This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa File: 33dea899-220d-3218-b52e-74f14da3ffda.roa (raw, json) Hash identifier: 9ce3BOX/+wP5FaxjozgfTqHUlRG1dH+VH1wSM5d6LV0= Subject key identifier: 52:B5:62:A8:5C:C0:15:0B:24:4C:BE:1A:BE:9B:41:8B:9C:FB:D3:27 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C0B0645F8069685E450294F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 17290 IP address blocks: 2001:470:4d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:45:f8:06:96:85:e4:50:29:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=416f3d75-b034-4227-add2-2c5662763a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:e9:88:85:0c:ca:61:c0:43:c9:1f:f2:ce: 90:4d:22:c3:38:e6:35:ca:19:76:11:57:3c:01:04: 91:aa:70:07:fb:66:d3:19:80:91:9b:97:6f:36:21: e4:ac:03:68:9a:4d:c1:1f:27:8c:67:67:ab:60:24: eb:2e:2f:f7:5c:da:7e:07:3f:c0:56:03:16:b3:03: 8f:0b:bd:f6:7a:93:f2:5a:64:e2:88:b4:d5:31:ae: b6:15:4b:b3:ff:a6:0d:c2:60:28:c6:d2:09:6c:ad: 8d:fd:e8:4a:98:d8:02:93:4f:cd:08:52:cc:1d:ba: ed:7a:4d:86:b2:f3:0e:2f:23:ea:7e:65:8c:bb:6d: e0:d3:db:be:42:aa:c1:d2:95:34:df:55:ed:63:7b: 9e:d2:8c:f2:63:60:76:a0:3c:a8:03:44:c0:f8:51: 92:f9:b6:f3:bc:e7:8f:66:f4:66:12:e5:6d:f6:13: 14:74:32:af:c1:75:a4:14:e2:b8:ce:55:db:f3:0e: d6:02:26:07:2b:8b:a0:fd:ba:81:23:bd:a5:58:e8: 99:e9:73:41:80:0e:56:7e:51:51:2b:5e:80:9f:c1: 04:b3:17:e4:4f:53:a4:35:c7:61:68:a5:80:8f:19: 3c:59:4e:4c:db:d9:67:6b:1f:17:ec:47:f2:49:1e: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B5:62:A8:5C:C0:15:0B:24:4C:BE:1A:BE:9B:41:8B:9C:FB:D3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9d:d4:59:62:21:03:b9:12:8f:97:d4:43:1b:87:ba:af:3b: 4f:80:ff:58:29:0e:7f:aa:19:38:0b:eb:a6:6d:b3:06:1e:34: 9d:4e:55:f2:1a:2c:cc:63:85:36:11:e3:97:8d:8e:a6:97:7d: 96:d2:fc:05:b9:54:d7:8c:17:64:93:36:c0:d8:8b:ed:9b:ea: 62:62:9e:c4:3b:66:c4:60:dd:81:90:25:7d:1b:9d:c5:09:9d: d3:87:6f:ed:f9:7d:3a:ab:1a:ed:b4:c1:f3:00:74:23:36:97: 23:30:e5:07:36:0c:9d:02:f3:fb:a5:9f:68:76:e5:f4:27:6b: 76:f3:80:e6:5f:e2:e7:20:07:2a:42:c5:63:3a:3b:ca:93:37: aa:f4:4b:df:b9:0c:c3:41:aa:5c:35:0e:29:ab:96:35:69:33: f8:31:fc:05:fe:cd:96:6f:e4:d6:89:31:d6:76:45:b6:93:e0: e6:af:ef:47:8e:51:6a:d3:9f:2e:10:7f:7a:1f:80:62:50:75: 87:fd:7e:4e:ae:69:0f:18:b3:ea:1a:89:61:42:4b:b7:f0:8e: c3:34:80:d5:bb:bc:25:a5:6d:af:b8:25:67:dd:36:eb:4a:e5: 00:fb:87:1d:20:43:25:8f:dc:b0:a7:a8:a7:11:14:62:1f:7b: 4a:6b:f8:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwLBkX4BpaF5FApTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NDE2ZjNkNzUtYjAzNC00MjI3LWFkZDItMmM1NjYyNzYzYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhovpiIUMymHAQ8kf8s6QTSLDOOY1yhl2EVc8 AQSRqnAH+2bTGYCRm5dvNiHkrANomk3BHyeMZ2erYCTrLi/3XNp+Bz/AVgMWswOP C732epPyWmTiiLTVMa62FUuz/6YNwmAoxtIJbK2N/ehKmNgCk0/NCFLMHbrtek2G svMOLyPqfmWMu23g09u+QqrB0pU031XtY3ue0ozyY2B2oDyoA0TA+FGS+bbzvOeP ZvRmEuVt9hMUdDKvwXWkFOK4zlXb8w7WAiYHK4ug/bqBI72lWOiZ6XNBgA5WflFR K16An8EEsxfkT1OkNcdhaKWAjxk8WU5M29lnax8X7EfySR7ZgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFK1YqhcwBULJEy+Gr6bQYuc+9MnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNkZWE4OTktMjIwZC0z MjE4LWI1MmUtNzRmMTRkYTNmZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGd1FliIQO5Eo+X1EMbh7qvO0+A/1gpDn+qGTgL66ZtswYeNJ1O VfIaLMxjhTYR45eNjqaXfZbS/AW5VNeMF2STNsDYi+2b6mJinsQ7ZsRg3YGQJX0b ncUJndOHb+35fTqrGu20wfMAdCM2lyMw5Qc2DJ0C8/uln2h25fQna3bzgOZf4ucg BypCxWM6O8qTN6r0S9+5DMNBqlw1DimrljVpM/gx/AX+zZZv5NaJMdZ2RbaT4Oav 70eOUWrTny4Qf3ofgGJQdYf9fk6uaQ8Ys+oaiWFCS7fwjsM0gNW7vCWlba+4JWfd NutK5QD7hx0gQyWP3LCnqKcRFGIfe0pr+JA= -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:01 2025 by rpki-client