This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa File: 3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa (raw, json) Hash identifier: 4MUJDBy4l3G6OWaWqeVc0Hc7FC/Sue06gPJjWXtEqLc= Subject key identifier: AE:A0:AA:CF:62:94:6D:E6:44:89:C1:B1:B5:FB:C9:F6:9D:67:CE:4E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C593145FFC47E4DF44C334FF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 396600 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:45:ff:c4:7e:4d:f4:4c:33:4f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=9ff03cc1-7bdd-40d3-a23a-70191a55bbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:b6:3e:ff:28:11:0f:2e:d8:f7:9a:20:14: e7:6e:2c:95:28:f8:f6:22:71:0c:6f:fb:09:00:6f: 2b:c9:02:d3:55:1d:98:f3:17:9c:c8:89:42:be:c5: be:fb:96:8a:f8:b2:e7:ea:ef:43:9f:64:5a:0d:61: 35:35:48:f3:ff:9e:b6:ee:bd:00:2a:a3:9e:88:40: 83:25:60:d1:cd:0d:80:f8:06:93:1b:7c:1c:b8:98: 74:f7:02:ed:ab:3e:17:a8:9e:fc:ec:33:41:f0:32: 99:05:18:91:d4:84:94:c2:b3:42:34:99:59:26:25: 80:a8:a0:c1:4b:d4:06:c6:ce:eb:cf:6a:e6:5b:04: 9b:f3:2f:00:6d:ff:7f:7b:8f:bd:43:64:a4:c5:85: 7d:95:f6:fe:2d:c6:d1:52:49:1c:4c:5a:d4:36:ca: 68:7e:0b:37:61:49:b2:4d:82:33:81:80:c7:55:f0: 66:93:e9:fa:cd:54:c8:c1:de:52:27:63:a0:95:90: 93:66:c8:dc:26:bd:31:c4:1f:78:2d:ae:ac:5f:3d: ea:45:9d:58:b0:3f:98:c7:5f:3e:dd:99:f4:ab:76: d0:c2:84:cf:6a:8e:d6:6e:07:0d:cc:88:49:3b:36: a2:a5:32:99:91:45:0e:85:71:da:41:1f:b1:8c:59: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:AA:CF:62:94:6D:E6:44:89:C1:B1:B5:FB:C9:F6:9D:67:CE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:72:a3:95:0d:c1:87:b0:10:36:d6:cd:cf:d0:df:20:ff:ae: c6:9b:3a:40:ed:47:e3:a7:2c:23:57:20:03:70:25:25:bb:02: 04:c7:57:79:de:65:9e:11:a9:2d:c1:2f:f0:da:12:4d:05:a7: 27:56:04:34:86:f6:02:5e:33:d7:a2:e5:26:85:96:37:30:ea: 93:6e:ac:b2:87:0e:8f:82:58:a5:b6:07:e5:7a:c2:2c:50:31: bf:81:1a:d3:12:e3:73:91:5f:91:94:88:32:ec:e6:54:5a:03: 0e:65:45:0a:71:14:0c:c5:28:0c:96:d7:23:fd:49:07:57:f8: 93:bd:fa:4e:4f:87:47:a5:75:6e:ee:75:ab:7c:39:71:58:cd: 11:84:88:ef:39:c5:51:43:44:36:64:b2:a7:1f:dc:1e:fa:dd: 2e:39:14:ce:79:37:f8:ce:c5:dc:36:ee:ee:3a:aa:a5:06:4e: d1:78:de:9b:3a:b4:d0:e3:9a:92:3a:38:8c:9e:91:b5:83:fb: e7:6f:77:ac:ef:b8:8d:b5:d0:69:5a:fb:c2:6d:01:c6:a1:af: 87:58:ea:b9:d9:34:81:1f:b7:6a:8a:00:08:d9:64:db:ae:4f: 62:0f:5f:56:59:de:66:f9:b0:6a:00:0b:71:7b:71:d2:cf:d1: af:51:31:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExZMUX/xH5N9EwzT/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk OWZmMDNjYzEtN2JkZC00MGQzLWEyM2EtNzAxOTFhNTViYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfS2Pv8oEQ8u2PeaIBTnbiyVKPj2InEMb/sJ AG8ryQLTVR2Y8xecyIlCvsW++5aK+LLn6u9Dn2RaDWE1NUjz/5627r0AKqOeiECD JWDRzQ2A+AaTG3wcuJh09wLtqz4XqJ787DNB8DKZBRiR1ISUwrNCNJlZJiWAqKDB S9QGxs7rz2rmWwSb8y8Abf9/e4+9Q2SkxYV9lfb+LcbRUkkcTFrUNspofgs3YUmy TYIzgYDHVfBmk+n6zVTIwd5SJ2OglZCTZsjcJr0xxB94La6sXz3qRZ1YsD+Yx18+ 3Zn0q3bQwoTPao7WbgcNzIhJOzaipTKZkUUOhXHaQR+xjFlPsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6gqs9ilG3mRInBsbX7yfadZ85OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NkNDE2ZDUtMGJmYS0z MjU0LWEzMWEtYzcyMTRiZTBhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5yo5UNwYewEDbWzc/Q3yD/rsabOkDtR+OnLCNXIANwJSW7AgTH V3neZZ4RqS3BL/DaEk0FpydWBDSG9gJeM9ei5SaFljcw6pNurLKHDo+CWKW2B+V6 wixQMb+BGtMS43ORX5GUiDLs5lRaAw5lRQpxFAzFKAyW1yP9SQdX+JO9+k5Ph0el dW7udat8OXFYzRGEiO85xVFDRDZksqcf3B763S45FM55N/jOxdw27u46qqUGTtF4 3ps6tNDjmpI6OIyekbWD++dvd6zvuI210Gla+8JtAcahr4dY6rnZNIEft2qKAAjZ ZNuuT2IPX1ZZ3mb5sGoAC3F7cdLP0a9RMWw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:13:10 2026 by rpki-client