This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb312f72-f61f-3e2b-a213-7da71383eaaf.roa File: bb312f72-f61f-3e2b-a213-7da71383eaaf.roa (raw, json) Hash identifier: mDUbDj6UF0L5RejsvZg1TP2Fd0yosBG7V9wgUmzvbSY= Subject key identifier: F3:CD:4A:9B:50:A5:53:4E:86:40:F3:A2:84:4E:96:A9:8E:EE:C0:D4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBBE3146D14DD226C7E500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb312f72-f61f-3e2b-a213-7da71383eaaf.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:be:31:46:d1:4d:d2:26:c7:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9c5384d4-817e-4b60-8d68-8f0e6be894c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:26:87:5b:98:80:fb:6c:1f:e1:f7:47:aa: 5d:47:d8:16:e7:91:58:9b:80:ac:5a:ea:49:16:fb: 86:81:6a:b7:b2:a3:4d:21:d9:15:40:89:57:58:85: be:f0:e5:a4:fc:dd:bd:df:4b:0f:af:b4:a1:44:15: b5:2b:4f:63:d8:b7:c9:3e:93:d0:b6:4c:5e:68:9e: f3:e0:c5:f8:12:7b:4c:5b:94:78:1d:88:e7:48:ba: 0f:6c:d9:ef:53:cb:10:49:5e:18:6a:27:a9:c1:e0: 48:23:80:37:c1:0d:b9:9b:01:96:1d:46:27:a9:92: f6:19:7c:ab:8a:42:00:70:bc:fc:0d:ae:a2:95:84: 37:e7:19:7a:e5:a9:cc:dc:14:99:d3:ef:2b:36:d7: 05:62:79:6e:c7:f2:cf:b7:3c:0a:8d:08:ec:ee:c0: 2e:62:06:c4:98:e8:06:6c:f3:fd:6f:5f:1b:0b:e6: 11:b2:0b:47:64:a6:3c:c3:f3:8b:58:73:a2:62:9f: cc:bd:ec:84:22:39:7b:91:a8:2e:c8:ed:79:49:ea: 14:74:2a:b9:26:82:df:c0:ce:54:65:f6:85:5f:3c: 7c:ce:20:d8:04:be:23:d7:98:1c:93:9a:b3:d2:ef: e4:e3:c6:4c:65:b6:c6:d7:5c:12:6f:47:2e:56:86: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:4A:9B:50:A5:53:4E:86:40:F3:A2:84:4E:96:A9:8E:EE:C0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb312f72-f61f-3e2b-a213-7da71383eaaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:06:58:a7:d4:fe:f1:db:f0:12:de:f3:7a:22:4f:95:f3:53: d2:fd:0d:cf:07:50:73:0a:dc:61:38:a2:43:66:59:e1:e2:a0: e5:5d:b6:d6:02:32:84:85:24:00:22:94:c3:fe:18:f2:71:b4: 9e:3b:88:2a:1e:22:be:8c:22:93:2c:01:0a:4b:18:6f:e7:c9: c8:55:83:b2:84:4f:a5:c6:cf:e7:21:9c:02:39:82:aa:61:e2: 3f:b5:c8:06:06:74:f6:eb:7d:5b:09:1e:8c:8d:32:38:19:84: 29:5e:41:ca:2a:1e:08:83:05:de:86:71:de:a7:23:00:f4:84: f7:00:32:d3:64:f2:74:e2:5c:81:53:f2:5a:a5:60:a4:b4:9a: 82:b5:b2:de:34:21:98:7c:f8:f7:0d:91:f4:d9:1d:de:25:4d: 84:74:2d:40:05:5d:c4:68:9c:a8:13:12:04:1c:69:02:23:25: b8:a9:e1:cf:d6:10:7f:63:e3:53:3f:0e:8b:ee:e1:8e:f4:8a: c3:67:2d:54:40:a9:bf:57:e6:b9:3a:2f:6b:75:65:6b:67:41: a9:08:4a:1f:1b:bd:81:0c:e3:44:e3:50:b5:2b:33:97:01:0b: cd:4e:f9:64:00:c0:38:2f:5d:23:06:4a:37:0f:05:33:14:47: 1f:69:a6:11 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC274xRtFN0ibH5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OWM1Mzg0ZDQtODE3ZS00YjYwLThkNjgtOGYwZTZiZTg5NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpEmh1uYgPtsH+H3R6pdR9gW55FYm4CsWupJ FvuGgWq3sqNNIdkVQIlXWIW+8OWk/N2930sPr7ShRBW1K09j2LfJPpPQtkxeaJ7z 4MX4EntMW5R4HYjnSLoPbNnvU8sQSV4YaiepweBII4A3wQ25mwGWHUYnqZL2GXyr ikIAcLz8Da6ilYQ35xl65anM3BSZ0+8rNtcFYnlux/LPtzwKjQjs7sAuYgbEmOgG bPP9b18bC+YRsgtHZKY8w/OLWHOiYp/MveyEIjl7kaguyO15SeoUdCq5JoLfwM5U ZfaFXzx8ziDYBL4j15gck5qz0u/k48ZMZbbG11wSb0cuVoam/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPPNSptQpVNOhkDzooROlqmO7sDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmIzMTJmNzItZjYxZi0z ZTJiLWEyMTMtN2RhNzEzODNlYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYwZYp9T+8dvwEt7zeiJPlfNT0v0NzwdQcwrcYTiiQ2ZZ4eKg5V22 1gIyhIUkACKUw/4Y8nG0njuIKh4ivowikywBCksYb+fJyFWDsoRPpcbP5yGcAjmC qmHiP7XIBgZ09ut9WwkejI0yOBmEKV5ByioeCIMF3oZx3qcjAPSE9wAy02TydOJc gVPyWqVgpLSagrWy3jQhmHz49w2R9Nkd3iVNhHQtQAVdxGicqBMSBBxpAiMluKnh z9YQf2PjUz8Oi+7hjvSKw2ctVECpv1fmuTova3Vla2dBqQhKHxu9gQzjRONQtSsz lwELzU75ZADAOC9dIwZKNw8FMxRHH2mmEQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:29:08 2026 by rpki-client