This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa File: 3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa (raw, json) Hash identifier: LGgd4mvTN+wgitGamEvqo0gZ1Y0efCAi0dzJbd5iGlE= Subject key identifier: 90:A5:D4:92:B6:E3:B8:9F:32:81:1C:8B:AF:8B:89:B6:83:CD:83:25 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BCD9F225FC48E75899C788A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 23948 IP address blocks: 2001:470:337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:22:5f:c4:8e:75:89:9c:78:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=ec9fa315-5983-4886-9e31-f9c8ce46f4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:33:c5:ad:f0:fa:c2:8e:00:16:ec:37:94: 06:ba:27:df:69:82:61:8e:bf:31:0a:aa:55:8d:ae: 7a:e1:cc:5c:92:76:63:36:65:9f:2a:60:76:68:49: f4:f4:0d:b7:40:1f:8a:1b:f7:8a:66:ad:4f:0c:7d: 0c:3b:56:5e:d3:a4:fa:97:75:5d:be:6c:82:51:80: 16:9a:84:21:ae:96:ac:d3:39:6e:9d:cf:18:a7:e9: fd:01:b7:9b:e4:f1:bd:10:c2:5b:af:3a:3c:48:65: ad:e0:90:55:a8:98:ed:22:a3:4b:97:d5:61:73:2c: 74:04:9a:e7:91:46:43:76:37:84:5a:0b:da:94:0e: 88:30:d9:5e:f7:23:5d:4d:e0:2d:d6:07:a2:d3:ef: fd:28:8e:82:12:fc:a5:84:47:3c:50:ee:19:70:b2: e5:9c:f1:b6:a6:77:1e:8b:3a:dc:34:cc:93:63:27: 19:cb:6e:a5:18:96:84:1b:37:09:07:f2:79:40:26: b1:42:1e:13:6c:fc:56:b7:f9:26:f6:dc:32:f8:fa: e8:01:24:1e:c0:9b:ea:79:d4:a5:68:7a:04:43:a5: 2c:b6:5e:1e:0a:8e:08:46:fa:d2:24:6c:71:b0:28: 0b:a2:c7:f5:46:79:40:05:f2:ad:55:c3:18:bd:9e: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:D4:92:B6:E3:B8:9F:32:81:1C:8B:AF:8B:89:B6:83:CD:83:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:337::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:79:6c:64:f1:86:aa:0e:8f:d0:46:ba:54:19:9e:88:b3:32: 05:3b:16:f0:34:1a:b9:44:aa:5d:42:19:5b:13:1b:fe:37:cf: cc:82:e4:79:9e:eb:4c:99:01:92:0a:4a:f4:b4:d0:89:71:5a: c4:7e:1d:c4:90:d6:b5:39:bb:c1:41:04:94:f8:cc:7f:ff:f7: a5:79:97:6a:a6:f9:4f:bf:88:bb:e3:61:30:49:e8:21:58:af: 28:5f:14:a2:62:a0:47:1e:f4:0f:83:24:58:3a:7c:2c:02:48: 09:f0:c3:9f:68:1e:67:7f:cb:dc:9e:a9:62:76:a2:dd:7a:f7: 1c:c4:ab:d3:e7:83:62:33:da:43:c3:7a:19:fa:dc:8f:c9:ba: c4:94:7d:d1:02:7b:a0:73:88:bb:dd:20:8a:ec:a0:cd:bc:52: a6:c3:0f:11:82:64:fb:36:94:32:eb:ed:6c:76:bf:ea:20:e1: bf:2d:6f:87:36:37:f7:1c:8d:f0:ee:2e:b1:e6:89:b7:cb:d9: b6:9c:33:bc:e0:2e:5f:a3:b3:b1:61:38:bf:bd:d4:e6:6d:51: ef:b7:60:ae:de:3a:cc:4f:0e:71:a6:93:09:eb:eb:92:4c:32: c7:0b:c4:46:7a:15:cf:9a:db:ab:c5:94:c0:12:d0:38:bd:cb: f9:49:61:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNnyJfxI51iZx4ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWM5ZmEzMTUtNTk4My00ODg2LTllMzEtZjljOGNlNDZmNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijczxa3w+sKOABbsN5QGuiffaYJhjr8xCqpV ja564cxcknZjNmWfKmB2aEn09A23QB+KG/eKZq1PDH0MO1Ze06T6l3VdvmyCUYAW moQhrpas0zlunc8Yp+n9Abeb5PG9EMJbrzo8SGWt4JBVqJjtIqNLl9Vhcyx0BJrn kUZDdjeEWgvalA6IMNle9yNdTeAt1gei0+/9KI6CEvylhEc8UO4ZcLLlnPG2pnce izrcNMyTYycZy26lGJaEGzcJB/J5QCaxQh4TbPxWt/km9twy+ProASQewJvqedSl aHoEQ6Ustl4eCo4IRvrSJGxxsCgLosf1RnlABfKtVcMYvZ4TBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJCl1JK247ifMoEci6+LibaDzYMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2IwMjBmNWYtOTNlYS0z ZDNiLTljYzktMzY5Nzk2NWUzMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF55bGTxhqoOj9BGulQZnoizMgU7FvA0GrlEql1CGVsTG/43z8yC 5Hme60yZAZIKSvS00IlxWsR+HcSQ1rU5u8FBBJT4zH//96V5l2qm+U+/iLvjYTBJ 6CFYryhfFKJioEce9A+DJFg6fCwCSAnww59oHmd/y9yeqWJ2ot169xzEq9Png2Iz 2kPDehn63I/JusSUfdECe6BziLvdIIrsoM28UqbDDxGCZPs2lDLr7Wx2v+og4b8t b4c2N/ccjfDuLrHmibfL2bacM7zgLl+js7FhOL+91OZtUe+3YK7eOsxPDnGmkwnr 65JMMscLxEZ6Fc+a26vFlMAS0Di9y/lJYR4= -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:19 2025 by rpki-client