This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa File: bb4f2049-ba62-3c87-888a-febe4a159ee0.roa (raw, json) Hash identifier: yZpmSX6qAORLgWULNEnyKEDBmSimRyX1RtshZSDiqjQ= Subject key identifier: 43:D3:3C:D7:89:AE:4E:B4:41:FD:59:C1:28:C2:BD:B7:98:DE:5E:BC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C3BE16949F1410B0C28730880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20648 IP address blocks: 2001:470:390::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:69:49:f1:41:0b:0c:28:73:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=0c7f1bab-0268-453e-a67a-3abf327efe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:cd:b4:7c:73:21:2e:23:d6:04:d9:33:be: 6f:40:fb:de:50:d5:8f:f5:2f:14:fa:61:33:e2:3f: 8d:d9:88:03:21:3f:de:e8:64:31:fc:c9:f8:f2:ac: e6:14:5f:2c:03:17:76:a7:ec:fc:b1:4f:26:6c:90: e1:1f:d7:cd:8e:22:6f:51:b3:9d:4c:a5:bc:c9:cc: 69:d6:4a:84:d1:0b:9d:a1:e7:43:40:28:ee:59:70: e4:d6:d7:e2:56:7e:93:95:83:eb:43:36:99:7c:ad: e0:9e:26:59:d3:4b:09:99:77:76:66:c2:bc:1a:81: 4c:9f:e7:7a:ed:41:9b:30:bc:8c:7d:d6:c1:ab:38: 57:47:9e:7d:3e:f6:2d:4b:8c:76:47:82:19:c0:c2: 6f:60:4f:e5:48:f5:3e:5b:18:09:9e:10:a4:21:de: cf:05:9d:f2:73:3c:4f:5f:17:93:5c:02:6b:f3:bd: 32:52:df:91:dc:c8:35:ca:93:9d:62:13:1f:21:f5: b0:5f:ad:f7:0b:d4:51:c0:a6:52:80:37:8e:dd:5a: c9:66:33:06:a0:9c:53:74:4f:6f:1f:9c:6d:f6:d1: e9:5f:e6:a8:36:72:c9:ec:ab:9f:50:e6:40:67:95: 8c:bc:be:0b:1f:2b:ed:42:f9:aa:71:23:f9:05:f0: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:3C:D7:89:AE:4E:B4:41:FD:59:C1:28:C2:BD:B7:98:DE:5E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:390::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:48:7f:dd:e7:bc:0b:e5:ba:e1:eb:cd:89:a3:9e:b8:fe:8e: 75:bc:fe:62:99:8d:1a:a8:99:d7:bf:7e:72:1f:50:e2:2e:c2: 06:d2:da:7d:f7:21:12:94:80:c9:a6:32:cd:4c:ee:a4:b3:05: ea:08:6d:02:ce:cf:7e:ad:7c:11:96:be:54:bb:43:7c:1b:fb: 06:9b:c2:4c:5d:0c:0a:8e:1e:9e:09:a9:4a:4a:1f:29:6f:4a: d2:5c:cc:7c:8d:7b:44:ac:82:df:e3:a7:9e:2f:11:1d:e2:c3: 15:17:42:a9:91:75:8d:1a:cc:02:82:a6:3c:cd:e2:c0:97:b7: 5a:dc:15:b2:1d:38:3d:bf:bb:98:21:d5:2a:a8:79:78:2a:74: 58:a9:f0:f2:fc:77:6c:73:49:99:6e:e6:aa:4b:58:1a:0a:27: 69:f5:e7:c9:c9:8f:68:15:1d:d9:63:04:82:bb:bc:45:af:8b: a9:f8:26:2b:60:03:00:b7:94:94:7d:7a:92:85:8f:83:1d:7f: 85:13:05:e3:64:8d:4c:71:7d:6a:e0:e9:87:d2:ed:5e:2f:4f: 05:5c:72:59:50:9a:1d:70:3e:88:07:58:14:b0:ae:ee:b8:b9: 5e:e4:f7:36:4a:ba:b2:e4:8a:b2:fc:ec:5b:06:b4:4a:e7:05: 99:59:bb:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw74WlJ8UELDChzCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MGM3ZjFiYWItMDI2OC00NTNlLWE2N2EtM2FiZjMyN2VmZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UPNtHxzIS4j1gTZM75vQPveUNWP9S8U+mEz 4j+N2YgDIT/e6GQx/Mn48qzmFF8sAxd2p+z8sU8mbJDhH9fNjiJvUbOdTKW8ycxp 1kqE0QudoedDQCjuWXDk1tfiVn6TlYPrQzaZfK3gniZZ00sJmXd2ZsK8GoFMn+d6 7UGbMLyMfdbBqzhXR559PvYtS4x2R4IZwMJvYE/lSPU+WxgJnhCkId7PBZ3yczxP XxeTXAJr870yUt+R3Mg1ypOdYhMfIfWwX633C9RRwKZSgDeO3VrJZjMGoJxTdE9v H5xt9tHpX+aoNnLJ7KufUOZAZ5WMvL4LHyvtQvmqcSP5BfBGqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEPTPNeJrk60Qf1ZwSjCvbeY3l68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI0ZjIwNDktYmE2Mi0z Yzg3LTg4OGEtZmViZTRhMTU5ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBIf93nvAvluuHrzYmjnrj+jnW8/mKZjRqomde/fnIfUOIuwgbS 2n33IRKUgMmmMs1M7qSzBeoIbQLOz36tfBGWvlS7Q3wb+wabwkxdDAqOHp4JqUpK HylvStJczHyNe0Ssgt/jp54vER3iwxUXQqmRdY0azAKCpjzN4sCXt1rcFbIdOD2/ u5gh1SqoeXgqdFip8PL8d2xzSZlu5qpLWBoKJ2n158nJj2gVHdljBIK7vEWvi6n4 JitgAwC3lJR9epKFj4Mdf4UTBeNkjUxxfWrg6YfS7V4vTwVccllQmh1wPogHWBSw ru64uV7k9zZKurLkirL87FsGtErnBZlZu8g= -----END CERTIFICATE-----Generated at Fri Dec 19 21:57:13 2025 by rpki-client