This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa File: b0ddde98-91d9-322f-a864-985a3b251e9c.roa (raw, json) Hash identifier: 7cKu+wMRa1NwLppTUXxbCkKWuj7gR3YDdpDsMe+jFtE= Subject key identifier: 55:50:F4:DA:F6:43:61:6A:38:11:47:F5:30:53:28:1D:81:EE:9B:A9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BDFC05D11C672293365864680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa Signing time: Sun 16 Nov 2025 02:00:31 +0000 ROA not before: Sun 16 Nov 2025 02:00:31 +0000 ROA not after: Sat 14 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8d:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:c0:5d:11:c6:72:29:33:65:86:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 16 02:00:31 2025 GMT Not After : Feb 14 02:00:31 2026 GMT Subject: CN=9ba45778-b871-4270-8c14-1a9203de553e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:b4:bb:ac:ad:75:fc:d8:dc:45:3b:1a:0e: f1:5d:1c:1a:d4:83:a1:54:74:1e:84:f0:21:67:5c: eb:e8:40:61:48:3f:e7:70:4f:49:4d:90:d9:ba:7e: a7:ab:3a:9c:43:5b:af:54:ed:77:47:01:25:f5:c9: 10:30:2e:65:de:50:b9:f7:0c:fd:54:5e:6d:44:33: 4d:e2:e7:d0:78:9d:1e:d4:a4:ca:91:0f:88:6e:60: 1d:85:41:3c:56:9d:c4:4d:f9:ab:1e:f3:ff:73:3d: 4b:6c:3a:9d:2b:19:6e:80:a3:9b:24:26:65:0f:a8: 84:e0:4f:bd:44:8f:25:8b:dd:88:5d:e0:38:f2:d2: 59:8d:92:a2:d3:ce:ae:26:82:55:66:8e:c1:e2:c2: f9:90:6a:52:5b:dc:65:93:3b:8c:1b:04:d9:5a:4c: a9:c8:40:42:e5:dd:76:f4:e8:0d:48:97:18:32:df: 7e:f4:e0:07:39:0b:5e:0a:98:14:e0:9a:c3:74:0b: 49:3c:5c:25:a3:05:a9:7e:d1:bd:c6:90:8c:bd:86: 9f:81:9c:d4:ab:b6:9b:b1:92:9b:a4:6b:c0:2b:8d: 31:0d:76:3c:e8:8e:8b:d0:46:6d:36:68:47:b6:a6: 5a:0a:48:5c:83:8e:da:03:57:4e:a1:80:6a:cd:bb: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:50:F4:DA:F6:43:61:6A:38:11:47:F5:30:53:28:1D:81:EE:9B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2d:0a:09:8f:10:d8:19:02:90:10:f3:72:75:db:0a:d8:1f: 67:36:2d:24:bb:52:ec:4c:ac:46:0f:c0:e6:90:31:7e:78:06: 22:f2:80:d3:ac:1c:4e:d5:01:ed:5d:74:45:50:47:a8:f1:da: 75:61:36:99:f1:57:91:2a:28:09:0b:9c:0c:b6:18:87:de:e5: c0:79:93:80:1f:59:29:fa:10:a9:69:44:0f:14:4a:48:13:d1: 0e:44:7f:86:32:c4:de:60:01:52:e9:25:76:d6:fa:ff:82:92: 87:1e:fc:35:36:7b:44:08:b1:c3:f5:e0:12:34:f2:e5:8d:34: b0:e5:60:05:8b:02:04:a2:d2:3a:fd:98:9d:f9:59:fd:7c:1f: d4:9f:82:6d:7f:e0:9c:f7:e5:34:f2:30:b0:5a:90:b2:04:84: 94:5f:2d:91:37:1a:6c:04:b5:e0:38:8a:50:8c:bc:fa:39:ee: 20:df:cf:b1:5e:13:72:27:9e:ed:cc:d8:10:5a:ff:84:6a:d6: 97:76:16:e9:fc:62:f3:95:b6:1f:1b:68:1e:8b:21:61:81:2f: 92:73:5c:af:67:65:6a:01:4e:ad:6a:a4:ed:6a:5f:21:f4:4d: ab:c2:1c:96:40:f5:01:4b:91:08:00:4e:e0:57:4b:3a:15:44: 5f:29:3a:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvfwF0RxnIpM2WGRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTExNjAyMDAzMVoXDTI2MDIxNDAyMDAzMVowLzEtMCsGA1UEAxMk OWJhNDU3NzgtYjg3MS00MjcwLThjMTQtMWE5MjAzZGU1NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd+0u6ytdfzY3EU7Gg7xXRwa1IOhVHQehPAh Z1zr6EBhSD/ncE9JTZDZun6nqzqcQ1uvVO13RwEl9ckQMC5l3lC59wz9VF5tRDNN 4ufQeJ0e1KTKkQ+IbmAdhUE8Vp3ETfmrHvP/cz1LbDqdKxlugKObJCZlD6iE4E+9 RI8li92IXeA48tJZjZKi086uJoJVZo7B4sL5kGpSW9xlkzuMGwTZWkypyEBC5d12 9OgNSJcYMt9+9OAHOQteCpgU4JrDdAtJPFwlowWpftG9xpCMvYafgZzUq7absZKb pGvAK40xDXY86I6L0EZtNmhHtqZaCkhcg47aA1dOoYBqzbvNGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFVQ9Nr2Q2FqOBFH9TBTKB2B7pupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjBkZGRlOTgtOTFkOS0z MjJmLWE4NjQtOTg1YTNiMjUxZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujeQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAei0KCY8Q2BkCkBDzcnXbCtgfZzYtJLtS7EysRg/A5pAxfngGIvKA 06wcTtUB7V10RVBHqPHadWE2mfFXkSooCQucDLYYh97lwHmTgB9ZKfoQqWlEDxRK SBPRDkR/hjLE3mABUukldtb6/4KShx78NTZ7RAixw/XgEjTy5Y00sOVgBYsCBKLS Ov2YnflZ/Xwf1J+CbX/gnPflNPIwsFqQsgSElF8tkTcabAS14DiKUIy8+jnuIN/P sV4Tciee7czYEFr/hGrWl3YW6fxi85W2HxtoHoshYYEvknNcr2dlagFOrWqk7Wpf IfRNq8IclkD1AUuRCABO4FdLOhVEXyk6oA== -----END CERTIFICATE-----Generated at Tue Nov 25 13:56:55 2025 by rpki-client