This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa File: 9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa (raw, json) Hash identifier: rB45IowSijQj/fz5+e9VSc6LAWwM4vBEbvxAayDIYPE= Subject key identifier: B3:13:9D:2D:08:EE:18:9F:8C:62:4F:7D:D6:84:99:44:AF:4C:D5:4A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A66AF67530C4FF471FFC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:6a:f6:75:30:c4:ff:47:1f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=cf3da04c-ae5e-449e-8a92-0823a7233d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:04:a2:fe:e4:7d:40:12:f6:68:3b:6b:50: da:10:d8:9c:6a:44:cd:81:89:f9:65:c2:59:eb:23: fa:0e:85:6f:07:c4:12:d1:14:a0:8c:a3:66:c1:71: 96:e5:20:14:97:5e:fa:b2:cd:ce:5d:c1:5e:7d:cf: 7a:7e:62:41:b1:d1:ca:08:29:f8:62:be:c2:4b:35: 27:1f:d7:34:e2:bf:0c:2c:95:f6:56:df:53:fd:dd: 57:0a:9c:e5:ef:4f:c4:5f:83:9c:00:19:ed:32:ce: 97:f9:c8:0a:8a:17:f3:b5:62:fb:4c:a6:90:4a:87: 3a:d1:d5:ae:5e:a7:92:cf:f8:d0:1b:19:00:44:76: e6:55:1f:31:4b:9f:c3:f3:18:64:d9:49:5f:42:fb: 7a:c4:fb:84:c9:99:a2:bc:93:c6:ba:f2:19:63:6d: 88:59:11:f6:7c:ca:d7:51:33:f2:ac:d6:61:2d:05: a9:ee:60:b6:1e:69:5f:66:f5:38:65:aa:b4:21:5f: 35:fb:90:90:27:d3:c4:74:12:7c:91:b1:d9:4f:be: 1e:a1:0a:fa:c1:96:20:b6:34:5f:d6:a3:0d:91:ce: 92:e9:2d:07:2f:29:78:b6:3d:9b:89:7a:82:83:f0: 47:3f:47:18:71:b9:c1:f8:96:da:1b:3f:04:8b:66: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:13:9D:2D:08:EE:18:9F:8C:62:4F:7D:D6:84:99:44:AF:4C:D5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:84:9a:1f:dc:c8:5e:41:a3:6e:e8:74:96:4e:4f:1f:ce:74: c0:ea:69:89:fa:45:c5:6d:05:8e:10:fc:a2:3f:1e:8f:a0:22: ba:51:b6:cd:3f:07:15:8f:d9:3a:5c:ed:0c:02:c5:a4:8d:5d: 89:e9:33:9e:18:57:cc:0b:a7:3c:1c:1d:93:85:9c:03:26:d6: 9e:ad:9b:72:ed:ae:a4:fd:c0:0d:cf:3c:f6:bf:a8:84:3a:a2: 9a:84:09:37:c9:0a:f1:0b:2f:73:e3:f0:65:df:23:0d:f1:7b: 5c:96:23:d3:05:c3:bf:7b:5b:40:f4:d8:b1:8b:1a:da:9d:7f: 0e:7b:3d:3e:05:20:dd:c7:55:45:19:48:45:06:30:58:74:70: 12:31:bf:23:35:8e:fc:eb:81:0b:65:f7:a3:da:d0:f1:35:66: 7f:b3:e5:d6:eb:07:b6:39:77:7d:06:ca:63:80:fc:fb:f5:0b: d5:ec:0d:a0:93:a5:bc:a0:e1:c4:c9:79:2c:42:49:39:98:84: 7c:99:b1:25:fa:ea:db:9b:ac:c2:0f:57:87:3c:ff:d9:7d:4b: 27:e2:ed:09:87:06:24:08:5a:f8:3e:ee:64:a7:ce:77:b4:80: 8c:e7:ac:b1:15:0e:ae:5e:13:5c:53:e2:b1:49:e9:fd:c4:08: 43:f8:c5:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpmr2dTDE/0cf/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Y2YzZGEwNGMtYWU1ZS00NDllLThhOTItMDgyM2E3MjMzZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd8Eov7kfUAS9mg7a1DaENicakTNgYn5ZcJZ 6yP6DoVvB8QS0RSgjKNmwXGW5SAUl176ss3OXcFefc96fmJBsdHKCCn4Yr7CSzUn H9c04r8MLJX2Vt9T/d1XCpzl70/EX4OcABntMs6X+cgKihfztWL7TKaQSoc60dWu XqeSz/jQGxkARHbmVR8xS5/D8xhk2UlfQvt6xPuEyZmivJPGuvIZY22IWRH2fMrX UTPyrNZhLQWp7mC2HmlfZvU4Zaq0IV81+5CQJ9PEdBJ8kbHZT74eoQr6wZYgtjRf 1qMNkc6S6S0HLyl4tj2biXqCg/BHP0cYcbnB+JbaGz8Ei2Y36QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMTnS0I7hifjGJPfdaEmUSvTNVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRmMTlkZWUtMDE1MC0z M2M1LWI3ZjAtY2NiNGE2Y2I4ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2Emh/cyF5Bo27odJZOTx/OdMDqaYn6RcVtBY4Q/KI/Ho+gIrpR ts0/BxWP2Tpc7QwCxaSNXYnpM54YV8wLpzwcHZOFnAMm1p6tm3LtrqT9wA3PPPa/ qIQ6opqECTfJCvELL3Pj8GXfIw3xe1yWI9MFw797W0D02LGLGtqdfw57PT4FIN3H VUUZSEUGMFh0cBIxvyM1jvzrgQtl96Pa0PE1Zn+z5dbrB7Y5d30GymOA/Pv1C9Xs DaCTpbyg4cTJeSxCSTmYhHyZsSX66tubrMIPV4c8/9l9Syfi7QmHBiQIWvg+7mSn zne0gIznrLEVDq5eE1xT4rFJ6f3ECEP4xUM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:29 2026 by rpki-client