This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf3dc6a9-8811-366a-ad30-4eeaf206b459.roa File: bf3dc6a9-8811-366a-ad30-4eeaf206b459.roa (raw, json) Hash identifier: YPQeFp6vKXarNhHFg7YGHRr7ozMxGdDkT+S1T7QD1FI= Subject key identifier: C6:9E:C6:2F:30:45:CE:FD:BE:51:96:D2:39:09:39:77:B4:76:51:47 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C26F0F151E4CCE5062AD2AFC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf3dc6a9-8811-366a-ad30-4eeaf206b459.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e88:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:f1:51:e4:cc:e5:06:2a:d2:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=475edfac-62a3-4126-a531-ac4eabbc74b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:81:7f:aa:60:fc:37:51:ce:23:d4:d6:4f: 4a:8c:b2:41:c6:fe:b5:43:b9:a6:e0:70:fd:60:0c: 5b:f8:46:87:6a:4e:fa:3f:eb:38:ad:fb:05:ee:7e: b0:30:ac:8d:c8:15:b6:df:9d:30:82:4e:26:e7:4e: f7:9e:2a:56:ed:18:1d:c3:9b:fa:98:9c:21:34:3d: 2e:58:71:ee:86:37:a1:b2:e4:2b:0e:ff:62:98:81: 86:94:29:d8:2e:57:87:da:ba:93:75:91:1f:fa:0c: 6c:dd:0b:02:71:8d:88:11:ba:c3:a2:14:24:db:32: 39:23:71:cc:1e:ee:0a:79:26:5c:1a:40:dc:38:9a: 99:8c:64:73:e0:79:6c:a6:a7:67:08:5c:cf:d0:f7: ef:b3:7e:0c:2e:d9:51:5e:c2:87:64:b3:37:78:6e: e6:52:ce:25:1c:a1:36:88:99:3e:b2:16:47:5f:e2: 75:d3:60:ba:90:5e:9d:bd:18:95:35:ed:d0:ec:97: c3:d5:ef:68:df:18:82:b6:45:97:de:7c:c0:b9:3e: 6f:14:af:e6:02:8e:27:e8:70:86:f7:61:4e:f9:53: 12:57:d0:cd:3c:54:ac:c2:81:e0:ee:c0:bf:2b:ed: 54:74:17:7f:52:c4:eb:17:a7:05:33:8d:b9:d9:c7: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:C6:2F:30:45:CE:FD:BE:51:96:D2:39:09:39:77:B4:76:51:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf3dc6a9-8811-366a-ad30-4eeaf206b459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8a:df:f5:ce:40:19:83:36:66:9a:55:07:af:23:05:35:7c: a0:bd:fc:f6:9d:d0:82:55:9f:9b:7d:08:96:51:1f:22:bc:bd: 0d:82:45:aa:c5:ac:00:d4:9e:a1:91:98:47:3e:ab:88:4b:86: 04:3e:7b:7d:8d:42:5b:95:d7:51:f4:b7:a4:de:89:2d:fe:32: 8e:e2:e4:2c:5b:2d:e7:ee:23:90:59:99:15:7b:ee:af:62:a8: 97:06:d3:14:e1:aa:ff:81:99:0f:3f:03:c2:cf:18:c6:9d:f6: fc:c3:56:b2:fe:d0:17:88:9d:29:f9:90:49:10:81:d3:2b:30: e2:7c:eb:42:2e:b6:f4:83:4b:f4:97:7f:89:91:cd:fb:37:b1: 08:35:5b:10:a6:82:7d:e7:2d:7e:0f:6d:64:4d:1e:78:f2:aa: 09:b2:a3:09:84:b2:80:fa:58:8c:24:a3:f9:50:b6:f1:a2:ff: 88:e8:6b:0d:62:6a:7e:77:58:29:c8:68:0e:60:44:a7:a5:b1: ae:f7:db:8a:44:1f:36:46:60:ee:ca:b7:0b:8f:33:f8:1f:c9: 0b:ad:7d:aa:22:2a:d6:31:f7:08:dc:24:a6:84:f7:80:45:c8: 8d:38:a9:84:f3:80:dd:d6:f8:43:85:39:22:25:cf:f3:2e:56: f7:5e:94:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwm8PFR5MzlBirSr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk NDc1ZWRmYWMtNjJhMy00MTI2LWE1MzEtYWM0ZWFiYmM3NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxSBf6pg/DdRziPU1k9KjLJBxv61Q7mm4HD9 YAxb+EaHak76P+s4rfsF7n6wMKyNyBW2350wgk4m5073nipW7Rgdw5v6mJwhND0u WHHuhjehsuQrDv9imIGGlCnYLleH2rqTdZEf+gxs3QsCcY2IEbrDohQk2zI5I3HM Hu4KeSZcGkDcOJqZjGRz4HlspqdnCFzP0Pfvs34MLtlRXsKHZLM3eG7mUs4lHKE2 iJk+shZHX+J102C6kF6dvRiVNe3Q7JfD1e9o3xiCtkWX3nzAuT5vFK/mAo4n6HCG 92FO+VMSV9DNPFSswoHg7sC/K+1UdBd/UsTrF6cFM4252ce+awIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMaexi8wRc79vlGW0jkJOXe0dlFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYzZGM2YTktODgxMS0z NjZhLWFkMzAtNGVlYWYyMDZiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXIrf9c5AGYM2ZppVB68jBTV8oL389p3QglWfm30IllEfIry9DYJF qsWsANSeoZGYRz6riEuGBD57fY1CW5XXUfS3pN6JLf4yjuLkLFst5+4jkFmZFXvu r2KolwbTFOGq/4GZDz8Dws8Yxp32/MNWsv7QF4idKfmQSRCB0ysw4nzrQi629INL 9Jd/iZHN+zexCDVbEKaCfectfg9tZE0eePKqCbKjCYSygPpYjCSj+VC28aL/iOhr DWJqfndYKchoDmBEp6WxrvfbikQfNkZg7sq3C48z+B/JC619qiIq1jH3CNwkpoT3 gEXIjTiphPOA3db4Q4U5IiXP8y5W916UfA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:33:03 2025 by rpki-client