLrXDIp71zuApdHrl3Rh 7sS3fVB0sly8icvE1aRW/MC2m6HZwxvFYLhHleUVSvr20B90bxHa1pSxYsz3hPS1 AF8oeIZMF987ZNy6NlHU3t7/BBZun0xaKYWuTdynk9b5yiGqv72cADaZmrUsXAGX 8c6XvX2PJ/KUEGJCX7U+2F3j5aCrtsa1u4hJfU+FewYNjHG+ZKTTIaqUY3i2XroE icjGlTHAwnvemggX1879ZdAJZGQ9rsp2gRMy6MZ8e2Vi2rUbn+TyOo6K+NLpWcgJ gmQq3LEGGPD5Vl4xdXUsOFBSTqtbl70hR8LX1RJTaBGxiuI6CwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFoL2xrNuuoGOB/Yb8/kXvCC+96IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2UyOWZiNjYtNmQ4Ni0z YjIyLWEwOTEtYTFkZTY0NDBkMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj6Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV8rMWHZ6xDh2d1BipZWhfCXfZdNFW7GwdNeXT60gAN8gVAl1uFW9 Z0ZajtGe0YAGSLx6srkE4YoDQMHJm6Pqmr5ZcNYDXnKtrztIJzV+utKV5PudPSnP URc8dcKB1855C04KoYYD7A/cy/Kq/6gNgRDud8OsmoPVF+1FlI3r9Jp6ebWe++dX GO/OsYApyP5UzgwDHlXRzcx5E0nvcuJSBQOLhEsppbPGSLLYvMFbdbNSee3hqQ6q Q3Zu+k/sjEwlOKJpeLjC0AReYpy+H/S8ZoLvHYKrWwEH2//UTIzFxHn/ThuUPu1i sxUpwtZagdr0X9jbss8v0eScttwqvpLJpw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:46 2025 by rpki-client