This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa File: 2599686e-5956-3d32-94e2-2e0c93563c44.roa (raw, json) Hash identifier: On3BpCEET5Wo8w4S7RvpnSwPmBv6PiFdgjb6hnjVyOI= Subject key identifier: E1:21:78:04:9D:5C:57:F2:EF:58:86:3D:78:BA:20:F2:1C:E5:54:DC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BFA45F0937447688DBE8DD280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 3245 IP address blocks: 2001:470:431::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:f0:93:74:47:68:8d:be:8d:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=e0648da0-1a80-498e-99d3-2c7295016819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:ea:f6:e5:ca:4d:1e:e6:0b:26:17:0c:dd: ce:b8:f8:fb:24:8e:53:d9:72:18:68:fd:48:96:80: 29:75:de:1c:aa:90:ac:31:75:54:62:49:99:27:16: 58:0d:b7:cf:98:18:dc:9b:76:cd:e2:df:50:2a:e2: dd:e6:97:8d:20:1d:b0:bc:59:10:74:33:92:c0:77: 9f:1f:46:64:db:cd:b0:ef:e0:5c:21:d8:53:b5:be: d1:fd:89:8e:e5:28:de:7d:2a:73:40:cf:ef:82:08: d1:bf:b9:bd:cc:36:35:4e:da:ba:74:12:99:0c:2d: b6:21:d3:ec:b2:fe:1e:38:1c:e9:8b:f6:64:29:a0: 34:4d:42:56:c9:77:15:76:72:75:d4:d1:c9:56:83: bc:a6:59:4e:44:05:3d:01:33:15:24:f3:ef:ba:d1: d6:09:98:df:60:d5:4c:72:d9:52:da:f7:a1:b4:c7: e1:02:ba:b7:5a:54:a1:fc:a6:5c:87:67:27:fc:38: 8b:db:ed:8b:d1:fd:ff:f3:13:9b:2a:04:16:dd:a2: 30:5c:12:50:9f:79:13:4d:22:d2:c6:42:a7:1b:de: ff:1c:3d:29:74:76:78:dd:ed:88:2b:68:c1:3a:f8: 1a:c1:02:f3:39:e8:dc:67:ec:4c:ec:9f:7a:b8:7f: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:21:78:04:9D:5C:57:F2:EF:58:86:3D:78:BA:20:F2:1C:E5:54:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:431::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3e:d1:80:8a:98:1d:f8:70:5f:af:3b:33:6f:f6:de:24:3c: ed:3f:66:8c:ba:39:24:00:aa:82:0b:c0:e0:ae:37:9e:d0:ee: cb:2c:60:66:e9:3b:7d:1a:93:c8:02:48:8f:ee:14:42:b6:c5: 98:ad:50:1d:91:0a:a1:32:52:66:12:88:93:1d:29:4c:12:a3: 8b:60:c9:9c:32:f8:eb:9d:8b:0a:67:db:ef:bc:a8:b6:7d:d2: 31:9f:d0:87:6a:b1:44:7d:91:5a:30:fe:e1:93:89:9f:99:c6: e8:aa:70:9b:62:ea:64:5b:7a:ac:bc:a3:29:d7:3c:ed:0f:10: 0d:de:de:e3:d1:19:fa:ba:07:b0:e4:67:c9:f1:94:fa:03:30: c4:65:61:c1:32:73:5b:8c:a1:54:28:45:1a:65:23:2d:de:9c: 31:39:0d:cd:46:60:0c:93:36:cd:ec:a5:0d:7c:bb:b1:7b:f4: b3:4a:b5:52:ab:38:25:fa:c9:64:fc:78:9b:82:cf:f8:55:54: 31:79:a1:ba:0d:f1:45:e7:b4:5e:90:d1:cc:d0:e6:39:15:33: 0f:2d:12:df:e8:6c:29:7d:50:05:ad:33:21:61:7c:f4:53:72: 35:6a:bb:ba:63:13:7a:58:7e:b5:c3:e0:18:e2:ce:d8:f2:3f: 4f:92:6e:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv6RfCTdEdojb6N0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk ZTA2NDhkYTAtMWE4MC00OThlLTk5ZDMtMmM3Mjk1MDE2ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaPq9uXKTR7mCyYXDN3OuPj7JI5T2XIYaP1I loApdd4cqpCsMXVUYkmZJxZYDbfPmBjcm3bN4t9QKuLd5peNIB2wvFkQdDOSwHef H0Zk282w7+BcIdhTtb7R/YmO5SjefSpzQM/vggjRv7m9zDY1Ttq6dBKZDC22IdPs sv4eOBzpi/ZkKaA0TUJWyXcVdnJ11NHJVoO8pllORAU9ATMVJPPvutHWCZjfYNVM ctlS2vehtMfhArq3WlSh/KZch2cn/DiL2+2L0f3/8xObKgQW3aIwXBJQn3kTTSLS xkKnG97/HD0pdHZ43e2IK2jBOvgawQLzOejcZ+xM7J96uH+KeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEheASdXFfy71iGPXi6IPIc5VTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjU5OTY4NmUtNTk1Ni0z ZDMyLTk0ZTItMmUwYzkzNTYzYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFU+0YCKmB34cF+vOzNv9t4kPO0/Zoy6OSQAqoILwOCuN57Q7sss YGbpO30ak8gCSI/uFEK2xZitUB2RCqEyUmYSiJMdKUwSo4tgyZwy+Oudiwpn2++8 qLZ90jGf0IdqsUR9kVow/uGTiZ+ZxuiqcJti6mRbeqy8oynXPO0PEA3e3uPRGfq6 B7DkZ8nxlPoDMMRlYcEyc1uMoVQoRRplIy3enDE5Dc1GYAyTNs3spQ18u7F79LNK tVKrOCX6yWT8eJuCz/hVVDF5oboN8UXntF6Q0czQ5jkVMw8tEt/obCl9UAWtMyFh fPRTcjVqu7pjE3pYfrXD4BjiztjyP0+Sbi8= -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:12 2025 by rpki-client