This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa File: bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa (raw, json) Hash identifier: b3TD5PE0vCklbixZ4GUf4g2bwuZ5mcFEH7adrXCX850= Subject key identifier: C7:E2:46:9A:31:4C:3A:BF:25:2B:13:21:3F:C9:57:87:13:B9:4F:7F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BF8E0B906F5E540119B26B200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 14012 IP address blocks: 2001:470:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:b9:06:f5:e5:40:11:9b:26:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=bb03f047-2571-4802-bba3-c6abb14fa5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:f8:2e:10:00:f1:22:45:29:d2:07:09:1b: bf:80:13:1a:68:5d:68:98:c2:61:ab:31:29:f2:45: bc:17:7b:6a:37:48:96:73:13:b8:e7:fa:0c:44:de: 48:23:04:3c:1f:68:c8:2c:1d:e2:1e:a6:20:b6:6a: 44:58:ec:88:5c:13:8e:d6:f1:bb:6f:91:ea:f0:68: a0:a7:44:54:75:8c:39:4e:9b:29:da:b1:65:62:ea: b4:36:a8:06:04:b2:af:50:6a:47:02:98:5e:bd:84: 71:96:05:0a:c8:31:93:c8:13:08:bc:35:79:3c:9f: 3f:fe:24:4a:f8:48:67:29:4a:c5:f9:7c:f0:4f:b3: e3:fe:19:49:25:bb:99:1d:21:ca:ef:99:16:f4:e1: 55:54:18:98:27:f7:05:ba:38:bc:64:59:2d:64:4d: 20:ed:85:30:b6:3b:68:bb:30:3c:d9:7f:52:69:28: 5d:1f:5b:09:72:93:88:74:1e:81:ee:d7:e6:06:11: c9:59:61:92:ae:38:81:67:52:0a:10:fa:ca:e0:4d: a0:92:60:b9:9e:60:fd:24:a9:28:41:78:b8:2b:78: 62:34:be:d1:6e:1a:49:f1:2f:f5:5d:22:cd:d8:ae: 70:a1:64:09:19:e1:87:25:be:5a:13:13:a7:c9:04: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:46:9A:31:4C:3A:BF:25:2B:13:21:3F:C9:57:87:13:B9:4F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:110::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c8:0d:53:84:f8:95:ae:cf:21:c6:a4:bb:0b:56:62:5f:0c: 10:bd:30:ec:ad:b0:da:8e:e5:a6:20:5c:0f:f2:af:06:13:4c: 57:0e:44:fe:61:6f:83:68:17:d1:6c:f0:a0:85:41:53:b1:a3: 75:ee:4e:a8:01:89:28:8a:4c:5f:48:9c:ce:6e:58:19:81:c5: f4:fd:5d:db:b6:28:38:a1:b5:e7:ff:76:ac:b6:a8:9a:d9:be: 70:3c:e2:99:38:1a:7b:d2:f9:be:2c:be:45:88:ac:b7:1d:09: 3f:f0:91:2b:32:b9:90:3c:46:d5:6a:0c:96:49:6d:a4:b8:28: d2:55:cc:0b:75:8f:a9:9e:04:25:1e:5d:8a:b3:18:56:83:c1: d7:2b:97:04:72:08:59:1a:1a:f5:8f:d1:e2:2a:65:8a:19:c1: db:8d:da:ce:f9:cd:e7:36:32:61:8c:fc:d4:f6:77:a3:8a:d9: 3c:f7:26:2f:ae:5e:9f:9a:d2:2e:c0:57:ce:84:d6:18:70:3c: 67:b0:0b:df:3e:1c:55:c1:13:76:56:03:71:90:31:60:0a:5d: 1d:80:3f:7d:52:78:59:81:d0:87:07:cd:a2:b3:68:8b:7f:16: 6d:0f:b4:f5:29:e6:74:e1:ea:2d:21:d0:9f:9d:6e:51:dc:d4: c6:4f:ff:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv44LkG9eVAEZsmsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YmIwM2YwNDctMjU3MS00ODAyLWJiYTMtYzZhYmIxNGZhNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvL4LhAA8SJFKdIHCRu/gBMaaF1omMJhqzEp 8kW8F3tqN0iWcxO45/oMRN5IIwQ8H2jILB3iHqYgtmpEWOyIXBOO1vG7b5Hq8Gig p0RUdYw5Tpsp2rFlYuq0NqgGBLKvUGpHAphevYRxlgUKyDGTyBMIvDV5PJ8//iRK +EhnKUrF+XzwT7Pj/hlJJbuZHSHK75kW9OFVVBiYJ/cFuji8ZFktZE0g7YUwtjto uzA82X9SaShdH1sJcpOIdB6B7tfmBhHJWWGSrjiBZ1IKEPrK4E2gkmC5nmD9JKko QXi4K3hiNL7RbhpJ8S/1XSLN2K5woWQJGeGHJb5aExOnyQRCOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMfiRpoxTDq/JSsTIT/JV4cTuU9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1MWRkMDYtN2JlMi0z ZTNjLWI5OTctODFkYzJjMGRiNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/IDVOE+JWuzyHGpLsLVmJfDBC9MOytsNqO5aYgXA/yrwYTTFcO RP5hb4NoF9Fs8KCFQVOxo3XuTqgBiSiKTF9InM5uWBmBxfT9Xdu2KDihtef/dqy2 qJrZvnA84pk4GnvS+b4svkWIrLcdCT/wkSsyuZA8RtVqDJZJbaS4KNJVzAt1j6me BCUeXYqzGFaDwdcrlwRyCFkaGvWP0eIqZYoZwduN2s75zec2MmGM/NT2d6OK2Tz3 Ji+uXp+a0i7AV86E1hhwPGewC98+HFXBE3ZWA3GQMWAKXR2AP31SeFmB0IcHzaKz aIt/Fm0PtPUp5nTh6i0h0J+dblHc1MZP/zs= -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:41 2025 by rpki-client