This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: 4tRAgZKApbpoRKJzXmMtvVKJ03ok7icBIuY9PbTWxiQ= Subject key identifier: 2F:C9:7D:6C:6F:8B:19:80:3D:FF:C9:F9:94:F4:80:AF:42:72:83:62 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A695766C7B1F437A123480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:95:76:6c:7b:1f:43:7a:12:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d2f653fb-e5f2-459c-b6b6-74ca9667fb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:8d:ed:44:2e:ce:1c:c9:6e:72:1b:ae:17: 1a:c1:fb:ac:5c:cb:8e:0a:6d:34:91:d9:f8:31:5a: 2b:c7:06:91:a8:a4:b4:ac:3f:be:ac:df:d8:6e:97: a9:9d:f4:37:d8:88:36:f1:ac:c1:9a:b3:93:38:30: 91:34:64:8f:c5:7c:e3:2c:2a:a8:5e:67:bf:4d:cd: 1d:11:53:32:93:46:6a:a2:a6:ad:b0:ce:39:96:98: 3c:18:4d:fe:69:e4:74:fe:e7:e2:db:09:67:47:28: 19:94:36:0a:77:0f:50:11:e3:40:a2:bf:be:49:c4: 58:8d:6b:4f:0e:ff:88:59:04:8f:fd:d7:85:a9:9b: 7f:01:d6:51:cb:3c:62:00:c3:09:1f:cf:f8:c0:7f: 6c:2b:7a:67:80:67:4c:e5:64:64:3c:63:dc:50:42: 25:59:21:63:6d:b8:40:e4:50:b0:9d:ea:b4:8e:85: ba:28:ea:d9:59:9c:43:8f:db:cb:b3:c3:9c:1d:ad: 17:9a:e3:3c:40:ce:f9:8a:44:fd:78:cc:b1:2a:64: af:44:ee:e2:56:90:6c:f0:b5:4e:03:b2:bb:99:51: 88:34:c2:e9:3b:c7:4f:76:a6:62:38:d6:f5:5b:a9: 41:df:8e:32:3a:fc:c9:d4:6f:9d:20:42:80:4b:50: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C9:7D:6C:6F:8B:19:80:3D:FF:C9:F9:94:F4:80:AF:42:72:83:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:37:fc:34:99:c9:54:7d:66:18:10:e1:a7:65:f5:f4:46:1d: eb:21:96:3c:83:f2:7c:bd:32:ae:4c:47:3b:ae:ed:0b:c5:e1: a3:29:62:97:0e:0c:d5:de:57:27:86:2e:84:c9:7b:ab:2f:43: f8:82:48:ae:38:df:b1:60:57:08:2c:78:f3:12:a2:9b:ac:0c: 2e:a1:f9:5c:b2:a1:07:40:1a:02:40:46:ce:b4:95:4a:99:0f: a3:a3:74:3a:f9:3b:b3:ec:92:00:c4:46:8e:9f:fd:af:6e:a7: 83:2a:83:e6:ad:cf:c7:8e:53:2c:43:b8:09:97:21:f8:47:a8: 2c:c3:68:03:23:7c:7c:67:2b:c7:a8:b4:12:e3:7b:2d:45:3d: 2b:d2:e3:6a:99:7c:a1:a6:54:91:88:bd:c8:c8:b4:c4:a6:ae: 1d:e2:08:20:7f:37:e5:c4:4b:17:9e:a4:24:38:52:4f:2e:c6: 5d:43:cc:38:dc:ec:d8:0f:a8:b6:e4:ee:e8:5b:0d:40:1e:a2: 19:13:e8:1c:69:92:fd:df:6e:b5:02:eb:7e:c8:5a:32:02:c1: 6b:1a:ec:35:1a:8b:37:20:8b:21:b8:2d:55:14:91:75:90:af: 15:04:ec:4a:69:82:5b:7b:c1:33:2f:bd:74:97:9d:33:59:96: 69:09:a1:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFppV2bHsfQ3oSNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDJmNjUzZmItZTVmMi00NTljLWI2YjYtNzRjYTk2NjdmYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLKN7UQuzhzJbnIbrhcawfusXMuOCm00kdn4 MVorxwaRqKS0rD++rN/YbpepnfQ32Ig28azBmrOTODCRNGSPxXzjLCqoXme/Tc0d EVMyk0ZqoqatsM45lpg8GE3+aeR0/ufi2wlnRygZlDYKdw9QEeNAor++ScRYjWtP Dv+IWQSP/deFqZt/AdZRyzxiAMMJH8/4wH9sK3pngGdM5WRkPGPcUEIlWSFjbbhA 5FCwneq0joW6KOrZWZxDj9vLs8OcHa0XmuM8QM75ikT9eMyxKmSvRO7iVpBs8LVO A7K7mVGINMLpO8dPdqZiONb1W6lB344yOvzJ1G+dIEKAS1ARzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/JfWxvixmAPf/J+ZT0gK9CcoNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQ3/DSZyVR9ZhgQ4adl9fRGHeshljyD8ny9Mq5MRzuu7QvF4aMp YpcODNXeVyeGLoTJe6svQ/iCSK4437FgVwgsePMSopusDC6h+VyyoQdAGgJARs60 lUqZD6OjdDr5O7PskgDERo6f/a9up4Mqg+atz8eOUyxDuAmXIfhHqCzDaAMjfHxn K8eotBLjey1FPSvS42qZfKGmVJGIvcjItMSmrh3iCCB/N+XESxeepCQ4Uk8uxl1D zDjc7NgPqLbk7uhbDUAeohkT6Bxpkv3fbrUC637IWjICwWsa7DUaizcgiyG4LVUU kXWQrxUE7Eppglt7wTMvvXSXnTNZlmkJobY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:44 2026 by rpki-client