This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7cf170c-bb11-3999-9b78-965693ea453b.roa File: f7cf170c-bb11-3999-9b78-965693ea453b.roa (raw, json) Hash identifier: S1W/4Z9iVnVIu0K5mdT36USOekYLfnkI+Wqv5LMW0+0= Subject key identifier: 44:48:8D:BD:D6:A8:99:55:80:3F:BA:0A:F6:21:5C:55:F6:58:1B:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C470BCEDE5DF722E9469BADE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7cf170c-bb11-3999-9b78-965693ea453b.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 397205 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:ce:de:5d:f7:22:e9:46:9b:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=b10e1415-97dd-447b-9968-ae9493a4fac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:00:b8:29:3c:11:8a:4a:c3:0e:4d:09:1a: 3a:89:11:50:2c:ba:9a:26:46:e7:dc:50:5b:5c:5d: e3:cb:c5:ab:1d:22:1b:50:75:5b:d4:fe:65:20:1d: a2:ef:1c:3a:c2:56:79:9e:8d:e1:06:6c:77:f6:d0: 99:98:f7:24:54:87:e6:25:65:54:05:4c:ba:6a:83: 38:e7:02:c4:9b:7c:bc:1b:e9:46:83:23:6b:85:df: 7f:76:8e:eb:47:89:d6:7e:12:e8:9f:8b:4e:66:dc: cf:c7:c9:7d:6e:c5:f3:ce:92:81:f9:0a:a0:b2:89: 2c:d9:86:4b:ba:98:16:9e:22:8c:b1:48:36:85:a1: c8:15:1b:a5:7e:68:b1:0b:e1:4a:c7:a5:39:1d:46: 23:f4:0a:ff:ac:ed:a3:76:b8:50:01:41:02:de:af: 90:34:55:17:04:ce:05:b4:0f:e6:41:77:b8:29:f4: 60:3b:d8:8d:5d:b1:84:db:07:c8:9e:b1:4e:a6:7b: 2a:52:72:01:da:cd:61:09:0e:ae:57:e6:98:7f:60: f0:c7:99:03:31:5e:4b:cb:c3:90:11:cf:d0:e3:52: 60:e7:96:b5:fc:68:f7:e8:42:92:36:6f:fd:4f:13: 3c:79:3b:b4:7e:21:85:46:d0:6c:48:92:3f:3b:f4: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:8D:BD:D6:A8:99:55:80:3F:BA:0A:F6:21:5C:55:F6:58:1B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7cf170c-bb11-3999-9b78-965693ea453b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b4:56:e3:8d:c6:af:61:0a:ae:00:7b:13:ff:0a:d8:e5:05: ed:23:e0:a4:f9:76:57:60:9c:d1:ca:5b:ae:2a:52:ee:76:ed: 06:a2:7b:11:87:b4:a5:ec:df:d5:eb:61:ab:ea:a7:5a:d7:26: bc:d5:21:66:51:a4:0b:83:23:9e:06:dc:43:af:53:b0:5e:e8: 05:ac:21:92:8a:84:3f:3d:45:44:ec:7d:32:e9:b8:ec:df:5a: 17:ef:07:8c:07:da:01:f2:cf:f3:8a:c8:fb:f3:9d:08:b8:49: c7:f7:45:5c:70:54:3d:e0:67:fa:9b:8e:15:a2:9b:6e:c5:5f: 6f:e7:5b:57:cf:ca:82:61:28:bb:a9:a9:d2:a5:61:12:bb:04: ad:9e:1c:b6:5c:6c:4a:54:5e:d5:ea:b8:f3:69:00:b1:7f:6d: 15:99:14:f9:ca:d7:ca:66:db:89:e3:aa:ff:08:2f:69:1c:df: 84:c0:f4:a6:f7:86:e9:19:3a:56:86:4c:43:8c:af:3d:7e:90: 1b:f9:f1:47:f8:27:d1:55:66:50:89:5d:5c:76:df:5d:8a:cc: 6b:ee:02:83:d7:fc:a9:8d:d2:92:be:1b:54:bb:5f:9d:4f:1e: 4f:ac:a2:46:7d:8e:10:2f:51:8b:62:aa:94:33:45:89:06:85: 4f:ed:12:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC87eXfci6UabreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YjEwZTE0MTUtOTdkZC00NDdiLTk5NjgtYWU5NDkzYTRmYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWcAuCk8EYpKww5NCRo6iRFQLLqaJkbn3FBb XF3jy8WrHSIbUHVb1P5lIB2i7xw6wlZ5no3hBmx39tCZmPckVIfmJWVUBUy6aoM4 5wLEm3y8G+lGgyNrhd9/do7rR4nWfhLon4tOZtzPx8l9bsXzzpKB+Qqgsoks2YZL upgWniKMsUg2haHIFRulfmixC+FKx6U5HUYj9Ar/rO2jdrhQAUEC3q+QNFUXBM4F tA/mQXe4KfRgO9iNXbGE2wfInrFOpnsqUnIB2s1hCQ6uV+aYf2Dwx5kDMV5Ly8OQ Ec/Q41Jg55a1/Gj36EKSNm/9TxM8eTu0fiGFRtBsSJI/O/RRMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFERIjb3WqJlVgD+6CvYhXFX2WBudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjdjZjE3MGMtYmIxMS0z OTk5LTliNzgtOTY1NjkzZWE0NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADW0VuONxq9hCq4AexP/CtjlBe0j4KT5dldgnNHKW64qUu527Qai exGHtKXs39XrYavqp1rXJrzVIWZRpAuDI54G3EOvU7Be6AWsIZKKhD89RUTsfTLp uOzfWhfvB4wH2gHyz/OKyPvznQi4Scf3RVxwVD3gZ/qbjhWim27FX2/nW1fPyoJh KLupqdKlYRK7BK2eHLZcbEpUXtXquPNpALF/bRWZFPnK18pm24njqv8IL2kc34TA 9Kb3hukZOlaGTEOMrz1+kBv58Uf4J9FVZlCJXVx2312KzGvuAoPX/KmN0pK+G1S7 X51PHk+sokZ9jhAvUYtiqpQzRYkGhU/tEpQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:12 2026 by rpki-client