This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa File: 40f8dc35-9f6a-32d9-9b05-4599efaca192.roa (raw, json) Hash identifier: bhOXsXP60HQStiXTn/5GTIrRGCYGi9KCRptwYP0ZYQ8= Subject key identifier: BC:A4:F5:9D:B2:9D:2C:1E:E9:AD:73:1E:85:80:2B:FF:E8:61:C3:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C2856236B07D05296E5F673F0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 17408 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:23:6b:07:d0:52:96:e5:f6:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=4917d54c-5be5-4bc4-91f1-5354b068f2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:ac:26:79:8d:85:20:12:83:bc:35:77:d9: 76:5b:18:ac:b2:8e:16:6c:29:4c:54:8b:f0:99:ad: cc:4f:ff:ed:09:54:43:79:08:d8:a4:42:00:3a:e7: 9e:a0:48:5f:60:3c:31:ed:d6:ae:e1:07:4f:22:a1: 87:ae:6c:28:a8:d9:b0:b6:81:4e:3e:fe:88:71:d7: 48:6a:56:38:57:2b:9e:26:8d:c0:85:fb:26:76:73: 4d:4b:23:98:01:50:8c:d6:4b:3d:c3:b4:51:32:50: a1:15:1f:09:2d:d9:63:fb:e2:21:48:47:8d:13:80: 1d:81:f1:bb:ba:2c:28:3f:d1:02:69:01:44:22:f9: f5:de:60:f9:50:2d:00:de:3e:1b:1f:d0:82:dd:8a: 9f:64:65:a7:a8:97:db:5a:4b:39:c6:2b:7d:e8:39: db:39:d1:d6:b3:d4:96:84:ce:9b:2c:e2:2f:fc:56: d4:e6:29:78:8e:b5:b4:28:30:7b:f5:4c:41:cc:68: cc:9a:0e:57:57:ca:f6:68:c9:34:53:45:3b:2e:ba: 09:fb:94:65:93:f8:f8:1a:81:bf:8a:98:d3:9f:ee: 23:c4:79:a7:99:83:fb:3d:f3:cd:28:ef:5d:5e:dc: 84:a2:b7:38:97:c2:37:f6:11:ae:88:39:4a:7c:83: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A4:F5:9D:B2:9D:2C:1E:E9:AD:73:1E:85:80:2B:FF:E8:61:C3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:53:13:e0:b7:2a:d0:24:5b:ad:f3:3c:6e:38:dd:84:02:e6: d9:ea:00:5c:68:60:ec:86:2d:e1:4f:f0:9d:b0:c0:b9:bd:81: 91:30:17:10:6d:7e:bb:4f:01:de:69:5f:37:63:87:5e:d2:0a: a9:29:5c:c8:f1:ff:d4:b7:97:29:63:12:15:d1:d9:6b:22:86: 6a:c9:ae:48:4f:a8:41:be:25:63:da:a3:a8:f9:8c:13:8f:c4: ed:f8:a9:52:d3:a1:3f:a2:40:8a:2a:ff:00:97:31:9e:1e:2d: f2:89:bd:e5:1c:70:39:60:c5:b3:42:e3:b0:31:ff:24:ed:23: 6c:02:89:62:87:82:37:86:f2:8a:f1:70:bb:2c:ab:dc:59:5b: de:bb:8a:f0:57:b3:df:d4:ca:8e:9c:75:76:25:44:c0:f5:ba: 49:6a:51:50:9b:e1:1f:b6:2d:3d:d1:69:33:57:b9:f7:cd:6c: 5a:ad:76:98:de:f1:72:97:65:08:df:3d:13:69:cd:3b:89:33: 30:e3:c7:cf:4c:af:6a:4a:21:35:8b:6c:82:a0:80:f0:ea:78: 67:cc:4d:42:45:2c:dc:79:69:1b:f3:e3:50:53:23:a4:ae:9d: 10:e5:4d:f8:29:d9:0c:02:74:a1:e9:43:fd:93:7d:4c:9b:74: 1b:a4:ce:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwoViNrB9BSluX2c/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NDkxN2Q1NGMtNWJlNS00YmM0LTkxZjEtNTM1NGIwNjhmMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+sJnmNhSASg7w1d9l2Wxisso4WbClMVIvw ma3MT//tCVRDeQjYpEIAOueeoEhfYDwx7dau4QdPIqGHrmwoqNmwtoFOPv6IcddI alY4VyueJo3AhfsmdnNNSyOYAVCM1ks9w7RRMlChFR8JLdlj++IhSEeNE4AdgfG7 uiwoP9ECaQFEIvn13mD5UC0A3j4bH9CC3YqfZGWnqJfbWks5xit96DnbOdHWs9SW hM6bLOIv/FbU5il4jrW0KDB79UxBzGjMmg5XV8r2aMk0U0U7LroJ+5Rlk/j4GoG/ ipjTn+4jxHmnmYP7PfPNKO9dXtyEorc4l8I39hGuiDlKfIP3wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyk9Z2ynSwe6a1zHoWAK//oYcNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBmOGRjMzUtOWY2YS0z MmQ5LTliMDUtNDU5OWVmYWNhMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVTE+C3KtAkW63zPG443YQC5tnqAFxoYOyGLeFP8J2wwLm9gZEw FxBtfrtPAd5pXzdjh17SCqkpXMjx/9S3lyljEhXR2WsihmrJrkhPqEG+JWPao6j5 jBOPxO34qVLToT+iQIoq/wCXMZ4eLfKJveUccDlgxbNC47Ax/yTtI2wCiWKHgjeG 8orxcLssq9xZW967ivBXs9/Uyo6cdXYlRMD1uklqUVCb4R+2LT3RaTNXuffNbFqt dpje8XKXZQjfPRNpzTuJMzDjx89Mr2pKITWLbIKggPDqeGfMTUJFLNx5aRvz41BT I6SunRDlTfgp2QwCdKHpQ/2TfUybdBukzik= -----END CERTIFICATE-----Generated at Fri Dec 19 14:18:20 2025 by rpki-client