This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa File: bbe72348-659c-3eb0-97c4-9cdd57d17889.roa (raw, json) Hash identifier: tDxkY7wIj2izHtC6LFgAmTxvzopQFGsecybLtFPlr6M= Subject key identifier: 90:98:23:09:C7:2F:91:3A:97:4B:CF:6A:04:A3:EA:29:E7:53:C0:62 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C417685EE9A465F755E513E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 2604:2e8d:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:85:ee:9a:46:5f:75:5e:51:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=53a52d97-eacc-4ad9-8683-31484e524ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:ae:3e:ae:1e:d8:58:a0:6a:22:a0:56:f3: 58:c0:da:7c:a4:db:14:72:20:a9:61:1b:ef:a7:4c: 9d:09:b2:f2:e2:72:c1:d3:e7:04:7d:39:01:39:f5: bf:97:98:79:a5:a6:b9:bc:62:1e:3f:0f:28:42:2c: be:b2:4d:0c:5c:24:ca:5c:c4:a9:c9:48:88:80:81: ac:fb:dd:d2:cb:41:6d:9e:c4:45:83:a3:93:18:72: 8e:ff:5b:85:4f:59:f9:a8:53:ae:db:18:6a:1c:e6: 82:a7:81:eb:83:b0:aa:95:93:f4:b6:f0:f2:64:e0: ed:e7:ae:18:9f:01:14:87:95:03:23:b0:90:be:93: d2:43:b1:a1:49:9c:5a:b7:fa:41:81:11:3e:f3:57: dc:df:86:3b:20:da:7f:63:4f:1f:4c:99:4e:9f:39: ac:8e:74:d2:fa:5b:95:c8:d5:c4:2b:35:af:02:c8: 50:d9:04:04:82:a4:2d:a4:73:eb:63:42:ba:3a:9a: 8f:b4:63:8f:3e:32:aa:53:6d:39:05:d8:06:ef:65: da:85:a0:1a:38:94:c9:e4:49:5b:17:64:9b:bf:9c: 1f:9b:4e:6d:50:05:5e:9f:54:25:4d:1c:40:43:68: 0d:a8:df:a7:f9:f2:f4:d7:0e:5c:e3:c1:ff:c6:ae: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:98:23:09:C7:2F:91:3A:97:4B:CF:6A:04:A3:EA:29:E7:53:C0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:76:ad:c9:1f:32:13:5a:a4:28:90:f7:6e:17:92:01:47:21: 30:30:f6:db:fd:ee:0d:1c:3e:30:8c:bb:50:be:b7:54:b6:cd: 25:f9:e7:8b:a0:d6:33:72:4a:17:44:17:ab:42:68:3f:97:76: 67:1b:02:79:12:85:2c:3c:ff:84:41:b2:cd:82:6e:15:67:03: 24:89:b1:b9:19:3e:c0:cc:8c:2d:91:f4:d7:29:2f:e8:f1:8e: ba:60:6e:e1:11:8b:bf:92:9f:c8:cb:63:4d:24:8f:33:03:52: 16:eb:56:ec:22:4d:74:98:85:15:88:1d:2f:a3:89:49:54:51: f6:7e:4c:3b:9a:8b:71:7b:74:11:c4:b7:5a:53:c3:02:81:9a: 38:a1:81:8c:2f:3a:a8:8c:e1:a8:97:51:92:3d:c7:97:7f:21: 0e:87:1d:03:74:12:8b:6b:a0:18:d9:6d:25:b5:1e:c7:e8:e9: 7f:ad:82:87:42:79:1a:a0:92:21:52:fc:d8:b0:88:9b:94:ee: 80:c7:0b:f2:59:b1:d4:ce:18:34:4d:ae:62:4f:02:b4:79:f9: a6:32:44:c8:03:9c:a5:d3:59:b4:87:d0:8a:bb:94:65:4f:b1: 68:c6:ca:a8:38:7e:15:6b:0c:b5:bf:b2:3a:f3:c3:a3:df:cb: 88:87:d7:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExBdoXumkZfdV5RPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NTNhNTJkOTctZWFjYy00YWQ5LTg2ODMtMzE0ODRlNTI0ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ReuPq4e2FigaiKgVvNYwNp8pNsUciCpYRvv p0ydCbLy4nLB0+cEfTkBOfW/l5h5paa5vGIePw8oQiy+sk0MXCTKXMSpyUiIgIGs +93Sy0FtnsRFg6OTGHKO/1uFT1n5qFOu2xhqHOaCp4Hrg7CqlZP0tvDyZODt564Y nwEUh5UDI7CQvpPSQ7GhSZxat/pBgRE+81fc34Y7INp/Y08fTJlOnzmsjnTS+luV yNXEKzWvAshQ2QQEgqQtpHPrY0K6OpqPtGOPPjKqU205BdgG72XahaAaOJTJ5Elb F2Sbv5wfm05tUAVen1QlTRxAQ2gNqN+n+fL01w5c48H/xq4d2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJCYIwnHL5E6l0vPagSj6innU8BiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmJlNzIzNDgtNjU5Yy0z ZWIwLTk3YzQtOWNkZDU3ZDE3ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATnatyR8yE1qkKJD3bheSAUchMDD22/3uDRw+MIy7UL63VLbNJfnn i6DWM3JKF0QXq0JoP5d2ZxsCeRKFLDz/hEGyzYJuFWcDJImxuRk+wMyMLZH01ykv 6PGOumBu4RGLv5KfyMtjTSSPMwNSFutW7CJNdJiFFYgdL6OJSVRR9n5MO5qLcXt0 EcS3WlPDAoGaOKGBjC86qIzhqJdRkj3Hl38hDocdA3QSi2ugGNltJbUex+jpf62C h0J5GqCSIVL82LCIm5TugMcL8lmx1M4YNE2uYk8CtHn5pjJEyAOcpdNZtIfQiruU ZU+xaMbKqDh+FWsMtb+yOvPDo9/LiIfXTA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:59 2026 by rpki-client