This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa File: bf56dedf-58f6-3a50-a772-a07b6c69189c.roa (raw, json) Hash identifier: X6sBhSVvwEh7EMa3447Qb+0ycwB1Pi2WoEy0m64xCUw= Subject key identifier: FD:02:70:0F:A5:FB:16:57:54:3C:90:8E:21:84:88:22:F7:9B:95:EF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DBEBBE69FD6B59CBBA0E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:eb:be:69:fd:6b:59:cb:ba:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=67afc906-36ff-4ab7-bbd8-ad0cf6304545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:10:c2:9a:ab:b1:20:12:29:1a:8e:24:cc: d8:2f:7b:00:c4:17:17:f0:b8:44:b5:dc:26:b9:66: 3c:0b:c2:7b:7b:6d:e4:f4:24:7c:20:c1:62:78:5f: 41:48:16:4b:31:0c:6d:84:00:ca:61:02:d2:6d:d0: b5:f2:2a:c9:00:6f:2e:21:6b:b2:02:44:39:7e:08: 77:14:c3:1c:1e:87:d7:98:01:d4:02:36:dd:02:d7: d0:8d:75:ac:0c:89:80:08:de:98:c8:93:fe:87:ac: c1:42:0f:71:43:90:68:fe:6b:f0:1a:8b:9c:95:34: 55:ef:50:0c:7d:f1:92:78:59:71:e9:85:71:0f:8d: 5c:58:9f:db:80:31:28:ee:8f:b4:73:78:5b:21:2f: 73:82:3d:9d:e0:ed:4f:36:c6:6e:c1:e7:38:91:12: 77:1a:a8:d5:87:79:5a:a0:4d:8c:9b:84:14:af:39: fb:a2:b3:47:66:ca:1f:b2:ee:18:86:47:1b:9a:91: da:ed:57:7d:a7:41:96:dc:a2:c8:8d:12:5e:2e:4c: 9c:6f:12:48:c3:fb:c4:f0:2b:67:fa:71:22:33:3b: 1f:c5:81:b3:b0:9d:fa:6d:72:70:12:f2:3d:2f:9b: 60:09:4b:24:a4:da:e5:b5:7d:b6:cb:ad:37:5f:f2: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:02:70:0F:A5:FB:16:57:54:3C:90:8E:21:84:88:22:F7:9B:95:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:8b:5a:a2:36:d1:6f:df:38:e3:d2:47:48:3d:14:c1:13:aa: 19:3a:73:1d:ca:86:a9:c2:05:a0:33:3d:12:24:d6:d4:dd:5f: f7:1d:ea:b3:d3:e9:42:02:2c:6b:a3:9d:59:97:0a:2f:e6:b6: c6:52:60:2e:b7:8e:6c:55:23:3f:b3:84:d5:59:39:e1:dc:ac: b4:3d:5a:09:9f:70:ef:e0:e8:20:f3:82:3a:2a:ea:49:ef:8e: d1:27:f2:d3:38:94:e8:62:32:b8:dd:85:4c:31:57:8d:3f:e6: 41:50:f7:8c:6e:c5:d4:5c:7c:a0:ff:a0:db:ab:42:fb:28:8c: 64:76:ae:f2:fa:46:bb:f8:ed:91:7f:12:6c:38:a9:a8:66:64: ec:8e:6b:4e:f5:3d:06:4c:78:65:96:29:74:9a:9b:d8:87:42: 1e:c8:0e:e3:62:c1:ec:b7:3e:d0:68:56:76:8c:b9:bd:69:d3: 5f:3a:b8:1f:51:93:9f:c7:5d:39:9f:89:2b:bf:f5:8d:1d:b7: 2a:9c:3b:f4:e4:82:ba:55:78:80:39:f5:42:93:5c:af:14:ad: 7e:47:9d:b8:b1:19:b7:7d:f9:ea:97:c4:ae:80:52:9a:87:f2: d8:d8:ce:77:c5:3b:81:1f:b4:48:fb:8b:0d:88:44:b9:31:a7: 8e:f8:dc:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2+u+af1rWcu6DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NjdhZmM5MDYtMzZmZi00YWI3LWJiZDgtYWQwY2Y2MzA0NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBgQwpqrsSASKRqOJMzYL3sAxBcX8LhEtdwm uWY8C8J7e23k9CR8IMFieF9BSBZLMQxthADKYQLSbdC18irJAG8uIWuyAkQ5fgh3 FMMcHofXmAHUAjbdAtfQjXWsDImACN6YyJP+h6zBQg9xQ5Bo/mvwGouclTRV71AM ffGSeFlx6YVxD41cWJ/bgDEo7o+0c3hbIS9zgj2d4O1PNsZuwec4kRJ3GqjVh3la oE2Mm4QUrzn7orNHZsofsu4YhkcbmpHa7Vd9p0GW3KLIjRJeLkycbxJIw/vE8Ctn +nEiMzsfxYGzsJ36bXJwEvI9L5tgCUskpNrltX22y603X/IZxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP0CcA+l+xZXVDyQjiGEiCL3m5XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY1NmRlZGYtNThmNi0z YTUwLWE3NzItYTA3YjZjNjkxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApItaojbRb98449JHSD0UwROqGTpzHcqGqcIFoDM9EiTW1N1f9x3q s9PpQgIsa6OdWZcKL+a2xlJgLreObFUjP7OE1Vk54dystD1aCZ9w7+DoIPOCOirq Se+O0Sfy0ziU6GIyuN2FTDFXjT/mQVD3jG7F1Fx8oP+g26tC+yiMZHau8vpGu/jt kX8SbDipqGZk7I5rTvU9Bkx4ZZYpdJqb2IdCHsgO42LB7Lc+0GhWdoy5vWnTXzq4 H1GTn8ddOZ+JK7/1jR23Kpw79OSCulV4gDn1QpNcrxStfkeduLEZt3356pfEroBS mofy2NjOd8U7gR+0SPuLDYhEuTGnjvjcZQ== -----END CERTIFICATE-----Generated at Sat Jan 10 22:27:15 2026 by rpki-client