This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa File: bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json) Hash identifier: yzENEqLm3tre4cpNrdIjdAX48E7OBnvUOLyD5mLx7gk= Subject key identifier: D8:3C:C4:61:62:13:5B:31:71:6E:B7:77:0C:65:34:F7:8A:CE:7B:88 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A69D9792D1BC9C44EADB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:9400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:9d:97:92:d1:bc:9c:44:ea:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=56933c49-0b28-45e5-8e50-c2d7612dadf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:e1:a2:db:c0:7d:75:35:bb:6d:06:1a:0c: ff:7f:b2:e4:87:8d:33:d3:1f:eb:7e:47:08:46:2d: f9:3a:e0:b5:44:2f:9b:ba:67:82:58:84:ea:59:ec: 37:94:64:24:18:f7:07:20:ca:59:50:c3:52:04:94: c7:18:ae:80:dd:e5:f7:6d:73:96:31:ca:00:ec:e5: 96:11:90:d9:48:21:92:1f:98:54:c4:f0:17:4d:6c: ff:a7:66:24:71:25:a9:58:ce:67:9d:71:a7:99:a8: fd:27:57:72:1c:4a:39:6d:01:fd:6e:3b:bc:fe:02: a3:42:a2:e8:9f:ab:cc:6d:56:36:86:45:bd:b0:b2: b5:71:14:c8:47:69:c1:70:ca:a7:08:eb:a8:f1:e9: cc:5d:86:ce:ca:c3:8b:1c:8e:4b:43:82:47:62:2f: 8d:19:a8:77:7b:f4:40:48:dd:5d:c0:57:12:cd:de: e8:b2:af:21:fb:00:d0:0a:94:51:b7:d2:45:9b:18: 6a:9d:16:00:76:a5:fe:fb:86:cc:df:2b:b2:f3:47: 5e:3a:22:7f:b7:66:0b:b8:d6:03:57:f0:17:8c:52: 67:48:e9:9a:40:73:04:81:2c:88:a0:c9:ca:8e:67: 44:5d:92:8c:e7:0e:80:da:24:ca:82:05:5d:92:a0: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:C4:61:62:13:5B:31:71:6E:B7:77:0C:65:34:F7:8A:CE:7B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:9400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8f:08:43:06:15:ca:63:79:56:a0:04:b6:48:51:b2:76:60: 3b:9a:82:12:23:d6:92:02:61:26:8e:78:d3:ae:d9:e6:e5:95: f5:8c:79:b0:eb:52:59:cf:17:76:14:14:d6:c0:50:03:22:12: 7a:30:2b:5b:35:14:5a:ed:14:ce:64:db:1b:b6:90:d9:15:9a: d6:8c:24:4e:65:07:37:e7:39:8e:18:e7:58:bc:45:14:9b:f9: 6d:ff:94:2c:1f:20:d9:c8:e9:de:d8:e8:73:9f:4d:9d:0e:4c: 83:0e:66:07:96:23:cf:18:2b:4d:4d:1d:76:74:9f:4e:6e:72: e9:b0:66:ad:8f:ed:ca:e7:75:f6:dc:ca:0d:81:dc:fc:77:c1: fc:58:cd:dc:e6:41:d5:0a:12:91:a0:66:b2:25:59:a7:7d:72: ea:a8:dd:2f:98:af:79:cd:88:f9:3a:9b:69:9d:69:2a:54:97: 96:75:5b:d0:95:4f:ff:e3:0e:20:ed:df:ad:ed:a0:11:83:2c: 0b:5f:b6:d0:54:06:21:76:5c:14:6a:a3:43:9a:47:1c:14:5d: 13:02:5c:0c:e7:02:0c:8e:db:eb:81:4d:bb:d9:66:3e:6a:5b: 47:b5:01:93:a2:42:b1:b2:f3:40:80:bd:bf:f1:f2:8c:bd:70: 5e:58:89:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpp2XktG8nETq2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTY5MzNjNDktMGIyOC00NWU1LThlNTAtYzJkNzYxMmRhZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnibhotvAfXU1u20GGgz/f7Lkh40z0x/rfkcI Ri35OuC1RC+bumeCWITqWew3lGQkGPcHIMpZUMNSBJTHGK6A3eX3bXOWMcoA7OWW EZDZSCGSH5hUxPAXTWz/p2YkcSWpWM5nnXGnmaj9J1dyHEo5bQH9bju8/gKjQqLo n6vMbVY2hkW9sLK1cRTIR2nBcMqnCOuo8enMXYbOysOLHI5LQ4JHYi+NGah3e/RA SN1dwFcSzd7osq8h+wDQCpRRt9JFmxhqnRYAdqX++4bM3yuy80deOiJ/t2YLuNYD V/AXjFJnSOmaQHMEgSyIoMnKjmdEXZKM5w6A2iTKggVdkqByDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNg8xGFiE1sxcW63dwxlNPeKznuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYwMGZmNDItMWQ3Mi0z M2ZlLWFmYzItNDI4MzdiMTE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujJQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjI8IQwYVymN5VqAEtkhRsnZgO5qCEiPWkgJhJo54067Z5uWV9Yx5 sOtSWc8XdhQU1sBQAyISejArWzUUWu0UzmTbG7aQ2RWa1owkTmUHN+c5jhjnWLxF FJv5bf+ULB8g2cjp3tjoc59NnQ5Mgw5mB5YjzxgrTU0ddnSfTm5y6bBmrY/tyud1 9tzKDYHc/HfB/FjN3OZB1QoSkaBmsiVZp31y6qjdL5ivec2I+TqbaZ1pKlSXlnVb 0JVP/+MOIO3fre2gEYMsC1+20FQGIXZcFGqjQ5pHHBRdEwJcDOcCDI7b64FNu9lm PmpbR7UBk6JCsbLzQIC9v/HyjL1wXliJdg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:51 2026 by rpki-client