This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa File: 3caf627e-f520-30d0-af6f-c5a07013dd67.roa (raw, json) Hash identifier: jcoLdqkZHNL6FBih7l8A/bGKB2OG9/qbt6fL13goW/g= Subject key identifier: F6:7D:E0:62:5B:A6:B1:15:04:CC:60:09:27:26:1E:CF:5B:B4:2E:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC6BF01CDEEC3096B5BAE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396543 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:bf:01:cd:ee:c3:09:6b:5b:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=ff845fce-1dac-4ff8-9629-4b9012996cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:1c:be:e3:16:d5:48:75:62:58:28:d4:c6: 23:89:02:99:05:58:95:d0:c3:d6:a9:7e:1e:65:3c: 47:6d:3d:6d:c5:9e:35:89:37:6c:26:a5:5d:2c:a1: 8c:f4:b1:fb:f2:c9:f1:5d:47:3f:58:4a:f9:19:c4: bd:36:b0:c0:8c:69:69:0e:92:97:d2:44:f7:ca:d6: 33:d7:94:8a:cf:48:cb:f4:60:cb:37:14:b8:8b:40: cc:6a:44:5e:ef:92:6f:26:9b:f2:03:c3:11:d5:9e: 22:dc:81:92:1a:db:a3:7a:e3:60:93:f6:d3:18:c9: 84:fa:71:dc:74:d8:ed:a3:9c:28:b4:ed:b6:18:d8: 37:e1:9f:c1:45:bc:e6:71:37:80:7e:00:10:28:f9: b1:a2:fd:e9:3d:4b:48:22:46:f3:e0:6b:fb:f8:f9: d6:e5:94:b9:b9:31:c4:b7:f1:6f:19:c2:d9:aa:f7: a9:a1:2f:79:da:23:64:52:97:a4:1f:4f:f9:21:6a: 0d:7c:3b:64:61:00:06:c4:91:f4:63:41:68:d5:9e: 0a:2a:1a:87:78:c3:bd:c0:5c:c9:c4:3d:6b:cb:9a: 46:76:0c:39:e8:c7:f9:76:88:7e:f9:f3:01:47:63: d6:12:a1:9a:5e:8f:13:b3:d1:2b:a1:89:89:47:40: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:E0:62:5B:A6:B1:15:04:CC:60:09:27:26:1E:CF:5B:B4:2E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:77:b5:18:47:94:16:80:81:26:e1:1a:d4:7d:cc:08:9b:d8: b6:c8:a4:a3:d0:73:f6:83:33:4c:d8:9a:0f:31:ae:cd:88:cd: 53:63:99:39:05:c4:be:a7:d1:9d:b6:8d:47:31:22:24:79:f3: ae:3e:5f:09:fc:f2:ca:b7:f7:4b:1a:87:94:7d:fa:84:fc:7b: 60:57:58:66:47:73:8c:2f:36:ce:02:74:c4:28:47:6f:9c:92: 52:fe:b3:af:e9:13:71:25:6a:56:b3:22:4f:4d:f4:be:49:c3: bb:df:18:0d:07:2c:b7:44:04:af:d3:aa:2e:b8:c9:fe:91:09: 8c:30:cf:aa:4f:68:85:93:32:ed:8f:5b:cd:09:7e:93:cb:83: 71:ca:ef:15:91:ad:d5:eb:03:c6:47:4a:6b:72:27:c7:83:04: 36:e6:2e:14:dc:ba:44:aa:21:85:86:cb:b9:f6:39:a8:9d:98: 96:a0:63:3b:dc:9e:3d:d4:53:17:3b:dc:db:9d:eb:07:79:4b: 09:e0:a5:7a:cc:7f:3b:98:2e:8e:8b:1d:43:a1:15:17:2d:81: f3:f2:b4:55:1a:7c:8e:0f:fa:1d:c6:9e:2d:c6:f9:a5:2f:e4: 1f:6e:d9:82:c5:e5:be:fa:fd:f0:30:1d:03:5b:77:89:d3:54: e3:f6:81:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExexr8Bze7DCWtbrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ZmY4NDVmY2UtMWRhYy00ZmY4LTk2MjktNGI5MDEyOTk2Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUIcvuMW1Uh1Ylgo1MYjiQKZBViV0MPWqX4e ZTxHbT1txZ41iTdsJqVdLKGM9LH78snxXUc/WEr5GcS9NrDAjGlpDpKX0kT3ytYz 15SKz0jL9GDLNxS4i0DMakRe75JvJpvyA8MR1Z4i3IGSGtujeuNgk/bTGMmE+nHc dNjto5wotO22GNg34Z/BRbzmcTeAfgAQKPmxov3pPUtIIkbz4Gv7+PnW5ZS5uTHE t/FvGcLZqvepoS952iNkUpekH0/5IWoNfDtkYQAGxJH0Y0Fo1Z4KKhqHeMO9wFzJ xD1ry5pGdgw56Mf5doh++fMBR2PWEqGaXo8Ts9EroYmJR0DPQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPZ94GJbprEVBMxgCScmHs9btC64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NhZjYyN2UtZjUyMC0z MGQwLWFmNmYtYzVhMDcwMTNkZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJN3tRhHlBaAgSbhGtR9zAib2LbIpKPQc/aDM0zYmg8xrs2IzVNj mTkFxL6n0Z22jUcxIiR5864+Xwn88sq390sah5R9+oT8e2BXWGZHc4wvNs4CdMQo R2+cklL+s6/pE3ElalazIk9N9L5Jw7vfGA0HLLdEBK/Tqi64yf6RCYwwz6pPaIWT Mu2PW80JfpPLg3HK7xWRrdXrA8ZHSmtyJ8eDBDbmLhTcukSqIYWGy7n2OaidmJag Yzvcnj3UUxc73Nud6wd5SwngpXrMfzuYLo6LHUOhFRctgfPytFUafI4P+h3Gni3G +aUv5B9u2YLF5b76/fAwHQNbd4nTVOP2gW4= -----END CERTIFICATE-----Generated at Mon Jan 26 06:39:46 2026 by rpki-client