This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa File: bd0731b8-b4cf-32f2-9183-9252be89bfab.roa (raw, json) Hash identifier: Sx4Xw/h/gpCHa2bwYbLT9sh/715diBDSFl4cw9j4sH4= Subject key identifier: C3:AF:37:E6:4C:AF:91:DF:BA:38:0C:47:0D:71:A7:A0:00:61:F8:C5 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584C45E1C87D4226842A705BBB40 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa Signing time: Mon 22 Dec 2025 16:00:20 +0000 ROA not before: Mon 22 Dec 2025 16:00:20 +0000 ROA not after: Sun 22 Mar 2026 15:00:20 +0000 asID: 16509 IP address blocks: 2604:29a0:f000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:e1:c8:7d:42:26:84:2a:70:5b:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Dec 22 16:00:20 2025 GMT Not After : Mar 22 15:00:20 2026 GMT Subject: CN=df69be3c-66af-4bce-8a0e-e23f5d0db0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:37:85:5f:17:89:4a:7c:19:64:59:7c:a4: 69:a8:f1:09:70:87:33:fb:ba:b6:04:c6:12:f8:36: aa:d5:9e:7b:8d:53:96:30:be:1c:ce:47:c5:ac:01: 61:55:02:56:b7:41:ed:2f:35:4e:26:95:d4:36:4c: f1:75:bc:34:a9:56:e1:58:3f:38:4b:04:78:40:09: 11:b1:69:af:b4:2d:46:8d:a4:d2:28:93:02:9f:90: 13:ce:d8:c5:1d:38:5f:cd:04:fa:98:6b:8b:ed:65: 53:3f:fa:5b:22:0c:84:28:90:2a:b7:ed:a5:ba:ce: 58:e1:e7:8e:1e:22:1e:e0:88:69:18:35:48:36:47: b6:44:8f:1f:87:36:63:83:02:91:1b:67:96:d9:52: 97:d7:63:cd:d2:1d:f9:ba:d8:62:8b:58:b1:f2:86: 76:ea:36:d1:6d:60:a8:9b:3f:e8:79:e1:8a:53:d0: 0e:95:0b:9a:9d:be:f2:2e:22:66:46:1f:85:5a:04: 5e:0e:2e:33:ca:fc:71:e1:bf:d0:5a:8e:5e:ee:10: a5:bb:aa:79:4a:3d:cf:c9:81:17:3f:41:a8:2f:22: 53:e7:32:1b:54:88:88:9c:21:48:32:7e:f1:42:28: 59:d7:ca:09:9b:be:ed:34:f9:7b:36:16:95:d5:af: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AF:37:E6:4C:AF:91:DF:BA:38:0C:47:0D:71:A7:A0:00:61:F8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv6: 2604:29a0:f000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c0:74:ef:c0:5b:23:27:3c:ba:94:fb:2b:1c:2b:2a:41:a3: df:4f:4a:8b:2a:78:e5:92:51:3b:55:69:99:34:db:ee:cb:ee: 39:37:13:87:ad:0c:c9:93:b9:2e:90:c4:5b:21:85:1a:94:66: 01:d0:b6:3b:8f:36:f0:16:a9:d5:25:28:35:54:70:8d:3b:87: 5c:7f:75:b1:06:9c:d6:b3:89:09:50:b4:a3:67:63:5d:4e:84: fe:d5:af:d7:69:1c:5e:17:b0:28:ba:89:32:86:9a:a7:c1:6c: cc:3f:f7:e9:6d:39:98:4a:2c:c7:c8:27:fd:82:2e:7d:95:3f: 9c:b3:08:9d:ba:8f:0e:c9:b9:55:33:8d:af:cc:c0:70:e8:98: ab:5b:d5:53:c0:86:6f:1d:3e:91:bf:67:35:51:6e:f9:26:d1: 3d:8e:91:e8:05:74:9a:31:ed:a6:77:b9:51:92:e0:c8:9b:48: 8d:e8:bc:e1:a7:2b:f5:1e:d4:eb:00:8c:75:89:4d:1e:d8:84: ea:03:a0:f9:64:12:1e:5b:3e:71:0a:24:cf:6f:92:38:f0:51: 4e:78:ff:88:52:d7:fa:ad:d0:51:df:56:3e:65:bb:2e:c8:a3: fc:4d:87:f7:e9:13:e5:6c:7f:7c:a4:89:4b:48:7e:e6:21:cd: fb:2d:c6:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExF4ch9QiaEKnBbu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTIyMjE2MDAyMFoXDTI2MDMyMjE1MDAyMFowLzEtMCsGA1UEAxMk ZGY2OWJlM2MtNjZhZi00YmNlLThhMGUtZTIzZjVkMGRiMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dQ3hV8XiUp8GWRZfKRpqPEJcIcz+7q2BMYS +Daq1Z57jVOWML4czkfFrAFhVQJWt0HtLzVOJpXUNkzxdbw0qVbhWD84SwR4QAkR sWmvtC1GjaTSKJMCn5ATztjFHThfzQT6mGuL7WVTP/pbIgyEKJAqt+2lus5Y4eeO HiIe4IhpGDVINke2RI8fhzZjgwKRG2eW2VKX12PN0h35uthii1ix8oZ26jbRbWCo mz/oeeGKU9AOlQuanb7yLiJmRh+FWgReDi4zyvxx4b/QWo5e7hClu6p5Sj3PyYEX P0GoLyJT5zIbVIiInCFIMn7xQihZ18oJm77tNPl7NhaV1a+X1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOvN+ZMr5HfujgMRw1xp6AAYfjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYmQwNzMxYjgtYjRjZi0z MmYyLTkxODMtOTI1MmJlODliZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgQpoPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvAdO/AWyMnPLqU+yscKypBo99PSosqeOWSUTtVaZk02+7L7jk3 E4etDMmTuS6QxFshhRqUZgHQtjuPNvAWqdUlKDVUcI07h1x/dbEGnNaziQlQtKNn Y11OhP7Vr9dpHF4XsCi6iTKGmqfBbMw/9+ltOZhKLMfIJ/2CLn2VP5yzCJ26jw7J uVUzja/MwHDomKtb1VPAhm8dPpG/ZzVRbvkm0T2OkegFdJox7aZ3uVGS4MibSI3o vOGnK/Ue1OsAjHWJTR7YhOoDoPlkEh5bPnEKJM9vkjjwUU54/4hS1/qt0FHfVj5l uy7Io/xNh/fpE+Vsf3ykiUtIfuYhzfstxko= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:19 2026 by rpki-client