This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa97cda-6d51-3cab-bbb1-f252034263ed.roa File: baa97cda-6d51-3cab-bbb1-f252034263ed.roa (raw, json) Hash identifier: UwXUdchhuqEvWXF+Xu1X/MkqPea4qGGgWUk0neeZAtU= Subject key identifier: CA:CF:80:C8:3A:72:D6:C3:0E:DF:21:27:61:84:90:05:C6:25:9D:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C4B3BC6E004A0B408311D5300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa97cda-6d51-3cab-bbb1-f252034263ed.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e87:6c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:c6:e0:04:a0:b4:08:31:1d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=5c55cb15-6397-4097-8fb3-81ba93f4c4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:73:dc:f4:40:91:49:9a:25:c7:c5:2e:3a: 70:6f:83:5f:15:7f:ae:8c:75:ad:b6:f4:2a:6a:f1: f7:34:78:e1:67:d5:df:c0:a6:19:91:33:d9:fc:67: fd:4d:94:56:61:b2:c5:af:c8:52:75:9a:d1:52:4a: 86:bd:87:37:80:c6:02:48:85:f5:3b:19:f8:56:f4: 3e:43:c4:8a:33:d6:e9:48:f0:58:0e:6d:16:9f:91: 82:03:0b:d3:ad:7e:99:a5:72:e1:64:d5:f7:0f:00: 0c:8e:fe:08:b8:12:75:75:b6:72:56:b8:a5:c2:22: b0:a2:a3:48:21:5a:35:0e:f4:3a:32:8c:42:78:1e: 85:12:6b:45:43:c0:99:5f:22:9f:0e:7d:2c:3c:9e: e1:3d:ee:fb:fe:33:79:ad:09:42:d4:25:06:f8:90: 8c:98:a4:bb:3a:7c:39:08:5d:83:58:24:c8:f0:83: 9a:50:d5:8a:2b:2a:a6:23:00:b0:54:cf:11:15:50: 7a:33:8b:58:83:99:f6:b8:a9:a8:b0:71:63:c1:26: f8:87:cf:07:42:b7:9f:ed:e0:4f:b2:e0:fb:be:a2: 86:39:48:7c:53:d0:a0:13:7b:7f:64:d7:28:f0:06: 1f:18:77:d6:4e:00:89:8b:a0:85:a6:1d:39:7b:57: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:80:C8:3A:72:D6:C3:0E:DF:21:27:61:84:90:05:C6:25:9D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa97cda-6d51-3cab-bbb1-f252034263ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:6c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9b:2b:dc:9e:c6:17:d8:02:2c:e5:0a:f9:74:41:1a:7c:e9: 44:06:7f:d7:99:bc:73:8d:38:37:b2:56:da:b9:c2:64:84:51: 00:4b:51:7d:54:0b:2c:6f:c4:1a:77:38:3c:eb:3d:db:f3:1e: 9a:ae:44:b2:6a:86:cd:82:42:49:9e:e2:a1:72:96:6b:ca:9e: 8d:76:2d:b9:ec:fe:53:17:cf:06:e8:22:50:6c:21:b7:2b:cc: 54:02:07:df:a1:d1:41:89:2e:e0:24:b2:52:f9:ba:47:24:dc: 89:c0:6e:bf:1a:91:9f:36:a2:a9:d8:c0:17:2a:03:10:c3:1f: 47:73:54:5f:a3:4b:46:c2:d4:29:29:3f:85:fb:0d:f4:d3:25: 4a:98:15:e8:e4:1d:3b:4d:5a:d1:02:05:4d:53:91:08:bc:6d: f2:60:0c:98:61:64:89:ad:9b:cf:6b:f0:40:69:fe:81:5d:94: 0a:d9:fa:36:c6:eb:0a:15:51:02:61:e9:50:fa:96:83:6b:16: e7:e0:32:8b:c1:f8:e4:8c:e8:7f:65:27:1a:8e:54:41:f7:37: 75:28:95:07:c1:e8:de:2a:27:f0:a6:ca:5d:43:4f:9e:98:9a: 5f:69:7a:43:e1:20:f1:16:7f:dd:41:53:eb:46:e3:1e:21:d7: 77:98:ae:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExLO8bgBKC0CDEdUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk NWM1NWNiMTUtNjM5Ny00MDk3LThmYjMtODFiYTkzZjRjNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D9z3PRAkUmaJcfFLjpwb4NfFX+ujHWttvQq avH3NHjhZ9XfwKYZkTPZ/Gf9TZRWYbLFr8hSdZrRUkqGvYc3gMYCSIX1Oxn4VvQ+ Q8SKM9bpSPBYDm0Wn5GCAwvTrX6ZpXLhZNX3DwAMjv4IuBJ1dbZyVrilwiKwoqNI IVo1DvQ6MoxCeB6FEmtFQ8CZXyKfDn0sPJ7hPe77/jN5rQlC1CUG+JCMmKS7Onw5 CF2DWCTI8IOaUNWKKyqmIwCwVM8RFVB6M4tYg5n2uKmosHFjwSb4h88HQref7eBP suD7vqKGOUh8U9CgE3t/ZNco8AYfGHfWTgCJi6CFph05e1cckwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMrPgMg6ctbDDt8hJ2GEkAXGJZ26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFhOTdjZGEtNmQ1MS0z Y2FiLWJiYjEtZjI1MjAzNDI2M2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh2ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmpsr3J7GF9gCLOUK+XRBGnzpRAZ/15m8c404N7JW2rnCZIRRAEtR fVQLLG/EGnc4POs92/Memq5EsmqGzYJCSZ7ioXKWa8qejXYtuez+UxfPBugiUGwh tyvMVAIH36HRQYku4CSyUvm6RyTcicBuvxqRnzaiqdjAFyoDEMMfR3NUX6NLRsLU KSk/hfsN9NMlSpgV6OQdO01a0QIFTVORCLxt8mAMmGFkia2bz2vwQGn+gV2UCtn6 NsbrChVRAmHpUPqWg2sW5+Ayi8H45Izof2UnGo5UQfc3dSiVB8Ho3ion8KbKXUNP npiaX2l6Q+Eg8RZ/3UFT60bjHiHXd5iubA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:28:51 2026 by rpki-client