This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabb99aa-23b7-3c41-bdac-81e0134e0a43.roa File: dabb99aa-23b7-3c41-bdac-81e0134e0a43.roa (raw, json) Hash identifier: GkskIbVNuD1r3KfA5XkpPnZ5zGhEyHl8XZDZ5cpUliQ= Subject key identifier: 0A:17:23:DA:93:A8:FC:A9:F2:45:E5:43:F5:F3:09:23:AC:80:A1:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C593169DAABAA293D7D17CD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabb99aa-23b7-3c41-bdac-81e0134e0a43.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 396611 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:69:da:ab:aa:29:3d:7d:17:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=0885860a-1f04-45f1-aebe-d70fb5f23b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:80:36:ec:7c:a9:3e:1c:97:a0:ac:cf:af: ce:ea:db:d7:ce:14:2e:18:b8:0e:1e:4f:a1:bf:d6: 0e:6a:50:9b:e7:10:4b:75:bc:90:0a:ef:49:5b:90: ce:c2:7b:aa:5d:ca:a6:3b:70:b5:65:82:60:f8:7b: 19:fa:64:1b:54:3d:ca:fb:e9:54:81:0a:7a:f4:7e: 94:ec:ed:31:43:08:48:48:ed:a9:f1:b1:f9:62:b4: 15:35:0f:e8:bf:4c:a5:70:19:b7:1e:ed:05:b2:0a: ac:87:d4:18:e2:f1:81:74:84:7d:2f:c4:f4:ad:ad: 42:c3:99:b1:e0:7b:0a:47:a8:69:41:48:9b:00:6d: cb:d7:6e:08:ae:07:98:95:f9:08:55:bc:f6:c5:ef: 88:da:e9:dc:e2:2e:f0:78:dc:ed:c3:56:72:fb:4d: dd:57:69:fb:00:10:9e:17:ae:f9:7b:cf:f0:29:45: ee:d8:71:9e:1e:55:3d:ee:be:cc:54:9c:26:96:db: c7:5a:69:75:6a:23:19:09:1c:6b:b9:59:74:04:06: 9f:6b:c4:15:9d:15:2c:e8:b4:af:e5:9a:80:34:79: 80:2d:06:74:75:22:60:dd:bb:b4:e9:6e:53:87:63: 82:b8:73:33:31:cf:50:8e:25:7a:d8:dd:a5:ab:b1: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:23:DA:93:A8:FC:A9:F2:45:E5:43:F5:F3:09:23:AC:80:A1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabb99aa-23b7-3c41-bdac-81e0134e0a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:84:99:6d:7c:f5:97:0e:1a:23:09:4c:a1:18:cd:4b:ff:3d: dd:30:4a:f1:5a:e0:4d:cc:99:09:09:eb:8c:4c:f9:0f:b1:06: 0a:0f:f1:6e:85:55:2a:10:4b:cd:88:c0:4a:8a:26:98:82:a7: a3:a0:84:6e:06:44:ea:d7:1c:f2:c4:62:0c:7d:e4:ae:4d:f3: 17:0d:9d:f4:b2:82:ba:b4:c6:54:ea:62:85:e3:0d:f9:08:49: 8c:42:f1:ed:0c:7d:e4:90:ce:d4:b0:49:75:de:40:57:90:eb: e9:b7:9a:27:6e:7a:16:e1:ea:ae:3f:75:d1:15:b2:04:d0:37: 79:51:de:29:1b:19:2e:68:df:57:7c:df:db:7c:30:de:26:3e: 7e:c8:01:9c:3c:64:61:82:f5:74:f3:25:0c:95:6a:0f:d8:b0: a2:b0:44:07:3a:3b:73:9c:aa:31:05:5b:16:9b:ce:d0:7a:1f: d5:c8:f7:32:33:8a:9e:92:dc:60:11:75:d5:84:06:0e:ae:2a: b6:69:3a:23:83:3f:70:f3:e1:af:52:ce:f0:24:16:b0:af:51: 88:4d:c8:dd:8b:96:aa:65:d1:13:e1:14:5b:3c:be:64:84:cd: a2:bb:86:7d:fd:6f:81:db:49:97:87:a8:60:a5:8f:8e:da:a7: 07:85:aa:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExZMWnaq6opPX0XzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk MDg4NTg2MGEtMWYwNC00NWYxLWFlYmUtZDcwZmI1ZjIzYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla+ANux8qT4cl6Csz6/O6tvXzhQuGLgOHk+h v9YOalCb5xBLdbyQCu9JW5DOwnuqXcqmO3C1ZYJg+HsZ+mQbVD3K++lUgQp69H6U 7O0xQwhISO2p8bH5YrQVNQ/ov0ylcBm3Hu0Fsgqsh9QY4vGBdIR9L8T0ra1Cw5mx 4HsKR6hpQUibAG3L124IrgeYlfkIVbz2xe+I2unc4i7weNztw1Zy+03dV2n7ABCe F675e8/wKUXu2HGeHlU97r7MVJwmltvHWml1aiMZCRxruVl0BAafa8QVnRUs6LSv 5ZqANHmALQZ0dSJg3bu06W5Th2OCuHMzMc9QjiV62N2lq7G/RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoXI9qTqPyp8kXlQ/XzCSOsgKGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFiYjk5YWEtMjNiNy0z YzQxLWJkYWMtODFlMDEzNGUwYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSEmW189ZcOGiMJTKEYzUv/Pd0wSvFa4E3MmQkJ64xM+Q+xBgoP 8W6FVSoQS82IwEqKJpiCp6OghG4GROrXHPLEYgx95K5N8xcNnfSygrq0xlTqYoXj DfkISYxC8e0MfeSQztSwSXXeQFeQ6+m3miduehbh6q4/ddEVsgTQN3lR3ikbGS5o 31d839t8MN4mPn7IAZw8ZGGC9XTzJQyVag/YsKKwRAc6O3OcqjEFWxabztB6H9XI 9zIzip6S3GARddWEBg6uKrZpOiODP3Dz4a9SzvAkFrCvUYhNyN2Llqpl0RPhFFs8 vmSEzaK7hn39b4HbSZeHqGClj47apweFqvk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:13:54 2026 by rpki-client