This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa File: 861a26ab-6131-3d0c-a178-989633be4886.roa (raw, json) Hash identifier: 3qOk8UyZTGGGLd3sCtvnBOOQyKBJBQqgbzq7xKywbZk= Subject key identifier: 25:02:F5:25:63:35:3F:E1:E3:25:F2:B6:E9:CD:EF:49:4A:03:C0:58 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BEAEB54DDC22A4B94204F6C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 43180 IP address blocks: 2001:470:341::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:54:dd:c2:2a:4b:94:20:4f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=1db6e0f4-fa9e-4db0-9a2e-76c076645a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:cd:03:21:70:c5:d8:9f:35:57:af:82:7c: 8d:bd:1c:8c:11:14:00:f4:af:82:0a:81:01:e0:5c: 77:15:5e:7a:14:1a:6f:98:ec:28:03:4c:06:f4:11: 77:1b:fd:1e:95:6b:d3:d0:da:58:0b:04:35:27:3a: 9b:31:38:3d:19:a7:72:0f:52:12:6b:04:c3:80:8d: 3b:52:e0:0e:3a:88:1c:17:57:2a:a5:10:29:56:7f: e0:bf:c8:7d:ee:d6:6b:ac:4f:da:75:04:51:ef:50: 5b:ff:27:cc:92:b9:4a:33:55:71:8c:c0:d8:84:1b: 2a:10:b8:24:7c:3c:4f:5e:27:56:a6:4b:58:25:2c: 16:6c:31:41:e2:57:61:91:ad:a7:a6:da:b1:10:a2: c7:5d:35:13:dd:cb:82:3d:80:ea:a7:62:d1:bc:b2: e2:d8:a1:9a:b1:59:43:e0:76:1b:95:71:65:3f:be: c2:c5:c5:6f:12:4d:2f:f8:01:f5:7b:f4:ca:61:f6: f7:2a:4f:7f:d1:94:9e:09:88:1a:3a:d7:85:11:2a: 08:35:04:5a:ed:39:75:37:a7:09:03:92:f8:81:30: d9:d9:ef:6c:8c:36:ae:54:9e:94:63:57:30:26:cb: 1b:5a:bc:5a:ea:2a:9d:d7:b1:8e:76:6f:e5:43:70: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:F5:25:63:35:3F:E1:E3:25:F2:B6:E9:CD:EF:49:4A:03:C0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:341::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:15:da:5d:cc:f2:2b:66:90:ac:81:39:ed:31:80:8e:0b:e1: 89:51:08:4d:1f:bc:27:49:2a:de:54:82:db:82:39:9b:64:86: 61:ae:23:ae:5d:2a:82:c8:03:58:e7:24:94:10:02:6e:f8:02: e8:bd:c7:d8:b5:dc:5f:b3:64:4e:16:c4:cc:40:ed:37:1f:01: a6:0f:d4:84:b4:bc:c8:f5:a6:b0:7a:58:0d:7a:f3:ad:d7:ac: 46:91:e3:6e:13:7e:88:c7:9b:e8:56:bc:9f:47:d6:5c:5f:02: 4f:00:df:82:f7:73:e8:52:d7:35:51:4c:0d:5b:b2:26:2a:50: 5c:85:00:08:8f:65:44:f4:63:32:b0:35:3e:64:c2:f2:3d:f3: e9:9e:28:33:84:05:6c:4b:fe:26:d8:68:95:15:eb:c3:ab:57: c3:ae:b1:a3:73:54:e5:05:1f:08:bc:8d:d3:1e:f7:32:e4:6b: 15:4a:d3:3e:38:18:ad:dd:94:67:95:72:25:b4:ad:d4:5d:77: 39:53:21:13:cc:6c:7b:21:be:b2:84:61:e8:f5:33:e4:c4:87: 30:00:3a:06:12:10:97:4e:7c:13:2a:c4:06:9d:db:8a:73:3c: 7a:f7:e6:dc:36:33:b8:79:30:c0:60:99:11:15:78:70:a8:6f: 04:2b:e2:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvq61TdwipLlCBPbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk MWRiNmUwZjQtZmE5ZS00ZGIwLTlhMmUtNzZjMDc2NjQ1YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdzNAyFwxdifNVevgnyNvRyMERQA9K+CCoEB 4Fx3FV56FBpvmOwoA0wG9BF3G/0elWvT0NpYCwQ1JzqbMTg9GadyD1ISawTDgI07 UuAOOogcF1cqpRApVn/gv8h97tZrrE/adQRR71Bb/yfMkrlKM1VxjMDYhBsqELgk fDxPXidWpktYJSwWbDFB4ldhka2nptqxEKLHXTUT3cuCPYDqp2LRvLLi2KGasVlD 4HYblXFlP77CxcVvEk0v+AH1e/TKYfb3Kk9/0ZSeCYgaOteFESoINQRa7Tl1N6cJ A5L4gTDZ2e9sjDauVJ6UY1cwJssbWrxa6iqd17GOdm/lQ3CtJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUC9SVjNT/h4yXytunN70lKA8BYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODYxYTI2YWItNjEzMS0z ZDBjLWExNzgtOTg5NjMzYmU0ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUV2l3M8itmkKyBOe0xgI4L4YlRCE0fvCdJKt5UgtuCOZtkhmGu I65dKoLIA1jnJJQQAm74Aui9x9i13F+zZE4WxMxA7TcfAaYP1IS0vMj1prB6WA16 863XrEaR424TfojHm+hWvJ9H1lxfAk8A34L3c+hS1zVRTA1bsiYqUFyFAAiPZUT0 YzKwNT5kwvI98+meKDOEBWxL/ibYaJUV68OrV8OusaNzVOUFHwi8jdMe9zLkaxVK 0z44GK3dlGeVciW0rdRddzlTIRPMbHshvrKEYej1M+TEhzAAOgYSEJdOfBMqxAad 24pzPHr35tw2M7h5MMBgmREVeHCobwQr4hc= -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:13 2025 by rpki-client