This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa File: f04cebc3-fc51-35a3-b964-0d5a5b007836.roa (raw, json) Hash identifier: jA6IMiSO69CeHRBZkW/bqkh1xHvYEootO9r57U1Wd3k= Subject key identifier: 99:64:9B:76:7F:18:40:1D:21:C4:2D:F9:17:7C:73:16:63:C0:08:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C2C950210A33077F4BE34B940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa Signing time: Sat 13 Dec 2025 14:30:26 +0000 ROA not before: Sat 13 Dec 2025 14:30:26 +0000 ROA not after: Fri 13 Mar 2026 13:30:26 +0000 asID: 214282 IP address blocks: 2001:470:4f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:95:02:10:a3:30:77:f4:be:34:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 13 14:30:26 2025 GMT Not After : Mar 13 13:30:26 2026 GMT Subject: CN=e3313d66-896f-4238-bd01-5acd404d2cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:a7:cb:28:1a:8e:bc:02:9d:b9:9f:83:e3: bf:f3:a7:4e:4f:d1:3a:9c:5d:31:07:0f:14:2d:17: 61:a8:7f:53:e4:23:b2:dc:87:44:c4:45:3c:44:ff: c9:f3:04:4c:92:c2:c3:95:52:d1:90:be:59:f1:22: 00:27:74:20:80:35:30:4a:e8:c2:14:15:be:45:18: 58:15:f1:c2:31:fa:0a:a3:88:39:9c:0c:ff:da:16: 87:c3:31:96:bb:9a:34:20:7d:76:37:c6:19:44:e6: 3b:b0:e3:b6:cf:89:38:88:7f:c6:72:27:81:b7:d9: af:c7:59:55:91:04:04:a3:5a:1c:f9:02:5e:b9:23: 36:ff:84:57:25:91:75:74:85:9c:48:f4:de:05:46: e2:6c:ef:0e:91:9b:ff:44:38:43:3d:e7:a4:d3:34: 40:b8:69:b2:90:c3:ab:a8:6a:d7:c7:b6:33:73:b8: 1f:22:ab:5f:5b:55:ee:66:bf:bf:f9:ca:06:2a:f9: f6:a5:66:46:c2:a5:c5:8d:20:f7:94:56:df:b5:5c: 44:8b:c3:28:48:4b:52:15:79:59:6b:ce:88:47:8f: 67:34:ac:40:49:cc:8a:35:e6:4f:fc:58:c7:21:82: 7d:48:f1:88:12:44:c3:08:d3:17:ef:d8:a8:ec:b2: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:9B:76:7F:18:40:1D:21:C4:2D:F9:17:7C:73:16:63:C0:08:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:81:11:e4:44:29:d8:7d:29:b8:ee:58:7c:39:3b:10:86:92: cc:8a:63:03:37:76:db:95:f7:53:fc:55:2d:82:43:90:2f:09: a7:ef:36:dc:05:9c:bb:a1:cb:27:6d:58:84:c0:21:e8:98:81: ae:33:90:d1:66:4a:09:2b:49:86:39:22:52:1e:8f:c4:c2:6a: 80:5e:99:44:f8:b2:06:00:e4:09:c5:c1:a4:74:49:40:b2:09: ab:99:50:49:45:a9:45:6e:68:1c:32:07:a2:48:6b:90:13:59: 9e:49:04:76:ca:34:cf:b2:85:8d:4f:2c:64:24:5d:d7:0f:0c: 43:cf:a7:1f:54:a5:e4:fa:2f:56:bd:54:6e:25:05:11:33:19: 13:5d:49:c1:a0:2e:dc:1d:2c:70:e6:d2:52:8c:d4:11:24:4b: de:1c:87:6c:50:f5:8e:78:1f:19:53:e1:1d:32:6b:4e:6b:c0: d4:e9:3d:d8:8b:ae:11:2e:10:4c:d4:9e:73:10:0b:06:ab:3e: c0:80:02:f8:ff:c4:62:f4:0a:d4:c8:49:43:5e:e9:f3:a5:f9: 04:0e:21:63:db:71:31:eb:a3:b9:e1:94:3e:c1:6f:34:ce:ae: e3:92:c4:d3:f6:0e:93:64:37:8e:9f:ef:33:21:c0:3a:36:d9: 91:f6:d8:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwslQIQozB39L40uUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIxMzE0MzAyNloXDTI2MDMxMzEzMzAyNlowLzEtMCsGA1UEAxMk ZTMzMTNkNjYtODk2Zi00MjM4LWJkMDEtNWFjZDQwNGQyY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ2nyygajrwCnbmfg+O/86dOT9E6nF0xBw8U LRdhqH9T5COy3IdExEU8RP/J8wRMksLDlVLRkL5Z8SIAJ3QggDUwSujCFBW+RRhY FfHCMfoKo4g5nAz/2haHwzGWu5o0IH12N8YZROY7sOO2z4k4iH/GcieBt9mvx1lV kQQEo1oc+QJeuSM2/4RXJZF1dIWcSPTeBUbibO8OkZv/RDhDPeek0zRAuGmykMOr qGrXx7Yzc7gfIqtfW1XuZr+/+coGKvn2pWZGwqXFjSD3lFbftVxEi8MoSEtSFXlZ a86IR49nNKxAScyKNeZP/FjHIYJ9SPGIEkTDCNMX79io7LJEQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlkm3Z/GEAdIcQt+Rd8cxZjwAjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA0Y2ViYzMtZmM1MS0z NWEzLWI5NjQtMGQ1YTViMDA3ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHyBEeREKdh9KbjuWHw5OxCGksyKYwM3dtuV91P8VS2CQ5AvCafv NtwFnLuhyydtWITAIeiYga4zkNFmSgkrSYY5IlIej8TCaoBemUT4sgYA5AnFwaR0 SUCyCauZUElFqUVuaBwyB6JIa5ATWZ5JBHbKNM+yhY1PLGQkXdcPDEPPpx9UpeT6 L1a9VG4lBREzGRNdScGgLtwdLHDm0lKM1BEkS94ch2xQ9Y54HxlT4R0ya05rwNTp PdiLrhEuEEzUnnMQCwarPsCAAvj/xGL0CtTISUNe6fOl+QQOIWPbcTHro7nhlD7B bzTOruOSxNP2DpNkN46f7zMhwDo22ZH22LI= -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:07 2025 by rpki-client