This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa File: bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa (raw, json) Hash identifier: 1FPjuHj0Y9LZuldnZs+uLDLIrQABThlOmDLNZ38UGZc= Subject key identifier: FE:ED:2D:F5:5E:E7:84:92:CC:CE:F8:43:A8:1A:A9:72:E3:1E:A7:CA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B124D07258BE4050D59EC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:24:d0:72:58:be:40:50:d5:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=0449cd95-f81b-4d2e-a0ca-13ed1027e155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:cb:db:23:22:42:ab:69:3a:8e:a9:62:83: 76:57:94:14:2d:de:ab:ec:35:d8:22:02:5e:3e:1d: 87:88:2e:2b:ce:3e:59:6b:63:10:e2:d5:b3:ac:62: b1:c1:ec:92:e9:2a:4e:0d:7a:51:90:7a:5a:21:72: 93:97:40:22:65:4d:5b:7c:fe:4f:9b:13:13:ca:ac: 12:97:c2:82:83:dd:97:61:80:a4:92:1f:2d:e4:a0: 1d:20:b7:27:e7:aa:7e:9f:6e:22:e9:40:ad:31:2d: eb:45:09:4e:5a:27:97:e3:8f:58:45:0f:db:e7:4a: 58:3d:af:ce:22:07:cc:cb:0d:f3:b0:2f:ae:40:a6: 14:2b:51:8d:8a:9a:24:80:51:ec:b0:d3:0b:c8:1d: d2:fa:bf:8c:3a:d7:45:fa:4d:55:02:0a:c4:68:44: eb:1d:35:3f:89:54:80:3e:df:ca:cd:5b:50:ab:95: f3:0f:45:02:d1:e0:1e:b8:4d:e0:c2:da:e8:17:ad: 09:ff:26:3e:86:0f:fb:c8:9b:7a:3c:db:b6:aa:a4: cc:3f:52:e7:29:cb:70:8f:06:0c:56:c0:a6:d7:15: f5:71:0b:da:43:fc:3c:1e:5b:46:70:34:99:9e:13: d1:7f:93:50:a4:eb:0d:51:f1:74:0c:cb:38:98:7e: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:ED:2D:F5:5E:E7:84:92:CC:CE:F8:43:A8:1A:A9:72:E3:1E:A7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5e:78:ad:d7:1c:6b:51:77:5c:23:1e:e5:64:52:c0:38:b8: c4:bf:83:1f:c2:9d:04:08:56:3f:08:5b:dd:74:58:e9:24:55: 83:01:d3:b1:19:34:e8:ec:85:2c:72:7e:a4:21:dc:cb:7f:28: 62:7c:4e:8a:33:5c:b7:00:dd:a7:9b:85:58:c5:94:68:4e:d1: a9:51:7f:af:ab:57:0b:48:f9:e8:f9:34:20:c8:ae:4b:63:95: ec:47:e1:5f:3b:85:61:99:d5:33:ae:89:7c:d8:4f:49:67:aa: 7d:2a:c3:65:d2:f4:7a:67:6d:81:92:3f:67:18:16:5a:46:ef: c3:2e:13:9c:44:0b:40:ed:49:1f:4f:e3:10:9b:4e:82:ca:8e: 0d:16:0a:e0:67:e6:ee:28:61:57:b9:e4:82:85:33:bf:0d:65: a3:7c:e7:e8:c5:b9:cb:0e:47:59:9b:07:85:d0:eb:b6:72:05: b8:87:c9:f7:41:29:25:90:a7:2c:51:83:64:a1:5f:24:d8:70: 9d:f5:82:94:3d:70:7e:c9:27:4c:a0:c3:86:8e:65:57:30:3c: 32:ce:87:48:da:59:b6:34:20:3e:15:74:9b:87:dd:57:fc:bb: 34:da:bb:6a:b6:17:9d:85:62:97:c6:8c:33:29:f3:e6:25:62: d9:2a:28:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sSTQcli+QFDVnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MDQ0OWNkOTUtZjgxYi00ZDJlLWEwY2EtMTNlZDEwMjdlMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSrL2yMiQqtpOo6pYoN2V5QULd6r7DXYIgJe Ph2HiC4rzj5Za2MQ4tWzrGKxweyS6SpODXpRkHpaIXKTl0AiZU1bfP5PmxMTyqwS l8KCg92XYYCkkh8t5KAdILcn56p+n24i6UCtMS3rRQlOWieX449YRQ/b50pYPa/O IgfMyw3zsC+uQKYUK1GNipokgFHssNMLyB3S+r+MOtdF+k1VAgrEaETrHTU/iVSA Pt/KzVtQq5XzD0UC0eAeuE3gwtroF60J/yY+hg/7yJt6PNu2qqTMP1LnKctwjwYM VsCm1xX1cQvaQ/w8HltGcDSZnhPRf5NQpOsNUfF0DMs4mH6IswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP7tLfVe54SSzM74Q6gaqXLjHqfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY4OWRkNmEtODhjYi0z ZGY0LWJhMDEtNzJmYjEwMjEwYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiHAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXV54rdcca1F3XCMe5WRSwDi4xL+DH8KdBAhWPwhb3XRY6SRVgwHT sRk06OyFLHJ+pCHcy38oYnxOijNctwDdp5uFWMWUaE7RqVF/r6tXC0j56Pk0IMiu S2OV7EfhXzuFYZnVM66JfNhPSWeqfSrDZdL0emdtgZI/ZxgWWkbvwy4TnEQLQO1J H0/jEJtOgsqODRYK4Gfm7ihhV7nkgoUzvw1lo3zn6MW5yw5HWZsHhdDrtnIFuIfJ 90EpJZCnLFGDZKFfJNhwnfWClD1wfsknTKDDho5lVzA8Ms6HSNpZtjQgPhV0m4fd V/y7NNq7arYXnYVil8aMMynz5iVi2Soo/w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:54 2025 by rpki-client