This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa File: ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa (raw, json) Hash identifier: AGO6ehRxZRQx9/GM5ppdxcJlb/qj7PCE++Cq3pTMv7I= Subject key identifier: 65:8E:B1:13:04:82:0A:98:E9:6B:0D:30:72:E1:85:49:36:8B:F8:09 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6945A58CB0820B3666780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8a:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:94:5a:58:cb:08:20:b3:66:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3538af7e-965c-4018-82da-bdef26a13191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:fd:7b:95:f1:dc:ab:a5:7e:71:29:9e:b1: c6:f1:46:fb:a3:e2:35:fc:eb:aa:9a:96:c7:03:1b: 23:06:af:8d:6e:39:35:9e:3b:1e:11:6b:19:a6:c6: f8:f6:05:21:30:fe:63:1e:60:aa:73:5b:00:77:47: dc:f0:7c:b4:bb:2b:53:a5:b3:72:90:a3:4c:81:69: d6:df:4e:d7:e8:af:05:47:b9:ee:ed:ba:73:cc:b7: f4:f7:e2:4e:a0:91:4a:0f:40:15:94:c3:8e:4f:4a: 98:25:7a:2c:f9:e8:00:74:a2:aa:7e:ef:82:66:1b: eb:79:75:a2:e8:01:3b:38:ae:40:e3:13:bb:cb:f7: 1d:64:83:65:85:e0:c3:87:cc:46:19:7e:81:5f:67: a8:be:17:6f:1c:48:ab:f7:ff:c0:1d:56:3e:2b:b9: 47:ef:19:25:63:83:28:94:ec:1d:7f:bb:e9:b8:4e: ea:05:05:e1:17:2f:53:49:ad:35:c4:fd:b3:b6:6b: 7a:7b:06:5d:f4:92:fa:18:c6:f9:c1:29:3a:5c:7f: 54:01:1d:48:8c:42:39:44:8d:62:32:24:d5:0f:d1: a5:59:29:14:3f:13:57:32:11:67:8a:0f:f9:18:b6: f8:56:6a:cc:d7:67:a5:7d:38:6d:42:63:f0:77:62: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:B1:13:04:82:0A:98:E9:6B:0D:30:72:E1:85:49:36:8B:F8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6f:81:d2:d1:19:1d:7e:32:14:e7:5e:5c:9e:42:cb:ce:67: ba:d5:82:4d:88:a2:d0:45:00:11:98:7c:3f:58:ef:ad:13:6d: 2f:8b:35:c9:98:0e:f9:1b:ec:f6:1f:6f:84:5a:3a:aa:20:c5: f1:b6:62:4e:0d:e7:e0:0f:87:00:e4:98:5c:95:fe:77:fd:17: c2:a8:eb:c9:e6:f3:5c:d1:25:87:02:d7:2b:a6:56:44:b6:e2: 45:66:e8:19:c9:04:b4:35:50:68:7e:b5:c6:69:1f:89:53:de: a1:a9:28:cf:2c:aa:93:29:16:37:91:65:ea:9a:76:e5:30:79: ec:9b:f0:43:b0:1b:59:2c:23:e1:dd:42:75:5c:74:ef:9c:2a: 72:40:ca:7e:35:fb:7e:2b:fc:4b:79:0b:4b:c9:f2:85:40:1e: ef:95:a9:77:2f:f6:77:64:8a:7b:57:27:f9:36:8e:f2:0d:2f: 4c:ad:73:8d:b2:55:06:57:cd:56:c0:fe:30:1d:75:51:c3:1e: 57:c4:55:90:1a:39:c3:9c:ee:1e:6f:a5:3b:f9:31:c7:fd:69: b5:34:da:ac:3e:a9:9d:ce:65:c9:5d:45:e6:60:5b:c0:fa:fc: d1:46:88:3a:03:67:7c:86:db:2c:db:81:31:53:a8:bf:3e:9c: 53:15:47:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFppRaWMsIILNmZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzUzOGFmN2UtOTY1Yy00MDE4LTgyZGEtYmRlZjI2YTEzMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRT9e5Xx3KulfnEpnrHG8Ub7o+I1/OuqmpbH AxsjBq+Nbjk1njseEWsZpsb49gUhMP5jHmCqc1sAd0fc8Hy0uytTpbNykKNMgWnW 307X6K8FR7nu7bpzzLf09+JOoJFKD0AVlMOOT0qYJXos+egAdKKqfu+CZhvreXWi 6AE7OK5A4xO7y/cdZINlheDDh8xGGX6BX2eovhdvHEir9//AHVY+K7lH7xklY4Mo lOwdf7vpuE7qBQXhFy9TSa01xP2ztmt6ewZd9JL6GMb5wSk6XH9UAR1IjEI5RI1i MiTVD9GlWSkUPxNXMhFnig/5GLb4VmrM12elfThtQmPwd2JBRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGWOsRMEggqY6WsNMHLhhUk2i/gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmZiZjQwMTAtYzNlNy0z YzA1LWE0OWMtMDUxMmNjYjQwYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuikQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXG+B0tEZHX4yFOdeXJ5Cy85nutWCTYii0EUAEZh8P1jvrRNtL4s1 yZgO+Rvs9h9vhFo6qiDF8bZiTg3n4A+HAOSYXJX+d/0XwqjryebzXNElhwLXK6ZW RLbiRWboGckEtDVQaH61xmkfiVPeoakozyyqkykWN5Fl6pp25TB57JvwQ7AbWSwj 4d1CdVx075wqckDKfjX7fiv8S3kLS8nyhUAe75Wpdy/2d2SKe1cn+TaO8g0vTK1z jbJVBlfNVsD+MB11UcMeV8RVkBo5w5zuHm+lO/kxx/1ptTTarD6pnc5lyV1F5mBb wPr80UaIOgNnfIbbLNuBMVOovz6cUxVHug== -----END CERTIFICATE-----Generated at Sun Jan 11 08:24:11 2026 by rpki-client