This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa File: bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa (raw, json) Hash identifier: qOIqb1e329f4pt4UCQMjIze2eGfCya+uHTXvaVVhMIM= Subject key identifier: A8:39:AC:73:51:8C:04:4E:A0:09:2B:C7:5D:70:C7:D0:18:80:82:B8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C5666CE30047046CD507F6800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 19905 IP address blocks: 2604:2e87:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ce:30:04:70:46:cd:50:7f:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=abdf1e43-26b2-48ae-9882-b5f139e49a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:e7:81:f6:78:4c:ff:f6:da:fe:8e:8c:85: 69:28:8d:ef:52:c4:af:e3:60:cd:cc:e7:77:93:2c: 5f:7a:29:ce:b3:45:78:dc:8b:2b:63:a8:9d:7a:00: f0:07:62:b0:92:21:b1:55:a6:0d:38:eb:24:bc:50: 12:f3:f3:9a:cf:a1:d7:53:cb:1e:fe:db:4a:a9:2a: 89:90:8f:14:83:31:fa:96:d9:03:3b:e1:cb:5e:77: 78:07:79:90:fb:75:85:ca:cc:c3:a4:c0:89:a0:b2: cf:40:0c:fb:12:ac:7c:65:41:ea:1b:01:4f:fa:1e: 44:cd:3d:ef:42:12:7f:d4:2a:56:f5:2f:3e:58:45: 6e:cc:80:29:90:6d:2a:eb:7b:56:cb:93:99:b1:75: ba:45:af:84:cd:62:c2:5d:49:55:60:29:cf:01:51: 72:c7:d1:61:6a:b3:a6:cc:a6:f7:7c:0d:d1:17:c4: 54:51:b8:bf:dd:c8:df:29:22:7c:b2:f7:31:e7:03: 4b:64:a4:53:33:cb:e7:97:77:43:89:82:d6:fd:19: a1:5f:a7:bc:2e:58:4d:cc:30:eb:4c:60:79:93:d8: f5:aa:28:2b:cb:9c:14:48:56:7b:cb:22:df:b4:ef: 8c:c0:49:b1:51:fe:8a:da:7e:6b:c8:96:1e:0f:b8: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:AC:73:51:8C:04:4E:A0:09:2B:C7:5D:70:C7:D0:18:80:82:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:67:54:39:85:fa:b7:a6:71:c2:c9:73:35:39:12:5b:c0:36: 15:2e:e3:b3:97:40:2a:09:48:7a:a0:03:73:ff:6c:d4:a8:65: f7:bf:20:d9:6b:31:7f:5a:7a:20:2e:4b:87:b5:00:10:55:60: f8:ce:3e:2d:8f:f2:e0:d0:a1:f9:82:2c:f2:0f:ab:57:fe:ff: ca:e7:70:9d:69:6a:d5:ef:f5:9d:a3:b1:f8:1e:82:3d:27:aa: a3:05:55:f1:bc:30:7c:4a:7d:8a:ee:15:3c:97:bd:ef:37:75: 8f:4c:5f:30:5b:0f:72:9f:f6:67:9c:0f:9d:ec:69:91:f9:6f: dd:a9:71:a9:11:5b:a2:ff:1f:06:67:52:1f:66:4b:16:5c:06: 6d:08:ea:fb:37:94:bc:74:8c:fd:d9:3a:17:f5:b3:57:0b:0e: 16:05:a1:72:5b:0d:8f:e3:e0:52:bf:90:d5:65:70:89:a6:4a: 22:f5:1e:bd:4b:e8:e9:49:03:f9:47:33:41:68:d0:af:f4:5e: b4:39:ed:9b:84:7a:e5:64:84:05:ee:3a:11:45:2f:05:f9:35: f3:e5:d9:4a:98:fb:b8:f2:fa:27:1f:1e:ba:b2:f3:c2:67:f1: 30:04:f7:c3:d8:38:cf:5f:5b:9e:16:88:10:b1:5e:7f:85:e5: 5b:94:a3:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExWZs4wBHBGzVB/aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YWJkZjFlNDMtMjZiMi00OGFlLTk4ODItYjVmMTM5ZTQ5YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY/ngfZ4TP/22v6OjIVpKI3vUsSv42DNzOd3 kyxfeinOs0V43IsrY6idegDwB2KwkiGxVaYNOOskvFAS8/Oaz6HXU8se/ttKqSqJ kI8UgzH6ltkDO+HLXnd4B3mQ+3WFyszDpMCJoLLPQAz7Eqx8ZUHqGwFP+h5EzT3v QhJ/1CpW9S8+WEVuzIApkG0q63tWy5OZsXW6Ra+EzWLCXUlVYCnPAVFyx9FharOm zKb3fA3RF8RUUbi/3cjfKSJ8svcx5wNLZKRTM8vnl3dDiYLW/RmhX6e8LlhNzDDr TGB5k9j1qigry5wUSFZ7yyLftO+MwEmxUf6K2n5ryJYeD7gu+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKg5rHNRjAROoAkrx11wx9AYgIK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmIwYjhlNzUtNDA4YS0z MGQxLWIzNmYtYzQyYTg4NjFjYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhxAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbmdUOYX6t6ZxwslzNTkSW8A2FS7js5dAKglIeqADc/9s1Khl978g 2Wsxf1p6IC5Lh7UAEFVg+M4+LY/y4NCh+YIs8g+rV/7/yudwnWlq1e/1naOx+B6C PSeqowVV8bwwfEp9iu4VPJe97zd1j0xfMFsPcp/2Z5wPnexpkflv3alxqRFbov8f BmdSH2ZLFlwGbQjq+zeUvHSM/dk6F/WzVwsOFgWhclsNj+PgUr+Q1WVwiaZKIvUe vUvo6UkD+UczQWjQr/RetDntm4R65WSEBe46EUUvBfk18+XZSpj7uPL6Jx8eurLz wmfxMAT3w9g4z19bnhaIELFef4XlW5Sjug== -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:34 2026 by rpki-client