This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2badb580-7fdd-3923-8f2a-533d356779e7.roa File: 2badb580-7fdd-3923-8f2a-533d356779e7.roa (raw, json) Hash identifier: NKM2TScdEJF/7aDzi0Np/dUTV7hnQqLFvQ6Zd3oXlnQ= Subject key identifier: 0A:C6:CE:C3:A7:47:F1:A3:DE:F9:81:DF:27:44:D8:8C:85:64:56:19 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBBE0F18217876BE876CA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2badb580-7fdd-3923-8f2a-533d356779e7.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:be:0f:18:21:78:76:be:87:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9949ce38-db27-41fb-99c2-ade8661ce9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:4e:9a:b2:ed:86:f1:be:8a:c0:7f:8c:fc: 82:d6:29:05:a7:7a:a5:9c:e5:ad:71:36:ba:48:7b: 85:5b:ad:8e:d9:27:fe:bc:d2:15:42:a6:a1:52:75: 8b:fc:c8:5e:7f:fa:8d:37:6f:f7:eb:44:31:01:7e: 34:0e:65:ae:c1:f8:0e:24:81:f0:3a:48:c3:b9:9c: e0:5a:e6:54:d3:06:12:4f:03:aa:9e:53:6a:62:8c: 32:86:e0:0c:44:84:e9:77:77:0d:5c:63:05:f1:c6: 2b:cb:f8:7a:d3:1a:7e:7d:41:0a:c3:ad:e6:c3:5e: 4a:e7:1c:29:7a:fd:8f:25:b8:c4:b8:93:45:01:7d: 9f:e0:4b:40:70:45:51:bc:66:e2:a8:62:0a:3d:af: 63:07:0a:8e:c7:41:f0:52:85:c3:b5:3c:af:cc:2c: 29:d2:ee:e8:1c:e0:f7:80:04:5e:26:23:5a:10:44: 03:53:c8:64:4f:de:4c:34:92:e0:90:72:0a:cb:a1: 30:59:fb:64:c6:51:01:af:17:fa:46:30:b7:11:18: 25:d2:e9:a9:35:fd:bf:05:89:e2:b7:a3:06:76:e2: 40:d6:e2:9e:80:42:76:69:de:44:63:65:00:33:6a: 85:22:22:46:e1:49:2d:9a:d2:bd:69:4b:dd:20:dc: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:CE:C3:A7:47:F1:A3:DE:F9:81:DF:27:44:D8:8C:85:64:56:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2badb580-7fdd-3923-8f2a-533d356779e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b6:36:b6:31:77:99:38:ab:86:cc:47:0d:60:bb:e6:b1:10: c6:df:63:ff:23:4b:b6:de:9f:8d:06:5a:d5:ba:d7:0a:f0:3a: ab:8d:a3:30:f2:8d:c7:df:bd:b2:de:64:70:64:b6:09:15:b9: bb:57:17:90:48:8c:7e:fb:94:35:07:7b:46:7f:8f:a6:54:48: 32:70:d4:1d:68:c4:d8:92:c1:8c:65:62:31:53:74:b3:4d:c1: 04:72:63:26:ec:6d:da:51:b9:fe:98:4e:c1:7e:0e:9f:50:d6: da:4c:86:b0:25:96:66:f9:59:a8:c5:6b:b4:ac:2a:f0:7b:50: de:39:f0:a7:41:7f:69:eb:3e:cc:07:69:1c:85:30:e6:e7:e6: 97:19:9a:ad:9f:c2:5c:65:82:58:c9:16:ff:6c:82:f0:31:5a: e2:87:ed:98:c6:66:26:c8:8e:9f:fc:29:c0:82:71:1a:c2:b1: 71:6b:e1:7c:91:a8:b1:42:ae:90:af:e4:f0:23:6f:18:ad:ee: 3b:34:61:7e:f7:34:a7:7c:5c:91:ad:11:1c:23:f0:37:d0:4d: 5c:f1:5b:04:57:aa:d1:3e:77:9b:e7:ac:0a:79:6f:c7:24:9d: 22:08:50:28:0b:8b:3e:27:fc:0c:ae:61:d4:8a:8a:aa:fb:7b: 4f:79:09:ac -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC274PGCF4dr6HbKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OTk0OWNlMzgtZGIyNy00MWZiLTk5YzItYWRlODY2MWNlOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAZOmrLthvG+isB/jPyC1ikFp3qlnOWtcTa6 SHuFW62O2Sf+vNIVQqahUnWL/Mhef/qNN2/360QxAX40DmWuwfgOJIHwOkjDuZzg WuZU0wYSTwOqnlNqYowyhuAMRITpd3cNXGMF8cYry/h60xp+fUEKw63mw15K5xwp ev2PJbjEuJNFAX2f4EtAcEVRvGbiqGIKPa9jBwqOx0HwUoXDtTyvzCwp0u7oHOD3 gAReJiNaEEQDU8hkT95MNJLgkHIKy6EwWftkxlEBrxf6RjC3ERgl0umpNf2/BYni t6MGduJA1uKegEJ2ad5EY2UAM2qFIiJG4UktmtK9aUvdINxBhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFArGzsOnR/Gj3vmB3ydE2IyFZFYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmJhZGI1ODAtN2ZkZC0z OTIzLThmMmEtNTMzZDM1Njc3OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOLY2tjF3mTirhsxHDWC75rEQxt9j/yNLtt6fjQZa1brXCvA6q42j MPKNx9+9st5kcGS2CRW5u1cXkEiMfvuUNQd7Rn+PplRIMnDUHWjE2JLBjGViMVN0 s03BBHJjJuxt2lG5/phOwX4On1DW2kyGsCWWZvlZqMVrtKwq8HtQ3jnwp0F/aes+ zAdpHIUw5ufmlxmarZ/CXGWCWMkW/2yC8DFa4oftmMZmJsiOn/wpwIJxGsKxcWvh fJGosUKukK/k8CNvGK3uOzRhfvc0p3xcka0RHCPwN9BNXPFbBFeq0T53m+esCnlv xySdIghQKAuLPif8DK5h1IqKqvt7T3kJrA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:56 2026 by rpki-client