This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa File: 8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa (raw, json) Hash identifier: Pcl7LExcjAZyi+pvg+DioFF0P8hGaoOb58BDuriG4i8= Subject key identifier: E5:81:1E:2B:FC:33:BF:2E:EA:9F:1E:9E:92:8D:28:57:1B:7D:D7:1D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C215BBFD0FE7FF2D1946CFF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 270118 IP address blocks: 2001:470:4db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:bf:d0:fe:7f:f2:d1:94:6c:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=e3cd5b78-a462-4e3c-9c4e-9f11851b16b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:1c:22:47:df:f3:f2:25:ea:3a:60:ba:97: d7:d1:c6:47:07:53:bb:75:20:13:cc:50:ce:5b:65: 09:d9:b8:c5:91:d1:1a:8a:ad:56:e0:53:cc:0d:12: e0:11:20:d7:cf:d4:62:d9:52:34:1f:d9:f0:ea:86: 2a:b4:67:7d:df:e4:3f:a0:39:2d:eb:cb:bf:fb:84: 0f:14:68:9b:2c:2c:84:53:73:41:de:f7:8a:94:0b: 1d:bc:ad:3e:b7:16:74:fe:7c:e7:a8:ce:7e:27:99: 75:25:3e:20:f8:56:78:f5:23:20:07:f4:46:1f:28: 94:e6:9e:c4:11:ef:c2:82:c1:b3:ab:14:b5:5f:fa: 37:23:6a:08:dd:92:54:e0:8f:06:13:4f:c3:e8:da: 69:84:3d:82:21:37:53:20:5e:4c:96:65:a6:9f:a5: fc:9e:82:3a:85:16:7f:c9:45:1e:2d:c3:19:07:0e: ce:56:a9:fe:db:13:b0:7f:11:87:5e:6f:5e:d8:d5: e1:5b:ba:3c:9c:05:cd:2f:11:8f:c8:31:f8:de:ab: d0:cf:41:e5:a4:d0:34:6e:e3:83:d2:f5:d2:58:24: 54:30:b8:0d:43:05:21:79:d0:0d:d6:2e:d8:ad:48: 90:3f:df:89:26:bc:db:4b:b1:fb:fd:68:5b:48:d1: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:1E:2B:FC:33:BF:2E:EA:9F:1E:9E:92:8D:28:57:1B:7D:D7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:48:ef:3e:c5:fd:57:34:24:67:57:bb:1e:24:28:b0:f4:77: 2e:17:59:4f:49:db:13:94:f5:4a:d6:98:96:fa:23:53:b4:ac: da:be:2f:04:f7:f0:35:e0:dc:fa:0c:a1:7c:e3:8c:70:f4:8c: cf:05:40:fe:24:71:52:2c:c1:3b:cb:a5:2c:f4:c5:0a:7e:52: c0:93:e1:b0:ba:5a:75:17:e5:32:b3:f2:96:b0:eb:d3:89:15: 70:52:f1:a4:c6:08:94:bd:4f:46:55:28:98:fb:8e:60:f1:40: cc:8c:47:09:c0:5b:26:f4:39:1a:00:d7:01:0c:45:4c:99:24: 86:04:c0:e5:da:03:2d:a5:c3:68:a8:fd:ec:81:42:4c:60:d0: 2b:03:b3:fd:de:04:86:8f:48:ea:ae:64:44:e2:36:b3:09:bb: fa:af:bf:71:56:c9:49:30:47:fe:c5:8d:e2:8a:1a:27:44:16: fb:ff:67:ac:59:c2:b5:5f:80:87:a0:c5:8c:05:4a:3a:04:71: f0:d4:66:4c:3e:22:e2:76:b3:22:c0:ea:fd:0b:a6:c3:a1:63: 97:e0:f6:6c:43:14:d8:95:fd:fd:6b:83:40:66:52:de:14:f8: df:8e:28:a6:9e:35:87:c1:7c:c0:b5:e4:7d:0e:ce:8a:f3:4d: b9:75:e6:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwhW7/Q/n/y0ZRs/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk ZTNjZDViNzgtYTQ2Mi00ZTNjLTljNGUtOWYxMTg1MWIxNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTocIkff8/Il6jpgupfX0cZHB1O7dSATzFDO W2UJ2bjFkdEaiq1W4FPMDRLgESDXz9Ri2VI0H9nw6oYqtGd93+Q/oDkt68u/+4QP FGibLCyEU3NB3veKlAsdvK0+txZ0/nznqM5+J5l1JT4g+FZ49SMgB/RGHyiU5p7E Ee/CgsGzqxS1X/o3I2oI3ZJU4I8GE0/D6NpphD2CITdTIF5MlmWmn6X8noI6hRZ/ yUUeLcMZBw7OVqn+2xOwfxGHXm9e2NXhW7o8nAXNLxGPyDH43qvQz0HlpNA0buOD 0vXSWCRUMLgNQwUhedAN1i7YrUiQP9+JJrzbS7H7/WhbSNFIGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOWBHiv8M78u6p8enpKNKFcbfdcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGNkZmU4MjAtOWMxOC0z Y2EyLWI4OTctY2U3ZDEyM2Q3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMRI7z7F/Vc0JGdXux4kKLD0dy4XWU9J2xOU9UrWmJb6I1O0rNq+ LwT38DXg3PoMoXzjjHD0jM8FQP4kcVIswTvLpSz0xQp+UsCT4bC6WnUX5TKz8paw 69OJFXBS8aTGCJS9T0ZVKJj7jmDxQMyMRwnAWyb0ORoA1wEMRUyZJIYEwOXaAy2l w2io/eyBQkxg0CsDs/3eBIaPSOquZETiNrMJu/qvv3FWyUkwR/7FjeKKGidEFvv/ Z6xZwrVfgIegxYwFSjoEcfDUZkw+IuJ2syLA6v0LpsOhY5fg9mxDFNiV/f1rg0Bm Ut4U+N+OKKaeNYfBfMC15H0OzorzTbl15to= -----END CERTIFICATE-----Generated at Sat Dec 13 16:06:29 2025 by rpki-client