This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa File: defae45a-66a3-332f-95cd-9ffa0e1ab851.roa (raw, json) Hash identifier: 1mZ5ysYr9lElH58bw3syYUnaI6H995Udf9HgCXHzX38= Subject key identifier: CF:3A:99:7A:30:C9:6F:65:0F:F6:62:28:07:18:1B:7E:25:88:48:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C470BCF0FB3056CB3C20488A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 396595 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:cf:0f:b3:05:6c:b3:c2:04:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=afa0f2aa-5624-4359-be07-5cd3071049cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:d2:88:4f:4f:3b:4b:4a:7a:52:5c:8f:41: 69:13:e9:8b:0f:47:b0:f2:b2:ba:3e:7c:8a:b2:54: c2:66:a6:90:26:c1:2e:89:43:79:63:1f:36:49:7b: b1:5d:42:3f:76:4d:44:ae:3b:95:ad:bf:e9:99:ac: 91:60:3d:d7:22:5c:04:31:d7:70:a4:f1:44:d1:eb: 87:69:6d:df:5c:a5:c7:fe:4a:1e:12:66:2b:16:9b: 92:d7:03:52:24:c4:23:21:b8:2d:1c:57:75:c6:41: 7a:ca:eb:4d:58:59:55:44:4f:29:45:ac:3c:93:ab: be:3d:ce:c1:28:af:69:9e:b7:9f:0a:9d:47:7f:a6: 81:0b:f4:99:99:f0:0a:2b:66:34:4f:fc:d8:43:c6: 28:c5:20:c9:4b:0d:b3:71:e8:5d:4a:25:01:68:67: 57:47:6a:f5:5a:bc:1f:9d:4a:26:36:82:da:e1:5f: 9d:b4:af:2f:2f:5b:87:3f:a7:8a:65:0b:93:8e:8f: b8:83:17:67:ed:a8:8a:a8:36:82:e1:20:c2:e8:e1: 71:ed:91:90:90:a6:9c:44:b9:d0:d6:f1:62:31:40: 28:53:a2:a5:6b:f6:c8:4e:76:99:71:16:b1:96:02: ff:66:78:ed:6e:71:e6:89:d7:9f:2b:4e:7f:ce:ee: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:99:7A:30:C9:6F:65:0F:F6:62:28:07:18:1B:7E:25:88:48:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ba:e4:7f:bc:ce:71:39:08:f1:fa:53:b7:f5:41:39:bc:4d: cd:5d:f1:de:fd:07:44:bf:60:17:66:75:f3:f5:4a:0b:77:a7: c6:34:2b:b6:47:64:47:af:52:62:d8:f4:7e:9e:60:ab:96:0e: 12:68:8f:81:77:29:c6:e9:a1:56:46:be:1c:70:82:ca:8b:04: b0:9b:56:3f:0c:23:7f:81:85:93:5a:04:6f:4e:df:1f:9f:6e: 86:e2:45:fc:81:90:58:cc:52:a8:a5:7e:92:fa:01:cc:65:e5: e1:e3:83:a9:97:6b:5f:15:81:ed:a8:f6:8d:dd:93:c8:b5:bc: c0:f6:0d:34:89:7b:ce:f9:ce:e9:1c:5e:c7:f7:38:38:1b:f2: be:7e:07:fd:e2:be:68:c8:d0:a9:b1:f6:4e:bc:09:67:f4:da: c9:7f:78:78:e7:b9:f4:30:9a:b8:57:75:b1:20:b2:f3:93:c8: 5f:8a:c2:ce:0c:b3:c1:4f:16:fb:bc:f6:91:ec:e7:bf:ce:c5: 58:f5:07:7b:55:78:b7:53:6d:98:c9:81:99:25:ae:0d:20:be: 63:c4:ee:f3:67:57:0f:38:be:ba:48:f2:36:07:43:0b:ce:27: 2b:e5:8e:4d:81:b7:70:a5:48:b3:bd:e2:c3:7f:62:31:0a:7f: af:08:3b:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC88PswVss8IEiKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YWZhMGYyYWEtNTYyNC00MzU5LWJlMDctNWNkMzA3MTA0OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3SiE9PO0tKelJcj0FpE+mLD0ew8rK6PnyK slTCZqaQJsEuiUN5Yx82SXuxXUI/dk1ErjuVrb/pmayRYD3XIlwEMddwpPFE0euH aW3fXKXH/koeEmYrFpuS1wNSJMQjIbgtHFd1xkF6yutNWFlVRE8pRaw8k6u+Pc7B KK9pnrefCp1Hf6aBC/SZmfAKK2Y0T/zYQ8YoxSDJSw2zcehdSiUBaGdXR2r1Wrwf nUomNoLa4V+dtK8vL1uHP6eKZQuTjo+4gxdn7aiKqDaC4SDC6OFx7ZGQkKacRLnQ 1vFiMUAoU6Kla/bITnaZcRaxlgL/ZnjtbnHmidefK05/zu7z7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM86mXowyW9lD/ZiKAcYG34liEj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmYWU0NWEtNjZhMy0z MzJmLTk1Y2QtOWZmYTBlMWFiODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFe65H+8znE5CPH6U7f1QTm8Tc1d8d79B0S/YBdmdfP1Sgt3p8Y0 K7ZHZEevUmLY9H6eYKuWDhJoj4F3KcbpoVZGvhxwgsqLBLCbVj8MI3+BhZNaBG9O 3x+fbobiRfyBkFjMUqilfpL6Acxl5eHjg6mXa18Vge2o9o3dk8i1vMD2DTSJe875 zukcXsf3ODgb8r5+B/3ivmjI0Kmx9k68CWf02sl/eHjnufQwmrhXdbEgsvOTyF+K ws4Ms8FPFvu89pHs57/OxVj1B3tVeLdTbZjJgZklrg0gvmPE7vNnVw84vrpI8jYH QwvOJyvljk2Bt3ClSLO94sN/YjEKf68IOxk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:47:18 2026 by rpki-client