This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbcaf095-c7cb-3137-82a0-7e3e56591e0c.roa File: bbcaf095-c7cb-3137-82a0-7e3e56591e0c.roa (raw, json) Hash identifier: Mn7h/PsqdjbpeNIFbjKK5PHTlvJUIFj97XxN2hzmfKY= Subject key identifier: A0:09:5C:77:A7:73:F8:CC:10:4E:5E:DA:67:A7:37:24:08:F0:D0:33 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C417685FF61DB98597AADA040 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbcaf095-c7cb-3137-82a0-7e3e56591e0c.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8d:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:85:ff:61:db:98:59:7a:ad:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=ace716cb-cf24-460e-9c09-6dfa05de0d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:ec:e7:e4:df:77:22:aa:84:90:7c:d3:2a: 57:8c:be:55:9e:40:bf:d5:aa:f1:aa:91:37:e8:37: 30:d8:eb:b1:5b:44:7c:98:85:b0:29:b8:7b:87:d5: 16:94:35:a1:df:68:8c:df:bc:af:5f:fe:73:e9:cb: cd:69:32:a5:b6:1e:c9:83:c5:8f:81:03:ee:7b:79: dc:84:98:0e:fb:c9:81:1a:08:7a:c9:e6:4f:42:82: 25:06:9a:06:ae:ce:8b:12:24:f1:7d:1e:c5:93:4f: 9c:ef:38:db:b2:ac:5c:a5:1b:66:cc:0f:ce:0c:31: d9:c3:ee:98:41:79:97:ac:23:0c:fc:6b:7a:5a:64: b2:88:3c:25:73:11:de:8d:b4:55:41:66:fc:c4:4c: 30:d8:b8:91:a6:7d:44:96:1f:12:42:e6:ca:e7:24: 5f:d2:a3:52:43:9c:a7:32:0f:d9:78:dd:85:09:65: 57:20:4d:a8:53:3d:40:59:c1:49:af:9e:b1:de:44: 28:31:26:c4:e4:92:ec:5b:11:cd:e7:47:8c:a9:f7: 13:69:d9:10:3e:de:2b:36:0a:3c:32:ac:cf:c4:fb: 62:af:e7:9c:c7:ca:8e:26:a4:0f:e1:4b:6f:f2:bf: ec:60:4e:0b:2c:20:46:d8:d0:ba:a2:15:fd:65:f4: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:5C:77:A7:73:F8:CC:10:4E:5E:DA:67:A7:37:24:08:F0:D0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbcaf095-c7cb-3137-82a0-7e3e56591e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a5:e6:75:7b:1a:5f:6a:3c:b1:19:53:a0:3a:c4:95:2f:45: 80:18:3e:d7:e6:43:37:52:89:46:db:12:ac:3a:d8:5b:c7:a9: e5:ed:32:a8:42:46:9f:3c:e6:3f:38:5a:e0:10:30:87:86:f9: a5:39:c3:55:7a:e7:1f:6a:69:de:fb:4c:ea:b3:d2:bf:19:67: e7:2b:13:0b:ac:11:f7:a4:c1:d8:7a:ce:84:f9:9c:d2:fb:3e: 7b:9f:04:7f:56:a7:f2:e4:56:19:92:14:e9:bc:94:77:9c:a6: 9b:85:82:a4:91:31:04:71:62:2b:00:04:6c:73:9f:a2:7c:37: 52:68:33:82:97:f0:21:14:e9:4b:29:52:e9:39:cb:30:3b:11: 03:0a:87:a7:07:84:aa:f2:12:e0:27:9b:54:75:d6:4e:0f:9e: 0a:fb:37:6d:50:34:09:07:6b:5f:d6:4d:83:ec:b1:21:02:82: a3:a0:c9:6c:00:6d:44:61:00:68:30:73:0c:54:d0:d2:9d:db: 33:5f:19:1b:14:49:50:9b:79:ec:47:13:42:a0:ba:87:30:39: 88:49:5c:44:23:73:d0:5a:85:0e:8d:78:03:77:e3:76:70:cd: df:d8:44:a5:40:44:4f:0f:b9:9a:c9:b8:cf:51:2b:f0:7a:0c: d2:20:f1:c6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoX/YduYWXqtoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YWNlNzE2Y2ItY2YyNC00NjBlLTljMDktNmRmYTA1ZGUwZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlODs5+TfdyKqhJB80ypXjL5VnkC/1arxqpE3 6Dcw2OuxW0R8mIWwKbh7h9UWlDWh32iM37yvX/5z6cvNaTKlth7Jg8WPgQPue3nc hJgO+8mBGgh6yeZPQoIlBpoGrs6LEiTxfR7Fk0+c7zjbsqxcpRtmzA/ODDHZw+6Y QXmXrCMM/Gt6WmSyiDwlcxHejbRVQWb8xEww2LiRpn1Elh8SQubK5yRf0qNSQ5yn Mg/ZeN2FCWVXIE2oUz1AWcFJr56x3kQoMSbE5JLsWxHN50eMqfcTadkQPt4rNgo8 MqzPxPtir+ecx8qOJqQP4Utv8r/sYE4LLCBG2NC6ohX9ZfSLiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKAJXHenc/jMEE5e2menNyQI8NAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmJjYWYwOTUtYzdjYi0z MTM3LTgyYTAtN2UzZTU2NTkxZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlKXmdXsaX2o8sRlToDrElS9FgBg+1+ZDN1KJRtsSrDrYW8ep5e0y qEJGnzzmPzha4BAwh4b5pTnDVXrnH2pp3vtM6rPSvxln5ysTC6wR96TB2HrOhPmc 0vs+e58Ef1an8uRWGZIU6byUd5ymm4WCpJExBHFiKwAEbHOfonw3UmgzgpfwIRTp SylS6TnLMDsRAwqHpweEqvIS4CebVHXWTg+eCvs3bVA0CQdrX9ZNg+yxIQKCo6DJ bABtRGEAaDBzDFTQ0p3bM18ZGxRJUJt57EcTQqC6hzA5iElcRCNz0FqFDo14A3fj dnDN39hEpUBETw+5msm4z1Er8HoM0iDxxg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:32 2026 by rpki-client