This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ca20c38-5e14-3ced-bf8d-07595a0fe6b9.roa File: 8ca20c38-5e14-3ced-bf8d-07595a0fe6b9.roa (raw, json) Hash identifier: N+mPEBySGDO014TDbK70oi0oZCOgG36zhKtEZdVRezo= Subject key identifier: 70:A7:10:D0:E8:E0:2B:EA:54:8C:89:16:90:0C:94:01:68:34:8A:33 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C45A68D23F4469AC133365E10 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ca20c38-5e14-3ced-bf8d-07595a0fe6b9.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 205184 IP address blocks: 2001:470:443::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:8d:23:f4:46:9a:c1:33:36:5e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=177d41a7-4e96-4068-b17e-064cc3f26b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:aa:83:4a:91:84:ab:ad:83:bf:c1:ad:33: 3e:4e:32:0a:1c:2c:a9:18:cc:43:71:00:3e:7f:88: 77:06:d1:2a:88:7d:1c:50:66:92:fa:8a:c2:00:db: 35:f4:30:cb:39:b0:a2:c0:3d:dd:28:ae:0d:d2:35: b8:9f:c1:28:fd:5d:4b:54:d0:1b:58:4b:98:6c:4e: 58:73:f2:19:ae:a2:0f:91:b5:26:46:1a:fe:7c:86: ac:dc:d8:d6:11:a8:53:ce:8f:9c:27:88:74:a0:e8: 81:65:74:87:f1:93:a5:e8:42:d3:32:ed:14:50:a6: d4:e1:75:a6:0c:be:24:d7:90:77:49:6b:af:0c:7d: 3f:fa:c2:b7:2f:4b:b9:b0:19:dc:76:fc:57:01:00: 98:c2:50:b1:1b:5a:fc:8f:42:e0:25:73:bc:d2:62: ae:17:2b:3d:ab:ae:58:c3:b7:a2:50:17:91:6c:12: 8f:e3:99:07:56:20:05:1a:35:87:35:5e:11:c0:73: 21:48:f5:c1:d9:f4:af:82:6f:e7:0c:08:c2:3d:05: e2:ae:38:f8:64:5e:85:a2:a4:c3:43:13:a3:ef:60: 7f:86:b6:73:57:41:20:93:55:05:d7:e6:09:90:c5: 10:3f:4e:73:bd:f2:2d:58:91:9d:89:0a:18:fb:b9: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A7:10:D0:E8:E0:2B:EA:54:8C:89:16:90:0C:94:01:68:34:8A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ca20c38-5e14-3ced-bf8d-07595a0fe6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:443::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:da:47:f9:79:d2:b3:97:f9:7d:9c:19:4c:de:da:ca:3c:dc: b7:b3:7b:92:1b:05:b4:fa:f8:81:57:d9:0d:a7:9a:22:34:ee: b1:92:5a:b3:0c:35:cd:28:24:86:dd:24:5f:82:82:66:81:78: 8d:21:a6:5f:04:4f:14:99:ee:cf:61:30:8b:6c:79:db:7c:ea: 52:92:83:67:eb:b0:95:3a:90:3a:86:d8:02:3d:89:f9:7d:a5: 90:a4:ec:a8:5b:72:a5:05:5a:0e:ab:79:74:30:f9:e8:e3:b9: 14:93:24:6f:a0:d2:d7:b0:62:5d:57:99:f5:dd:1b:08:8d:a2: 49:f6:49:ce:91:05:cd:36:f6:96:08:4b:89:e2:0a:bd:44:05: 1b:8a:13:35:1b:1a:75:02:8e:47:22:44:8e:55:93:56:e6:db: 56:c1:11:7e:dc:91:17:4c:ad:c9:42:7a:31:9d:7b:2d:c9:46: a3:13:e5:b7:35:e3:f8:9c:66:a8:a3:02:86:76:5d:ad:ff:1f: 78:44:fd:69:25:4b:3f:dd:12:e9:48:06:86:e4:1e:4d:6d:75: 7a:f3:60:19:7a:2f:56:9d:9e:bb:65:35:3d:8a:1b:9b:98:7b: 36:9d:1d:c5:53:84:31:e4:2b:7b:53:f3:32:47:3b:04:a0:a8: e3:7b:6c:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpo0j9EaawTM2XhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MTc3ZDQxYTctNGU5Ni00MDY4LWIxN2UtMDY0Y2MzZjI2YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R6qg0qRhKutg7/BrTM+TjIKHCypGMxDcQA+ f4h3BtEqiH0cUGaS+orCANs19DDLObCiwD3dKK4N0jW4n8Eo/V1LVNAbWEuYbE5Y c/IZrqIPkbUmRhr+fIas3NjWEahTzo+cJ4h0oOiBZXSH8ZOl6ELTMu0UUKbU4XWm DL4k15B3SWuvDH0/+sK3L0u5sBncdvxXAQCYwlCxG1r8j0LgJXO80mKuFys9q65Y w7eiUBeRbBKP45kHViAFGjWHNV4RwHMhSPXB2fSvgm/nDAjCPQXirjj4ZF6FoqTD QxOj72B/hrZzV0Egk1UF1+YJkMUQP05zvfItWJGdiQoY+7njwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCnENDo4CvqVIyJFpAMlAFoNIozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGNhMjBjMzgtNWUxNC0z Y2VkLWJmOGQtMDc1OTVhMGZlNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJraR/l50rOX+X2cGUze2so83Leze5IbBbT6+IFX2Q2nmiI07rGS WrMMNc0oJIbdJF+CgmaBeI0hpl8ETxSZ7s9hMItsedt86lKSg2frsJU6kDqG2AI9 ifl9pZCk7KhbcqUFWg6reXQw+ejjuRSTJG+g0tewYl1XmfXdGwiNokn2Sc6RBc02 9pYIS4niCr1EBRuKEzUbGnUCjkciRI5Vk1bm21bBEX7ckRdMrclCejGdey3JRqMT 5bc14/icZqijAoZ2Xa3/H3hE/WklSz/dEulIBobkHk1tdXrzYBl6L1adnrtlNT2K G5uYezadHcVThDHkK3tT8zJHOwSgqON7bJI= -----END CERTIFICATE-----Generated at Sun Jan 25 11:00:20 2026 by rpki-client