This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa File: 1a6c305a-690d-3108-8f35-980317f42700.roa (raw, json) Hash identifier: 5VDBS/ZUyMgbb9YuHUf5kWZr/M5QrWV64tJZGxeQ1Ew= Subject key identifier: 2A:D4:5C:DF:94:E5:EC:11:C0:49:99:19:96:05:66:65:4E:12:44:98 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A83B4B2051538F4FE89340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3b:4b:20:51:53:8f:4f:e8:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c3b7c98e-b6f4-418b-b891-22cef640673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:85:8f:30:a0:96:1a:68:4d:dc:43:66:d8: aa:fb:b8:15:b7:ba:b4:47:36:cc:1b:5b:0c:16:94: dd:9b:97:87:b6:bb:48:35:21:aa:74:40:09:f9:66: f8:a6:6c:69:3f:47:d9:3e:bb:ec:88:ac:1d:68:1f: b1:06:56:84:48:71:32:23:ee:a1:ca:69:da:ed:23: f8:8e:aa:75:58:62:75:2f:38:c1:4a:01:42:44:21: 16:f1:b1:e3:f2:e3:6f:41:35:17:cf:20:de:3e:06: 4b:1f:19:a8:68:f6:2e:26:26:5c:18:ae:1f:b6:5b: b4:06:c1:a6:b3:de:8d:71:bc:72:29:76:86:af:5a: 90:78:62:c6:98:2a:51:dc:36:ce:34:d0:ef:2d:6e: 8b:09:ce:6c:d6:67:cc:76:91:e1:2f:fb:c7:59:ab: 41:17:89:1f:09:3f:15:74:45:e1:60:78:82:34:3b: 11:2a:2e:da:26:ea:77:ac:1b:61:41:ba:63:e0:de: 34:86:6b:d9:55:95:70:10:4d:76:60:81:e3:44:54: 8e:ac:ff:52:cb:25:a7:9e:88:8a:a7:eb:18:a3:0e: e2:af:77:d7:c4:5e:2b:68:19:b3:7d:a5:8f:cf:68: c1:75:73:d2:80:d0:e0:79:97:05:95:33:a9:e3:32: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D4:5C:DF:94:E5:EC:11:C0:49:99:19:96:05:66:65:4E:12:44:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:40:74:1d:ae:98:d9:b7:12:0b:f0:fc:5a:e2:32:92:16:03: 0a:20:48:62:62:82:3b:5d:30:d3:4b:c8:5f:22:3a:ec:8c:dc: 2f:f0:71:b4:48:4b:99:49:12:0b:ea:c1:51:43:d2:80:fa:22: f0:88:46:f0:5d:dc:26:25:ce:00:dc:51:79:61:c6:71:74:66: 21:c1:a6:b4:0b:02:48:09:41:d5:f5:b0:28:71:5a:2a:12:4c: 11:63:a1:64:1c:3a:b8:a6:2e:57:e0:13:0b:b2:a4:26:80:a4: 2e:10:97:05:ba:df:92:f8:a3:3a:0a:95:03:ad:db:04:99:1b: 22:9b:0d:6a:af:a2:48:fd:b4:e3:6a:24:b0:07:6e:f2:ff:91: 2f:c2:04:53:06:99:8d:86:db:6b:27:61:72:17:5a:19:a9:a1: 6d:97:8b:5c:b2:82:f5:60:5a:43:cb:15:01:f2:06:26:07:ee: 79:01:a2:f2:21:69:78:40:44:18:4e:f4:c9:c1:33:fb:df:b8: 32:47:f4:dd:1b:e5:81:af:d2:f0:29:b4:14:6b:09:e6:d5:9d: e7:1e:f3:ed:06:be:b4:90:cb:94:44:54:8c:6f:2d:cd:b9:c2: 66:8f:40:fd:ca:05:a7:fe:5f:d0:17:99:46:76:95:d1:2f:7c: 75:39:97:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqDtLIFFTj0/ok0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzNiN2M5OGUtYjZmNC00MThiLWI4OTEtMjJjZWY2NDA2NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiFjzCglhpoTdxDZtiq+7gVt7q0RzbMG1sM FpTdm5eHtrtINSGqdEAJ+Wb4pmxpP0fZPrvsiKwdaB+xBlaESHEyI+6hymna7SP4 jqp1WGJ1LzjBSgFCRCEW8bHj8uNvQTUXzyDePgZLHxmoaPYuJiZcGK4ftlu0BsGm s96NcbxyKXaGr1qQeGLGmCpR3DbONNDvLW6LCc5s1mfMdpHhL/vHWatBF4kfCT8V dEXhYHiCNDsRKi7aJup3rBthQbpj4N40hmvZVZVwEE12YIHjRFSOrP9SyyWnnoiK p+sYow7ir3fXxF4raBmzfaWPz2jBdXPSgNDgeZcFlTOp4zLiiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrUXN+U5ewRwEmZGZYFZmVOEkSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE2YzMwNWEtNjkwZC0z MTA4LThmMzUtOTgwMzE3ZjQyNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRAdB2umNm3Egvw/FriMpIWAwogSGJigjtdMNNLyF8iOuyM3C/w cbRIS5lJEgvqwVFD0oD6IvCIRvBd3CYlzgDcUXlhxnF0ZiHBprQLAkgJQdX1sChx WioSTBFjoWQcOrimLlfgEwuypCaApC4QlwW635L4ozoKlQOt2wSZGyKbDWqvokj9 tONqJLAHbvL/kS/CBFMGmY2G22snYXIXWhmpoW2Xi1yygvVgWkPLFQHyBiYH7nkB ovIhaXhARBhO9MnBM/vfuDJH9N0b5YGv0vAptBRrCebVnece8+0GvrSQy5REVIxv Lc25wmaPQP3KBaf+X9AXmUZ2ldEvfHU5l+g= -----END CERTIFICATE-----Generated at Sun Jan 25 15:27:58 2026 by rpki-client