This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be9adbde-17b9-391d-acc4-0f29b9446cb6.roa File: be9adbde-17b9-391d-acc4-0f29b9446cb6.roa (raw, json) Hash identifier: fiJ6uMvJd14wOUVI+U9Hi5gzRxdYojJNLcfzFDtBO5w= Subject key identifier: C4:A4:43:68:A3:1E:E8:05:61:A0:C9:6F:D1:24:2D:3E:D5:A1:7B:1B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C470BD97C7EED536399AE1580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be9adbde-17b9-391d-acc4-0f29b9446cb6.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2e88:c400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d9:7c:7e:ed:53:63:99:ae:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=df2c62c4-601d-4154-ba02-1623fdd2cc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:2b:01:bc:83:cd:b9:8e:a2:bf:35:a7:ab: d0:b9:3e:04:33:ca:99:3e:b8:84:ac:6b:3d:49:c0: 6e:ba:ac:45:41:05:6c:91:28:c5:83:5e:25:0f:8a: 45:8e:8e:2e:d6:e1:5b:08:0e:a6:8f:c9:87:0d:4a: 42:48:5a:12:83:79:8d:a6:d8:c3:d7:a5:dd:11:e5: a0:a5:9e:ad:b2:8e:c6:05:06:b0:7e:b9:87:d1:d1: f3:f1:27:20:72:eb:44:c4:94:1f:d0:c1:ca:90:7b: 41:e0:43:13:8c:c1:2e:68:93:a0:9f:4f:be:a9:c2: 52:f9:d2:71:d6:4a:51:d4:68:eb:04:16:b3:1f:62: be:21:eb:6e:af:a5:3d:4c:9b:0f:4b:52:5a:b2:71: 3b:4f:bc:9b:87:70:f0:53:b2:5f:51:54:50:6f:20: d7:ea:33:3e:cf:5e:af:36:7d:38:05:29:95:b3:15: 02:28:7c:6e:f4:d7:b0:5d:41:f1:33:0a:6e:5f:68: e2:23:ae:8e:36:16:bd:ae:93:06:8b:99:38:92:14: 76:7f:a8:4a:fa:36:dd:c8:bd:4d:2e:46:77:03:7c: d8:97:d4:80:b6:60:68:49:ab:45:c1:10:6e:8d:59: cf:11:f7:b4:24:f2:33:79:01:9a:cc:f9:99:bc:e0: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A4:43:68:A3:1E:E8:05:61:A0:C9:6F:D1:24:2D:3E:D5:A1:7B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be9adbde-17b9-391d-acc4-0f29b9446cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:c400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ab:87:88:36:23:bf:9e:ec:58:5f:1e:df:c0:ac:9f:48:6f: e9:83:63:fe:08:dc:50:84:e4:09:ee:ff:43:c6:df:78:80:3b: 6d:94:9e:7d:33:b1:fe:2b:c8:35:50:b0:28:04:6a:0f:bf:9b: 14:7e:3c:6c:3d:95:b0:72:d9:07:36:5d:34:06:69:73:9a:c7: fc:9d:fa:2c:eb:7e:0b:21:57:3d:d2:87:82:28:0d:d8:ec:b3: b6:cd:c4:27:de:6f:33:58:b7:90:ab:19:f0:04:d7:92:0c:05: bb:ae:a4:f2:11:c5:b3:6d:86:df:ea:87:bc:5c:e5:02:41:75: 3a:5d:21:07:5b:15:8e:09:a0:0c:27:d9:5d:ce:65:e2:2e:44: 10:69:49:4a:94:d9:35:f2:82:96:39:03:6e:91:69:8e:38:5b: 00:bb:0a:64:a0:c5:30:40:57:6c:c7:fa:ee:77:a5:8d:21:9f: 68:95:55:f4:e2:68:4b:30:8b:81:d4:a7:0b:34:0c:7f:02:3e: f1:bf:c2:f5:c6:bf:fd:c8:86:09:f1:ec:7f:4b:af:d1:a6:2c: 6a:0b:fd:3d:da:eb:91:49:3f:14:48:e8:98:65:f7:37:53:0e: 07:b2:e6:b5:6e:4c:57:64:14:cd:85:c8:e2:0d:80:03:a9:90: 5d:96:47:a9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExHC9l8fu1TY5muFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk ZGYyYzYyYzQtNjAxZC00MTU0LWJhMDItMTYyM2ZkZDJjYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAUrAbyDzbmOor81p6vQuT4EM8qZPriErGs9 ScBuuqxFQQVskSjFg14lD4pFjo4u1uFbCA6mj8mHDUpCSFoSg3mNptjD16XdEeWg pZ6tso7GBQawfrmH0dHz8ScgcutExJQf0MHKkHtB4EMTjMEuaJOgn0++qcJS+dJx 1kpR1GjrBBazH2K+Ietur6U9TJsPS1JasnE7T7ybh3DwU7JfUVRQbyDX6jM+z16v Nn04BSmVsxUCKHxu9NewXUHxMwpuX2jiI66ONha9rpMGi5k4khR2f6hK+jbdyL1N LkZ3A3zYl9SAtmBoSatFwRBujVnPEfe0JPIzeQGazPmZvODKawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMSkQ2ijHugFYaDJb9EkLT7VoXsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU5YWRiZGUtMTdiOS0z OTFkLWFjYzQtMGYyOWI5NDQ2Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcquHiDYjv57sWF8e38Csn0hv6YNj/gjcUITkCe7/Q8bfeIA7bZSe fTOx/ivINVCwKARqD7+bFH48bD2VsHLZBzZdNAZpc5rH/J36LOt+CyFXPdKHgigN 2Oyzts3EJ95vM1i3kKsZ8ATXkgwFu66k8hHFs22G3+qHvFzlAkF1Ol0hB1sVjgmg DCfZXc5l4i5EEGlJSpTZNfKCljkDbpFpjjhbALsKZKDFMEBXbMf67neljSGfaJVV 9OJoSzCLgdSnCzQMfwI+8b/C9ca//ciGCfHsf0uv0aYsagv9PdrrkUk/FEjomGX3 N1MOB7LmtW5MV2QUzYXI4g2AA6mQXZZHqQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:54 2026 by rpki-client