This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d894000-a0a3-333c-b6fa-b955d01b7f69.roa File: 2d894000-a0a3-333c-b6fa-b955d01b7f69.roa (raw, json) Hash identifier: pV84UCApPRG7DBJE/tifni4wWjrYFa3D0jFnNu45Xhs= Subject key identifier: 0D:5C:66:01:88:88:34:98:57:FD:D3:B8:A9:0A:48:27:ED:68:46:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C3EBA557C969CC2F3F8C5D180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d894000-a0a3-333c-b6fa-b955d01b7f69.roa Signing time: Sat 20 Dec 2025 02:30:12 +0000 ROA not before: Sat 20 Dec 2025 02:30:12 +0000 ROA not after: Fri 20 Mar 2026 01:30:12 +0000 asID: 57142 IP address blocks: 2001:470:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ba:55:7c:96:9c:c2:f3:f8:c5:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 20 02:30:12 2025 GMT Not After : Mar 20 01:30:12 2026 GMT Subject: CN=4706e17f-bd60-4ebe-82ec-38736e2e8797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:f1:ee:1a:6a:5a:c3:58:42:2a:6c:55:74: fc:8d:70:13:26:c3:44:b4:54:00:ad:3e:a4:f7:91: 73:08:14:f9:22:07:e2:28:09:a8:7c:6e:4d:47:90: 35:49:92:b6:50:01:c2:c1:4a:01:3b:9a:73:61:24: fe:f3:14:fb:d6:8f:c2:c8:b1:a7:15:c0:68:d0:32: 8e:d9:a0:95:28:b9:4a:66:1b:e3:f9:75:49:6e:9c: 88:fe:91:8f:fb:aa:e6:55:ae:60:30:59:97:ba:c9: 1f:a1:66:76:a2:27:cc:a8:c9:ad:42:97:2b:59:80: 65:9c:e5:9e:e1:92:dd:3e:3b:2e:0d:c7:8f:87:10: e3:f7:aa:7e:52:03:4d:2f:53:83:24:c7:ab:4f:9d: 02:0e:5c:b9:dc:30:2d:75:1b:36:b9:c6:c8:9e:b5: bc:b1:24:c7:8e:98:fc:ee:9b:06:b6:36:f0:c4:84: 06:04:cf:f5:35:38:24:97:b1:a0:96:8c:fc:7d:f8: cc:ba:10:0c:2c:3b:57:8c:58:d6:b0:b8:aa:d2:e7: d3:b9:aa:64:ae:be:71:ce:78:f8:39:83:37:87:26: 13:2f:70:cf:3e:88:82:29:44:53:dc:5b:b5:5c:60: 9f:9a:1f:81:d5:db:bf:b8:70:46:fe:df:81:7d:bb: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5C:66:01:88:88:34:98:57:FD:D3:B8:A9:0A:48:27:ED:68:46:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d894000-a0a3-333c-b6fa-b955d01b7f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e0:9a:3f:c3:d4:65:c2:61:ec:41:27:61:ac:cb:de:1a:24: 4d:70:39:f6:35:26:ef:2b:25:17:f7:75:a8:23:b7:06:1e:a6: 8f:08:92:e2:bd:36:d1:f3:f2:28:9b:dd:8d:7a:96:7c:f7:c1: 29:bf:b7:17:90:15:70:5b:b1:48:1e:c6:50:a8:af:60:53:09: 2c:d7:f2:17:89:26:05:85:87:35:30:ac:52:6b:06:b1:4d:23: 68:a8:63:1c:5e:51:0e:e2:96:25:d6:50:7d:19:c9:24:96:dd: 95:94:e3:0b:5f:35:16:4e:e1:f1:4b:b9:f2:82:2b:a7:de:e4: 67:6a:07:eb:32:83:4a:1d:24:f3:b5:a8:2b:b6:84:5b:80:1b: b2:36:2c:c8:76:88:21:9b:33:ed:63:dd:f2:50:f5:94:63:6e: 5f:f0:e7:75:13:b0:41:a2:8a:a4:f0:81:44:59:ed:11:12:f7: 40:6d:55:74:85:c9:e7:ec:4f:a8:b9:0b:84:d7:f4:dc:e8:a4: 45:83:12:3a:f0:69:4f:00:ea:77:9c:5b:ad:b4:1e:cf:2c:9f: 6b:80:46:db:3a:11:d8:72:9a:9b:c4:0f:49:5f:ef:fb:fb:44: 6c:b4:51:f1:97:9f:bd:88:06:51:31:0a:a5:83:0a:08:62:11: 0b:81:09:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw+ulV8lpzC8/jF0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIyMDAyMzAxMloXDTI2MDMyMDAxMzAxMlowLzEtMCsGA1UEAxMk NDcwNmUxN2YtYmQ2MC00ZWJlLTgyZWMtMzg3MzZlMmU4Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7x7hpqWsNYQipsVXT8jXATJsNEtFQArT6k 95FzCBT5IgfiKAmofG5NR5A1SZK2UAHCwUoBO5pzYST+8xT71o/CyLGnFcBo0DKO 2aCVKLlKZhvj+XVJbpyI/pGP+6rmVa5gMFmXuskfoWZ2oifMqMmtQpcrWYBlnOWe 4ZLdPjsuDcePhxDj96p+UgNNL1ODJMerT50CDly53DAtdRs2ucbInrW8sSTHjpj8 7psGtjbwxIQGBM/1NTgkl7Ggloz8ffjMuhAMLDtXjFjWsLiq0ufTuapkrr5xznj4 OYM3hyYTL3DPPoiCKURT3Fu1XGCfmh+B1du/uHBG/t+BfbvACwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1cZgGIiDSYV/3TuKkKSCftaEZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQ4OTQwMDAtYTBhMy0z MzNjLWI2ZmEtYjk1NWQwMWI3ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTgmj/D1GXCYexBJ2Gsy94aJE1wOfY1Ju8rJRf3dagjtwYepo8I kuK9NtHz8iib3Y16lnz3wSm/txeQFXBbsUgexlCor2BTCSzX8heJJgWFhzUwrFJr BrFNI2ioYxxeUQ7iliXWUH0ZySSW3ZWU4wtfNRZO4fFLufKCK6fe5GdqB+syg0od JPO1qCu2hFuAG7I2LMh2iCGbM+1j3fJQ9ZRjbl/w53UTsEGiiqTwgURZ7RES90Bt VXSFyefsT6i5C4TX9NzopEWDEjrwaU8A6necW620Hs8sn2uARts6EdhympvED0lf 7/v7RGy0UfGXn72IBlExCqWDCghiEQuBCWE= -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:34 2025 by rpki-client