This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa File: bebf59f2-bf90-3175-91dd-9fac1578d048.roa (raw, json) Hash identifier: gFIKeDY9Kro4bQhFLeSteZbKiRZ50f/Kf5VOKdEzy4o= Subject key identifier: C4:CE:54:FB:CA:F8:2A:72:99:E9:75:45:35:C6:67:B2:D4:E0:AB:35 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C42DC03CFE77D818DED71AB20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:03:cf:e7:7d:81:8d:ed:71:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=8b54594f-4456-4f9b-b3d7-6d173ab9ac24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4d:1f:85:63:44:63:84:46:17:35:e0:03:7b: f4:d6:ee:8a:c2:03:87:39:a6:53:ca:dd:c2:4b:2a: 8e:94:44:02:90:a3:2a:8d:67:26:8a:85:9c:be:a5: d4:a2:b1:b6:3e:26:ac:d9:69:35:62:fa:3f:db:96: 74:6d:ed:64:10:95:72:2e:1b:12:4a:2b:4d:31:6b: 12:cd:dc:40:71:78:88:e2:44:31:88:c8:5d:76:1d: 41:29:14:48:62:85:71:24:ea:73:5d:7a:69:4d:86: 4c:54:29:04:56:3b:31:b6:18:f1:ca:ae:e9:43:84: 4e:ed:19:61:41:f5:88:24:cd:13:69:e1:9f:78:2a: 7d:ff:08:26:3f:d9:c4:66:68:b9:1d:40:3c:8e:3a: 08:b7:35:ec:12:c0:73:67:27:ab:5b:aa:68:e4:cb: d1:5c:c5:f4:10:a4:0c:5d:1d:d8:65:d6:9e:a2:d4: a5:55:e0:60:5e:70:0e:24:f0:20:5d:4f:f1:92:cf: 08:9b:c6:89:e5:49:f3:84:10:75:ac:75:83:be:b5: c3:11:64:a3:6b:29:f1:e5:7b:fd:44:75:c4:04:4d: 78:e1:5c:6b:b8:86:b1:ba:66:eb:ff:3f:46:e5:58: 17:e3:ee:5e:99:56:d2:56:cd:7e:39:ba:75:3d:b3: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CE:54:FB:CA:F8:2A:72:99:E9:75:45:35:C6:67:B2:D4:E0:AB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f1:0b:2c:a9:92:8c:1b:f1:b4:39:0c:7f:88:bf:32:6e:d0: 03:d7:ef:5e:7e:5d:d9:fa:1f:24:4a:0a:ac:20:35:ab:4b:90: 45:88:e1:4a:4e:17:92:28:05:fe:0a:8d:81:e9:7b:0a:1f:9a: 1b:d9:ed:a3:78:dc:c3:02:32:18:61:e8:14:9d:4b:cd:06:50: 9f:63:8b:3e:17:d7:80:af:39:7c:11:5e:ea:6f:6d:f6:d5:5b: 3b:2c:19:a4:32:a4:10:36:6b:8c:dd:6b:3c:8b:d3:91:3c:0a: 22:11:8b:e2:41:31:40:0a:1f:0b:5c:aa:69:bc:2b:b0:f7:ef: 0d:4d:87:2f:d6:5c:74:15:06:41:03:d0:e7:0d:74:7f:ea:af: cc:25:cd:e8:c3:44:7c:e9:bf:81:95:ee:a2:ab:75:67:14:af: 04:a4:95:b3:6f:88:6c:db:c3:58:29:19:e9:fe:4e:ea:dd:f1: d0:5b:20:ef:a5:a4:44:0f:5c:b0:cd:4c:e7:96:fa:07:8f:2f: 6e:48:81:8f:6f:25:83:a5:9f:d4:29:83:8c:ee:af:80:83:c3: b8:1f:5f:c2:df:65:c4:e4:04:19:95:6c:f4:11:f8:d3:c9:5f: 04:ca:7e:86:80:da:ec:e7:2d:b4:b4:3c:b0:0d:ec:45:77:fc: 09:19:8a:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC3APP532Bje1xqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OGI1NDU5NGYtNDQ1Ni00ZjliLWIzZDctNmQxNzNhYjlhYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E0fhWNEY4RGFzXgA3v01u6KwgOHOaZTyt3C SyqOlEQCkKMqjWcmioWcvqXUorG2Pias2Wk1Yvo/25Z0be1kEJVyLhsSSitNMWsS zdxAcXiI4kQxiMhddh1BKRRIYoVxJOpzXXppTYZMVCkEVjsxthjxyq7pQ4RO7Rlh QfWIJM0TaeGfeCp9/wgmP9nEZmi5HUA8jjoItzXsEsBzZyerW6po5MvRXMX0EKQM XR3YZdaeotSlVeBgXnAOJPAgXU/xks8Im8aJ5UnzhBB1rHWDvrXDEWSjaynx5Xv9 RHXEBE144VxruIaxumbr/z9G5VgX4+5emVbSVs1+Obp1PbNnVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMTOVPvK+Cpymel1RTXGZ7LU4Ks1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmViZjU5ZjItYmY5MC0z MTc1LTkxZGQtOWZhYzE1NzhkMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiYgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATfELLKmSjBvxtDkMf4i/Mm7QA9fvXn5d2fofJEoKrCA1q0uQRYjh Sk4XkigF/gqNgel7Ch+aG9nto3jcwwIyGGHoFJ1LzQZQn2OLPhfXgK85fBFe6m9t 9tVbOywZpDKkEDZrjN1rPIvTkTwKIhGL4kExQAofC1yqabwrsPfvDU2HL9ZcdBUG QQPQ5w10f+qvzCXN6MNEfOm/gZXuoqt1ZxSvBKSVs2+IbNvDWCkZ6f5O6t3x0Fsg 76WkRA9csM1M55b6B48vbkiBj28lg6Wf1CmDjO6vgIPDuB9fwt9lxOQEGZVs9BH4 08lfBMp+hoDa7OcttLQ8sA3sRXf8CRmKvA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:58 2025 by rpki-client