This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa File: bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa (raw, json) Hash identifier: OQIA48NKIFGqI+pq8goboZ3xH+qiKXq7LRMTydpL6Ek= Subject key identifier: 39:75:D3:C9:74:D4:40:22:14:2F:05:94:E6:4C:09:BE:63:17:93:73 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C37B0F886FE5573361D573B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e88:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b0:f8:86:fe:55:73:36:1d:57:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=e881f4d4-e775-4565-a8f2-707bc216277d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:f5:3f:fc:d3:6c:90:dd:e6:c2:a6:47:a0: f3:98:d5:1d:fb:ab:0b:73:f1:2b:4f:57:e2:ee:1c: 9b:48:1f:0a:07:24:be:fe:da:74:8b:8e:fd:a1:a5: ea:d0:3b:84:22:c7:ba:ce:62:5a:6e:5d:dc:b6:ce: 12:e5:9f:96:5c:b9:e1:34:a1:fb:58:02:e9:75:32: b9:98:28:84:87:7b:21:7d:d8:94:dc:22:ab:86:7f: fb:09:c6:23:e0:62:f6:e2:bf:e0:e6:44:6e:38:f9: f6:af:47:2a:e3:79:9c:21:44:72:b4:f6:5c:5e:37: a9:a9:f7:df:03:18:9f:b3:bb:a8:b3:c0:19:83:9c: 96:0c:d5:fd:26:6c:b7:77:61:a9:67:24:05:da:c8: 77:9c:98:7d:19:f7:e8:a8:51:e8:65:c1:49:57:5e: eb:6f:56:83:d1:71:2f:13:ec:29:d4:98:1e:d9:e0: 87:b9:12:5e:e1:a1:3e:ea:95:25:3a:5f:1f:4d:b5: 12:1e:56:b2:8a:a4:5f:70:19:0a:db:ee:82:ac:66: de:ff:9b:56:ed:82:0c:ff:b4:18:7a:81:0e:ad:5a: 9f:59:dd:72:f9:82:cf:bf:57:c4:75:f7:5b:08:47: cf:97:3b:9a:58:a7:ba:9c:1d:8d:2e:90:d5:c2:c7: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:D3:C9:74:D4:40:22:14:2F:05:94:E6:4C:09:BE:63:17:93:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0b:96:c1:c0:9c:de:21:c2:96:f0:8f:5b:68:fc:d7:08:44: aa:d7:c7:b7:2d:69:1b:20:06:fd:9e:eb:b0:c6:dc:11:8f:f7: 1e:80:d0:e6:70:b3:b9:56:c7:0e:83:f9:9c:20:33:63:e6:3e: b2:35:b4:6e:4f:b5:58:91:4f:e3:82:2b:89:6d:39:e9:22:93: d2:d3:e2:b8:b5:ef:6e:99:6a:c9:75:10:88:1f:84:e7:61:74: 71:7b:41:be:8a:2c:a6:49:24:c0:3c:a6:45:df:ce:54:cf:04: 40:c6:32:fd:31:d1:88:4b:50:ae:34:64:48:ec:80:64:09:6c: e2:2b:d0:4d:b0:6b:00:60:dc:14:c2:75:58:dc:03:0b:e0:cd: 4d:23:bb:fe:af:57:07:8c:b5:f7:32:4c:31:a8:c6:4a:e0:83: 11:a7:0f:1d:a4:88:b6:a4:57:f3:1c:e5:e3:60:7b:e6:1b:9a: 96:1a:de:80:09:7f:8b:35:68:a5:0e:12:b3:8d:6b:79:3b:4d: 3c:d8:f1:7b:f6:b3:b7:92:c4:d9:cf:6d:c2:d2:92:ad:06:2b: 75:15:6d:c4:1e:75:26:75:b4:bd:cf:2c:3c:b3:f5:41:d2:27: 03:78:79:d1:d7:8f:9b:62:a6:b6:5f:a5:65:bd:97:dc:2a:00: 7b:d3:17:63 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEw3sPiG/lVzNh1XO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk ZTg4MWY0ZDQtZTc3NS00NTY1LWE4ZjItNzA3YmMyMTYyNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlej1P/zTbJDd5sKmR6DzmNUd+6sLc/ErT1fi 7hybSB8KByS+/tp0i479oaXq0DuEIse6zmJabl3cts4S5Z+WXLnhNKH7WALpdTK5 mCiEh3shfdiU3CKrhn/7CcYj4GL24r/g5kRuOPn2r0cq43mcIURytPZcXjepqfff Axifs7uos8AZg5yWDNX9Jmy3d2GpZyQF2sh3nJh9GffoqFHoZcFJV17rb1aD0XEv E+wp1Jge2eCHuRJe4aE+6pUlOl8fTbUSHlayiqRfcBkK2+6CrGbe/5tW7YIM/7QY eoEOrVqfWd1y+YLPv1fEdfdbCEfPlzuaWKe6nB2NLpDVwsdKbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDl108l01EAiFC8FlOZMCb5jF5NzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2MDBmZDYtOTgxYi0z YmFhLWEwYWUtMzBmMjcxYzZiYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdguWwcCc3iHClvCPW2j81whEqtfHty1pGyAG/Z7rsMbcEY/3HoDQ 5nCzuVbHDoP5nCAzY+Y+sjW0bk+1WJFP44IriW056SKT0tPiuLXvbplqyXUQiB+E 52F0cXtBvoospkkkwDymRd/OVM8EQMYy/THRiEtQrjRkSOyAZAls4ivQTbBrAGDc FMJ1WNwDC+DNTSO7/q9XB4y19zJMMajGSuCDEacPHaSItqRX8xzl42B75hualhre gAl/izVopQ4Ss41reTtNPNjxe/azt5LE2c9twtKSrQYrdRVtxB51JnW0vc8sPLP1 QdInA3h50dePm2Kmtl+lZb2X3CoAe9MXYw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:44:13 2025 by rpki-client