This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b8fb91-0ec8-34f0-8ee9-76849371e1e3.roa File: 28b8fb91-0ec8-34f0-8ee9-76849371e1e3.roa (raw, json) Hash identifier: CF2Xkmoj9L0Tv9qzbcJWr17lDbdQSVHsZupaE/Sqp+M= Subject key identifier: 02:99:6F:94:62:54:FF:F4:A5:68:00:44:9F:9B:4E:C3:9A:53:F8:1E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C4CAFD760E5186A153A9A50C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b8fb91-0ec8-34f0-8ee9-76849371e1e3.roa Signing time: Thu 25 Dec 2025 02:30:22 +0000 ROA not before: Thu 25 Dec 2025 02:30:22 +0000 ROA not after: Wed 25 Mar 2026 01:30:22 +0000 asID: 50607 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:af:d7:60:e5:18:6a:15:3a:9a:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 25 02:30:22 2025 GMT Not After : Mar 25 01:30:22 2026 GMT Subject: CN=f3e783ba-2c76-4ba6-aeb1-23bc1294b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:20:e9:2a:44:1e:bd:6a:6a:c3:9c:4a:65: 9b:24:9a:9c:6c:8f:6d:96:a2:76:73:ee:e3:ed:51: 68:3b:4f:2b:57:fb:d5:2d:40:a7:3b:74:c9:08:cd: 58:8f:0b:6b:23:28:6b:57:ed:b1:47:96:6d:8f:88: 2c:8a:61:57:4d:da:c3:48:89:c8:a2:d7:69:8e:7f: 6f:db:c3:52:ec:9f:8b:02:5e:98:24:0b:a7:b9:26: 32:96:da:21:f6:bc:58:ad:08:d3:e2:28:50:13:f9: fc:9a:25:e5:2f:5e:03:73:3f:33:19:d8:88:13:04: 2b:ff:b0:0d:98:a9:f2:88:0f:c9:ca:0b:46:e6:43: 4c:e4:7b:fd:b3:aa:36:4e:f0:ec:93:fa:cc:a8:54: cd:00:67:bc:9d:62:e2:2d:3f:a5:b5:61:18:96:4c: 11:fa:a3:60:ea:8d:4b:99:46:6e:e3:d8:1e:4e:2f: fe:80:dc:f6:17:a9:da:3e:bf:45:0d:5f:d2:c4:04: b9:97:ca:ef:af:71:b2:e7:24:ac:22:49:be:03:90: 1e:19:ff:e2:cb:e8:18:74:50:85:70:cf:df:6d:12: 06:1a:77:d6:14:d1:86:82:43:3f:82:bb:49:26:67: 39:19:68:16:6c:12:82:f0:38:a3:88:51:eb:4c:2b: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:99:6F:94:62:54:FF:F4:A5:68:00:44:9F:9B:4E:C3:9A:53:F8:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b8fb91-0ec8-34f0-8ee9-76849371e1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:68:7e:53:0b:bf:75:6f:2e:b9:d8:b0:e3:a3:c3:e2:41:19: f3:73:ca:3a:45:1b:a5:ae:0d:80:cf:77:90:52:2f:2a:f2:a6: b9:7a:17:a4:c4:60:4c:ee:cc:30:46:8b:ed:b1:79:12:f5:21: 5c:bb:30:49:b4:d4:22:84:09:be:f0:98:8c:38:27:f2:76:8e: 38:8e:77:00:e6:f2:1f:b7:47:13:30:e4:73:89:10:6e:47:63: cd:b4:2e:d5:f6:41:0d:49:ba:7d:1a:75:1e:a8:82:d6:a0:22: 4e:db:50:3c:a1:22:08:59:06:4b:3f:34:8c:be:10:b8:a9:8d: 02:f1:52:ab:81:26:2e:92:6b:18:9f:a8:76:96:41:62:09:0b: 99:6c:6f:e7:76:a7:ab:c2:a0:8e:95:62:e6:cb:0f:f1:f0:16: 5f:5f:c3:16:ce:51:53:c8:9c:c3:09:fd:d5:f7:a8:60:68:aa: a1:19:63:57:a1:28:a8:a6:54:15:ae:e6:95:87:3f:01:1d:0d: 96:ba:d1:e0:cd:f2:bf:32:1b:48:ab:cb:9d:f4:5b:08:b8:e9: bb:ab:61:77:d6:c7:ad:09:7d:84:63:ba:9a:d5:d8:bf:a8:b8: c7:24:2d:0a:df:f5:70:7f:af:ab:fd:1c:1f:03:52:c5:2b:65: 47:9f:4b:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExMr9dg5RhqFTqaUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIyNTAyMzAyMloXDTI2MDMyNTAxMzAyMlowLzEtMCsGA1UEAxMk ZjNlNzgzYmEtMmM3Ni00YmE2LWFlYjEtMjNiYzEyOTRiNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Ag6SpEHr1qasOcSmWbJJqcbI9tlqJ2c+7j 7VFoO08rV/vVLUCnO3TJCM1YjwtrIyhrV+2xR5Ztj4gsimFXTdrDSInIotdpjn9v 28NS7J+LAl6YJAunuSYyltoh9rxYrQjT4ihQE/n8miXlL14Dcz8zGdiIEwQr/7AN mKnyiA/JygtG5kNM5Hv9s6o2TvDsk/rMqFTNAGe8nWLiLT+ltWEYlkwR+qNg6o1L mUZu49geTi/+gNz2F6naPr9FDV/SxAS5l8rvr3Gy5ySsIkm+A5AeGf/iy+gYdFCF cM/fbRIGGnfWFNGGgkM/grtJJmc5GWgWbBKC8DijiFHrTCtj8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKZb5RiVP/0pWgARJ+bTsOaU/geMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjhiOGZiOTEtMGVjOC0z NGYwLThlZTktNzY4NDkzNzFlMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG1oflMLv3VvLrnYsOOjw+JBGfNzyjpFG6WuDYDPd5BSLyryprl6 F6TEYEzuzDBGi+2xeRL1IVy7MEm01CKECb7wmIw4J/J2jjiOdwDm8h+3RxMw5HOJ EG5HY820LtX2QQ1Jun0adR6ogtagIk7bUDyhIghZBks/NIy+ELipjQLxUquBJi6S axifqHaWQWIJC5lsb+d2p6vCoI6VYubLD/HwFl9fwxbOUVPInMMJ/dX3qGBoqqEZ Y1ehKKimVBWu5pWHPwEdDZa60eDN8r8yG0iry530Wwi46burYXfWx60JfYRjuprV 2L+ouMckLQrf9XB/r6v9HB8DUsUrZUefS54= -----END CERTIFICATE-----Generated at Wed Dec 31 08:44:33 2025 by rpki-client