This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: pOkGJOharVs5g6gbRuV1q8OvoPOKlaBvZ0tSSX0ktQo= Subject key identifier: E2:0C:C4:34:41:12:E7:F2:28:81:48:2A:2A:9C:2F:CC:7E:42:1B:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A83D01B69B802F75F3CB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3d:01:b6:9b:80:2f:75:f3:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=51cca858-161e-4a6e-9dd9-2606ad0f7aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:ee:fb:81:ed:48:42:0c:67:14:e2:0e:6d: a7:35:ab:31:cb:63:d9:32:9b:8d:2d:6d:b3:e1:3a: f0:26:c7:f2:2a:b5:bf:c1:ae:e2:78:c7:7d:c9:35: 36:1b:36:86:2f:49:87:ab:43:65:47:b3:27:d8:22: 7b:fe:56:46:af:f8:95:7b:a2:42:3b:97:5a:52:76: d2:01:25:37:ce:57:35:ea:66:06:f6:7e:df:ad:a7: da:dd:c6:53:21:0c:83:08:bf:09:71:d8:4c:65:a4: 58:f2:15:4a:51:ef:4f:1e:07:df:98:6b:13:09:a7: 63:32:57:a4:43:36:ef:c8:dd:8c:dc:d6:43:84:dd: e1:93:1c:87:73:00:c6:81:12:7e:81:6f:1a:ab:48: 1e:9e:7d:e4:a1:46:80:5b:d5:ac:c5:4a:88:c9:3f: 5f:52:b6:61:bd:a1:c2:ab:4b:32:1c:72:08:a8:c2: 06:8c:bd:df:6d:17:69:86:d3:e4:e2:16:61:91:82: 60:c7:65:be:1c:da:ce:23:e3:a6:27:6e:3d:b5:05: 25:48:c9:bd:14:7b:c6:59:f9:dd:58:92:c8:36:ba: 74:0c:2a:a4:01:fa:7d:e6:c7:f2:ee:ec:46:df:9a: 60:67:51:37:ca:44:a3:11:1e:1e:b9:4b:32:e6:5b: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:C4:34:41:12:E7:F2:28:81:48:2A:2A:9C:2F:CC:7E:42:1B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:51:ea:4d:13:68:76:65:ea:81:02:45:98:d1:a6:7d:df:55: c6:57:59:0d:2e:28:be:41:38:ed:9f:37:82:ee:8e:a7:bb:38: 37:11:06:ce:95:cf:36:16:69:46:5d:79:e0:57:08:af:f1:1f: 42:95:1a:10:a8:87:28:45:e9:24:f7:86:6f:0e:a0:e4:ec:93: 7b:72:d9:b4:be:c2:82:f8:74:e4:2b:aa:78:ee:12:16:bf:be: 6b:a6:28:c5:59:a4:58:09:d7:2c:cd:6b:f5:28:b0:65:b6:61: 82:d8:52:0d:9c:59:7c:ab:c4:a1:c6:50:77:54:1b:52:dc:7d: 1e:e9:d5:73:58:90:35:d3:09:50:85:b0:bc:37:93:b2:b5:62: a2:88:20:c5:8c:8d:71:6d:23:f6:07:c4:65:f4:bd:e0:a1:66: 71:ce:59:0b:8b:07:23:d4:89:82:47:b2:5c:f5:58:30:b4:bc: b5:63:7f:1c:58:15:83:39:e4:96:a6:0a:59:a1:53:1a:fd:c2: 5b:97:6b:e7:8e:b1:d2:1e:95:63:59:46:56:bc:64:34:8a:29: 2a:8c:e3:6e:81:51:6b:29:d1:7c:d8:44:81:89:a4:87:96:09: 4a:a3:8c:c2:87:33:24:8a:35:6d:67:6a:de:54:0c:85:c8:30: e1:da:ae:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqD0BtpuAL3XzywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTFjY2E4NTgtMTYxZS00YTZlLTlkZDktMjYwNmFkMGY3YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikDu+4HtSEIMZxTiDm2nNasxy2PZMpuNLW2z 4TrwJsfyKrW/wa7ieMd9yTU2GzaGL0mHq0NlR7Mn2CJ7/lZGr/iVe6JCO5daUnbS ASU3zlc16mYG9n7frafa3cZTIQyDCL8JcdhMZaRY8hVKUe9PHgffmGsTCadjMlek QzbvyN2M3NZDhN3hkxyHcwDGgRJ+gW8aq0genn3koUaAW9WsxUqIyT9fUrZhvaHC q0syHHIIqMIGjL3fbRdphtPk4hZhkYJgx2W+HNrOI+OmJ249tQUlSMm9FHvGWfnd WJLINrp0DCqkAfp95sfy7uxG35pgZ1E3ykSjER4euUsy5ltxcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOIMxDRBEufyKIFIKiqcL8x+QhsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJR6k0TaHZl6oECRZjRpn3fVcZXWQ0uKL5BOO2fN4Lujqe7ODcR Bs6VzzYWaUZdeeBXCK/xH0KVGhCohyhF6ST3hm8OoOTsk3ty2bS+woL4dOQrqnju Eha/vmumKMVZpFgJ1yzNa/UosGW2YYLYUg2cWXyrxKHGUHdUG1LcfR7p1XNYkDXT CVCFsLw3k7K1YqKIIMWMjXFtI/YHxGX0veChZnHOWQuLByPUiYJHslz1WDC0vLVj fxxYFYM55JamClmhUxr9wluXa+eOsdIelWNZRla8ZDSKKSqM426BUWsp0XzYRIGJ pIeWCUqjjMKHMySKNW1nat5UDIXIMOHaroY= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:47 2026 by rpki-client