This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbad6353-9a0c-3f43-9af5-ce21598889e7.roa File: cbad6353-9a0c-3f43-9af5-ce21598889e7.roa (raw, json) Hash identifier: x9TlcPbQUMU6Y1YC5mlOoVWbXH4FRpTzB4QdrG7BcVk= Subject key identifier: 2B:11:C3:4E:E0:42:02:76:B2:A3:D9:FB:F3:FB:60:FA:E8:91:79:40 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B5C6C6F9E50176C5C365414C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbad6353-9a0c-3f43-9af5-ce21598889e7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e88:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:6f:9e:50:17:6c:5c:36:54:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=e44a1d3e-b06d-47be-83ea-e77852df3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:c8:f3:85:7b:ba:e3:ca:b3:e5:bf:59:01: dc:d2:04:62:86:a2:c5:56:be:21:70:52:1e:51:16: 3a:62:17:6c:57:33:55:d9:cc:bf:fa:38:6e:bb:75: 0b:78:ed:4b:c2:0e:16:a8:01:87:8c:97:c0:e4:7c: bd:04:97:27:34:62:28:0d:2d:bb:c1:52:f7:5a:9c: 88:f8:49:d6:2b:b5:1a:30:4c:3b:cf:81:f3:52:d2: 89:9a:03:ff:b3:c0:2b:4c:58:ee:7b:b9:22:2e:c1: e5:61:a6:76:3f:24:ba:b4:d4:6a:ec:ac:c1:8e:8e: af:8f:91:f7:e4:e9:02:9b:5f:c6:3f:13:3d:14:8c: 5e:0b:64:54:ee:87:2a:49:50:4d:61:39:b2:6a:7b: fb:87:d4:a2:ce:97:72:81:6c:c5:46:11:de:2c:76: f4:aa:05:b6:38:76:4f:15:9f:45:70:82:db:3d:f5: 43:37:62:d8:b4:d8:e7:59:74:cc:86:12:51:d5:9d: e7:0d:b3:dc:96:3a:71:7d:2e:fd:34:f0:6c:61:ee: 3e:ca:6b:09:5f:5c:87:48:ef:a1:a4:11:cd:6e:d7: 9a:ad:a3:44:39:f4:bc:96:32:4f:22:42:a7:e0:ab: b1:c1:a8:91:46:ed:bc:0c:c8:e3:ee:b3:d6:aa:7a: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:C3:4E:E0:42:02:76:B2:A3:D9:FB:F3:FB:60:FA:E8:91:79:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbad6353-9a0c-3f43-9af5-ce21598889e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0f:cf:8b:70:7c:80:0c:d0:e1:e1:bb:45:be:ad:ea:cf:d6: 7b:c5:db:3a:bb:99:22:b4:34:9c:73:e4:4a:e6:eb:82:57:c2: 82:77:44:f3:18:9c:b5:3a:fa:a3:8b:94:90:93:d5:09:14:c0: 9a:5e:84:09:0e:16:25:e9:f8:95:7b:08:2b:39:9d:8e:c0:ff: bb:73:e4:c5:d2:61:ba:d2:20:85:4b:32:b0:85:ed:e5:a2:4e: 69:87:ba:5e:12:53:51:0c:dc:39:54:e3:e1:88:9c:50:e1:67: 49:26:c7:d6:75:a3:e8:7e:d1:a0:35:91:30:5b:74:32:cf:f0: f6:59:93:a8:b2:7a:36:f9:f9:ea:2b:f6:b3:1a:bc:4a:b4:2c: d5:2b:20:77:3c:08:04:db:f2:44:44:3d:2d:0c:1e:57:77:9e: 74:72:cf:32:8f:48:3b:89:6c:15:69:15:56:8b:14:90:77:85: 0d:b7:97:dd:04:b7:a7:7e:2f:75:ce:df:b8:6b:b7:14:69:a7: ca:36:9c:df:53:87:28:8a:42:1b:0f:c3:36:b4:34:26:2a:9a: e4:ea:6f:af:9d:7f:20:fa:39:0e:7f:8c:3d:30:a3:95:22:f8: 85:0a:b2:2e:47:90:03:cd:2d:d1:a0:e2:74:c3:d9:b4:2b:b4: ef:0c:af:c9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtcbG+eUBdsXDZUFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTQ0YTFkM2UtYjA2ZC00N2JlLTgzZWEtZTc3ODUyZGYzOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk7I84V7uuPKs+W/WQHc0gRihqLFVr4hcFIe URY6YhdsVzNV2cy/+jhuu3ULeO1Lwg4WqAGHjJfA5Hy9BJcnNGIoDS27wVL3WpyI +EnWK7UaMEw7z4HzUtKJmgP/s8ArTFjue7kiLsHlYaZ2PyS6tNRq7KzBjo6vj5H3 5OkCm1/GPxM9FIxeC2RU7ocqSVBNYTmyanv7h9SizpdygWzFRhHeLHb0qgW2OHZP FZ9FcILbPfVDN2LYtNjnWXTMhhJR1Z3nDbPcljpxfS79NPBsYe4+ymsJX1yHSO+h pBHNbtearaNEOfS8ljJPIkKn4KuxwaiRRu28DMjj7rPWqnpQ8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCsRw07gQgJ2sqPZ+/P7YProkXlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2JhZDYzNTMtOWEwYy0z ZjQzLTlhZjUtY2UyMTU5ODg4OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjQ/Pi3B8gAzQ4eG7Rb6t6s/We8XbOruZIrQ0nHPkSubrglfCgndE 8xictTr6o4uUkJPVCRTAml6ECQ4WJen4lXsIKzmdjsD/u3PkxdJhutIghUsysIXt 5aJOaYe6XhJTUQzcOVTj4YicUOFnSSbH1nWj6H7RoDWRMFt0Ms/w9lmTqLJ6Nvn5 6iv2sxq8SrQs1SsgdzwIBNvyREQ9LQweV3eedHLPMo9IO4lsFWkVVosUkHeFDbeX 3QS3p34vdc7fuGu3FGmnyjac31OHKIpCGw/DNrQ0Jiqa5Opvr51/IPo5Dn+MPTCj lSL4hQqyLkeQA80t0aDidMPZtCu07wyvyQ== -----END CERTIFICATE-----Generated at Tue Nov 25 17:03:26 2025 by rpki-client