This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa File: c9af9823-5dab-30b5-a5bd-62c799398a5e.roa (raw, json) Hash identifier: GhpULyAU1E9oIXemBhanJqLmHRZOyXy8uX/zFpA8M14= Subject key identifier: 43:8D:1C:32:9A:46:99:E1:C1:20:E9:B9:2C:2B:46:31:1B:69:41:1E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C4CAFD927B3773BB439DADDA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa Signing time: Thu 25 Dec 2025 02:30:23 +0000 ROA not before: Thu 25 Dec 2025 02:30:23 +0000 ROA not after: Wed 25 Mar 2026 01:30:23 +0000 asID: 57332 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:af:d9:27:b3:77:3b:b4:39:da:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 25 02:30:23 2025 GMT Not After : Mar 25 01:30:23 2026 GMT Subject: CN=32703450-51b1-44c2-af4a-03da15b1f2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:3d:a1:8c:a2:b4:23:2c:f2:1d:b8:b4:93: 5a:d8:3f:04:be:22:0c:11:a2:4a:d8:e9:cb:06:81: c6:70:39:fb:55:a1:63:85:04:19:df:b5:cd:b7:e7: 49:17:9f:29:dc:f5:d3:07:48:71:8b:8a:25:cc:bd: 1f:de:98:28:97:85:da:85:91:fc:ec:9f:95:b3:bc: 79:18:a9:e0:79:b8:99:b9:85:75:d8:ed:71:5c:28: f9:a9:08:1d:f9:3c:b8:a4:c7:6d:d0:c2:9e:d5:d4: 52:ca:1e:91:89:7e:c0:fd:3e:11:08:42:98:3e:16: b5:d1:e0:10:c5:b0:d0:67:07:3e:f4:73:4c:cf:83: 8f:29:55:41:ff:f6:6a:0d:23:b1:9f:ac:4e:3f:5c: ed:1c:05:52:03:14:11:91:1f:bb:1a:85:7b:77:64: d7:11:93:7a:d6:2c:77:b4:2d:f9:fb:fe:eb:02:de: b5:b9:51:77:af:c7:4d:2e:29:d9:60:a3:d5:b5:53: dc:8e:fd:f8:3e:03:94:fa:91:c7:6b:11:b7:7a:dd: 9f:2b:45:77:09:ca:a1:b4:33:65:fb:54:42:db:b1: a4:f6:b6:ed:10:65:02:bb:6a:e3:32:4f:75:fe:dd: d1:d1:c9:f2:cf:a0:19:ba:f0:af:06:76:fa:82:18: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:1C:32:9A:46:99:E1:C1:20:E9:B9:2C:2B:46:31:1B:69:41:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d5:08:d7:26:27:37:84:41:d9:fa:0b:df:5c:26:f4:85:77: 67:25:6c:7a:cf:18:ed:87:72:b7:3d:fa:f1:ca:a0:39:25:7c: 81:de:73:7c:3f:fd:e6:ff:2c:7b:b6:40:ae:ed:3d:3d:46:65: b4:19:51:b4:f5:e6:12:e5:5c:c1:09:08:3b:3b:73:f6:65:94: c5:bc:1a:60:17:07:fd:c7:fd:19:90:d0:4c:91:3f:d9:5d:4b: bd:e3:a3:57:49:e4:91:f6:65:a2:e0:a3:5e:b0:f4:fe:34:26: a9:25:d6:7f:ca:88:cc:c2:aa:b0:76:b6:6e:f7:35:2c:71:32: 25:ff:d2:ad:5e:5a:12:c8:21:94:f2:9d:ff:96:c7:b3:d3:8c: bf:5f:64:a5:8d:56:97:89:cb:e6:38:3e:54:d6:fa:d0:6a:00: f6:64:37:2e:98:2c:8e:79:3d:e2:ad:ed:3b:cd:99:88:b4:3e: 58:c0:4e:0e:5c:d6:7d:3f:f1:2a:83:5d:00:04:08:ec:84:df: 61:69:22:ea:42:ce:18:71:76:9e:71:95:b0:68:18:77:28:bb: 79:aa:3b:9d:b9:52:da:bd:7a:cc:6c:3b:45:55:e1:c6:ec:47: 2f:23:23:ec:a4:57:b6:14:d7:6b:10:f9:0f:5c:aa:34:f9:c1: 72:f9:66:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExMr9kns3c7tDna3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIyNTAyMzAyM1oXDTI2MDMyNTAxMzAyM1owLzEtMCsGA1UEAxMk MzI3MDM0NTAtNTFiMS00NGMyLWFmNGEtMDNkYTE1YjFmMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGk9oYyitCMs8h24tJNa2D8EviIMEaJK2OnL BoHGcDn7VaFjhQQZ37XNt+dJF58p3PXTB0hxi4olzL0f3pgol4XahZH87J+Vs7x5 GKngebiZuYV12O1xXCj5qQgd+Ty4pMdt0MKe1dRSyh6RiX7A/T4RCEKYPha10eAQ xbDQZwc+9HNMz4OPKVVB//ZqDSOxn6xOP1ztHAVSAxQRkR+7GoV7d2TXEZN61ix3 tC35+/7rAt61uVF3r8dNLinZYKPVtVPcjv34PgOU+pHHaxG3et2fK0V3CcqhtDNl +1RC27Gk9rbtEGUCu2rjMk91/t3R0cnyz6AZuvCvBnb6ghgdgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEONHDKaRpnhwSDpuSwrRjEbaUEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzlhZjk4MjMtNWRhYi0z MGI1LWE1YmQtNjJjNzk5Mzk4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALHVCNcmJzeEQdn6C99cJvSFd2clbHrPGO2Hcrc9+vHKoDklfIHe c3w//eb/LHu2QK7tPT1GZbQZUbT15hLlXMEJCDs7c/ZllMW8GmAXB/3H/RmQ0EyR P9ldS73jo1dJ5JH2ZaLgo16w9P40Jqkl1n/KiMzCqrB2tm73NSxxMiX/0q1eWhLI IZTynf+Wx7PTjL9fZKWNVpeJy+Y4PlTW+tBqAPZkNy6YLI55PeKt7TvNmYi0PljA Tg5c1n0/8SqDXQAECOyE32FpIupCzhhxdp5xlbBoGHcou3mqO525Utq9esxsO0VV 4cbsRy8jI+ykV7YU12sQ+Q9cqjT5wXL5ZpE= -----END CERTIFICATE-----Generated at Wed Dec 31 08:44:33 2025 by rpki-client