This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa File: be5d2c8a-54d2-398d-a73b-78031c15b211.roa (raw, json) Hash identifier: kY2Xm22B9PwlT581BIPeEBlJgZvHh86JUi/jdgPobOY= Subject key identifier: 57:CD:8D:51:AE:BB:BC:6C:0E:FD:D4:BA:01:5A:E0:53:22:65:4A:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B1008FB2270D59BD55DF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8b:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:00:8f:b2:27:0d:59:bd:55:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=19f13109-5486-4ed3-a10b-363742bec725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4d:96:79:a3:b0:cb:50:4e:a1:26:6e:81:d6: bb:f8:c7:ab:5a:c3:4e:71:83:e6:66:de:ae:f2:05: 6f:cc:d6:58:78:ce:0b:c3:75:03:9a:cb:70:00:4a: f4:19:38:7c:33:d5:7f:47:58:69:b3:f4:39:40:dc: 15:3a:60:db:43:a8:9b:85:bb:de:f0:c7:ca:6c:77: b9:03:a6:e6:52:fc:4d:8c:23:7d:49:59:30:e9:00: 1a:d4:82:37:7f:11:3e:6e:84:9c:be:38:ae:bc:e0: 01:d0:70:ce:19:fa:bc:69:fd:0a:84:f1:ce:63:c6: 33:27:60:1a:ed:b1:5f:80:3c:a6:43:7b:8d:f7:98: 7a:7d:29:0b:72:47:47:be:9a:48:18:72:0b:23:ee: d4:10:65:1f:d8:16:7d:9b:fa:3b:24:38:0f:16:d5: d6:31:08:2d:44:d2:96:c6:dd:94:f8:32:ce:f2:4e: da:49:8c:0b:2d:1c:45:34:76:d1:cb:39:43:e5:34: 3f:ab:f1:c2:64:6f:38:d1:24:54:16:42:1c:ff:4e: af:38:00:24:40:da:e2:10:f1:cc:df:0a:d3:ec:2d: 51:c5:39:9f:03:51:cb:48:df:57:ce:13:46:1f:b9: 4f:7d:05:5a:a0:6d:6d:f5:30:cb:24:45:cc:1b:d1: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CD:8D:51:AE:BB:BC:6C:0E:FD:D4:BA:01:5A:E0:53:22:65:4A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:89:80:52:88:28:b9:6e:97:2c:4d:b1:9f:48:7c:e0:c1:19: 46:86:59:56:4e:66:bb:a3:ba:7e:17:36:0f:e7:8a:86:07:4e: e1:88:73:7d:9d:e4:5e:d1:87:8a:e6:90:e3:95:63:74:12:83: 68:e4:80:28:b8:3e:db:1a:67:ea:9b:64:14:fe:4d:ef:71:38: 28:53:5f:b2:63:71:74:ba:c5:be:1f:58:6c:63:cb:4c:41:6c: 75:4d:5c:71:8a:f6:e8:d2:d6:16:1b:6a:20:3b:e2:88:44:88: 45:90:98:ce:3b:71:8a:a5:2f:29:77:77:85:0d:26:2d:d5:7d: b3:5e:e7:f6:8b:b3:9b:c7:12:9d:6f:23:98:4b:7c:84:07:b2: a9:d1:fd:f6:b8:ff:e1:6e:14:4c:88:81:e7:88:c5:7b:b7:ce: 2f:70:5d:d8:e9:05:83:00:87:2f:98:36:6e:2e:0e:f0:c5:79: b8:4c:40:ad:2d:4e:72:95:53:75:ab:9e:e4:37:c6:fc:7d:bb: a0:d4:6d:4a:6b:b6:08:19:ca:5e:89:9d:30:e4:da:c4:10:e6: e0:ff:0d:15:f5:64:0d:8e:66:eb:30:ff:8e:5b:ff:0e:32:69: 9f:62:0b:eb:05:09:e9:3c:e8:f0:2d:9f:24:e3:ce:39:2d:da: 35:97:8a:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sQCPsicNWb1V3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MTlmMTMxMDktNTQ4Ni00ZWQzLWExMGItMzYzNzQyYmVjNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA302WeaOwy1BOoSZugda7+MerWsNOcYPmZt6u 8gVvzNZYeM4Lw3UDmstwAEr0GTh8M9V/R1hps/Q5QNwVOmDbQ6ibhbve8MfKbHe5 A6bmUvxNjCN9SVkw6QAa1II3fxE+boScvjiuvOAB0HDOGfq8af0KhPHOY8YzJ2Aa 7bFfgDymQ3uN95h6fSkLckdHvppIGHILI+7UEGUf2BZ9m/o7JDgPFtXWMQgtRNKW xt2U+DLO8k7aSYwLLRxFNHbRyzlD5TQ/q/HCZG840SRUFkIc/06vOAAkQNriEPHM 3wrT7C1RxTmfA1HLSN9XzhNGH7lPfQVaoG1t9TDLJEXMG9F+6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFfNjVGuu7xsDv3UugFa4FMiZUrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU1ZDJjOGEtNTRkMi0z OThkLWE3M2ItNzgwMzFjMTViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAYmAUogouW6XLE2xn0h84MEZRoZZVk5mu6O6fhc2D+eKhgdO4Yhz fZ3kXtGHiuaQ45VjdBKDaOSAKLg+2xpn6ptkFP5N73E4KFNfsmNxdLrFvh9YbGPL TEFsdU1ccYr26NLWFhtqIDviiESIRZCYzjtxiqUvKXd3hQ0mLdV9s17n9ouzm8cS nW8jmEt8hAeyqdH99rj/4W4UTIiB54jFe7fOL3Bd2OkFgwCHL5g2bi4O8MV5uExA rS1OcpVTdaue5DfG/H27oNRtSmu2CBnKXomdMOTaxBDm4P8NFfVkDY5m6zD/jlv/ DjJpn2IL6wUJ6Tzo8C2fJOPOOS3aNZeKoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:33:16 2025 by rpki-client