This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa File: 35a5077f-b693-3216-92ad-a349d6fd6377.roa (raw, json) Hash identifier: ztLxri77w7QA+YD1wfEt2uDNCffYB6rqv0/+8l7PV78= Subject key identifier: E8:84:D0:A6:1D:95:39:C4:2C:33:37:99:DE:E0:8E:99:BA:94:7E:71 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C4CAFC5BED27A09AFECA6C500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa Signing time: Thu 25 Dec 2025 02:30:14 +0000 ROA not before: Thu 25 Dec 2025 02:30:14 +0000 ROA not after: Wed 25 Mar 2026 01:30:14 +0000 asID: 198408 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:af:c5:be:d2:7a:09:af:ec:a6:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 25 02:30:14 2025 GMT Not After : Mar 25 01:30:14 2026 GMT Subject: CN=7f7c2f42-e555-4644-a90c-cb5e2d717882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:6e:80:33:6f:f0:a3:0b:78:6e:83:b0:c6: 6f:ba:d5:91:fd:17:2a:33:22:26:9f:da:13:1a:1c: 89:c6:1f:82:7d:24:12:8d:c5:82:96:55:30:d2:2d: f3:4a:c4:d2:a3:e2:59:a5:b7:01:5f:0f:83:cc:e3: c5:60:be:fc:4a:cc:98:f8:af:b3:62:d6:47:8f:63: ee:08:b1:bf:0a:85:f8:47:8c:ca:43:42:2a:3c:79: 47:b5:56:30:d7:c4:c4:f3:46:30:d3:24:e8:52:1a: 51:67:1e:06:05:cf:e7:ed:bd:f3:32:a4:78:7c:7c: ab:b5:d2:1c:ce:c7:b9:58:89:28:a9:49:c6:3d:ff: 9a:95:d0:d8:f4:f0:ec:12:2e:fc:82:2d:63:dd:3b: 68:73:fb:58:3b:dd:c4:7c:87:9e:cd:9c:88:d1:15: ee:ee:7f:94:dd:5a:c0:47:41:fe:85:ec:70:34:3f: ff:bb:6f:92:b0:a6:fe:8d:4c:e8:5b:1c:b5:01:05: 6c:f3:66:b9:70:75:57:04:26:09:c4:f6:1f:02:f2: c1:b2:64:21:f5:f8:50:92:22:10:b3:30:f0:b8:8d: 29:3b:bc:67:d9:ba:9d:c7:d1:32:67:38:e2:24:bc: 6c:04:6c:2b:ea:c0:76:c7:14:8b:dd:ff:aa:0c:86: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:84:D0:A6:1D:95:39:C4:2C:33:37:99:DE:E0:8E:99:BA:94:7E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cb:3a:3d:0e:fd:84:36:f6:27:d1:40:a3:51:17:7f:d1:be: 25:7c:d4:42:66:ad:14:b3:7d:c0:e1:60:c1:d3:24:3e:08:74: ea:53:c5:42:b8:9f:b3:77:5c:db:1a:89:2c:05:33:8e:a2:d8: 9a:db:f0:30:34:4d:ac:b4:59:d8:f5:7d:10:20:f9:18:56:88: 1c:10:b8:69:2c:68:d7:34:e3:a4:1b:71:65:5b:c9:3e:5f:c0: d7:6d:47:d6:62:2b:e5:9f:ba:3e:9c:36:8f:ab:6b:43:67:38: 65:7e:dd:51:f0:ed:18:1e:b0:42:60:b7:00:d1:a3:42:a6:f8: ec:06:3d:83:0e:09:fb:5c:c6:74:42:7c:87:d6:89:89:bd:ff: bb:d3:fc:4c:fd:b7:6a:ee:5f:35:7e:90:81:82:0e:7e:c9:2e: ad:f8:f9:83:9a:7f:92:5f:a5:67:7c:ee:5d:0a:6f:03:9b:e2: 13:33:7c:d4:60:86:8a:21:16:82:fb:0d:79:69:36:7f:64:61: 35:8d:c5:56:a6:c0:3b:a5:c0:4e:79:74:1a:db:34:bd:0c:7d: 3c:e4:1d:b8:73:c9:5e:ca:72:bd:ca:5a:76:12:75:b5:16:dd: a5:4d:20:ac:e6:32:09:bf:7c:7e:af:7e:5c:78:c6:d1:9e:3d: 0b:cb:e5:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExMr8W+0noJr+ymxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIyNTAyMzAxNFoXDTI2MDMyNTAxMzAxNFowLzEtMCsGA1UEAxMk N2Y3YzJmNDItZTU1NS00NjQ0LWE5MGMtY2I1ZTJkNzE3ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtBugDNv8KMLeG6DsMZvutWR/RcqMyImn9oT GhyJxh+CfSQSjcWCllUw0i3zSsTSo+JZpbcBXw+DzOPFYL78SsyY+K+zYtZHj2Pu CLG/CoX4R4zKQ0IqPHlHtVYw18TE80Yw0yToUhpRZx4GBc/n7b3zMqR4fHyrtdIc zse5WIkoqUnGPf+aldDY9PDsEi78gi1j3Ttoc/tYO93EfIeezZyI0RXu7n+U3VrA R0H+hexwND//u2+SsKb+jUzoWxy1AQVs82a5cHVXBCYJxPYfAvLBsmQh9fhQkiIQ szDwuI0pO7xn2bqdx9EyZzjiJLxsBGwr6sB2xxSL3f+qDIb/kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiE0KYdlTnELDM3md7gjpm6lH5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzVhNTA3N2YtYjY5My0z MjE2LTkyYWQtYTM0OWQ2ZmQ2Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDLOj0O/YQ29ifRQKNRF3/RviV81EJmrRSzfcDhYMHTJD4IdOpT xUK4n7N3XNsaiSwFM46i2Jrb8DA0Tay0Wdj1fRAg+RhWiBwQuGksaNc046QbcWVb yT5fwNdtR9ZiK+Wfuj6cNo+ra0NnOGV+3VHw7RgesEJgtwDRo0Km+OwGPYMOCftc xnRCfIfWiYm9/7vT/Ez9t2ruXzV+kIGCDn7JLq34+YOaf5JfpWd87l0KbwOb4hMz fNRghoohFoL7DXlpNn9kYTWNxVamwDulwE55dBrbNL0MfTzkHbhzyV7Kcr3KWnYS dbUW3aVNIKzmMgm/fH6vflx4xtGePQvL5co= -----END CERTIFICATE-----Generated at Wed Dec 31 08:44:32 2025 by rpki-client