This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa File: bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa (raw, json) Hash identifier: 2EQk/bJX5zqWEhm36cZBY0CsA03wSi8U1tLb4vzgIws= Subject key identifier: 38:FB:A7:79:7B:E5:8D:33:58:73:4B:DD:C7:5F:CB:66:27:CC:DC:44 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A69825D43EC16EAF19E880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:98:25:d4:3e:c1:6e:af:19:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d14182e5-e3fb-4944-bdaf-d83576691e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:26:bc:93:70:9c:1c:f1:3f:26:fb:88:e0:94: 0b:1d:8c:f6:0f:77:7b:03:31:8d:e1:a6:0d:ca:a8: 86:da:d4:a8:fc:6f:12:65:a9:26:b2:ff:ca:db:a2: aa:e9:1d:62:92:a6:0f:08:8d:d6:bf:5e:89:eb:16: f6:18:dd:4a:d6:e5:ab:da:10:ed:61:f7:65:a7:68: f7:96:e9:46:ec:b9:d2:c9:b7:01:03:e1:3f:ce:7a: fb:73:fe:4e:fe:64:f5:f2:1f:09:26:e9:2f:29:d4: 22:c0:5d:1f:3e:47:ea:a9:75:4c:c0:51:fd:76:b0: 95:28:a5:ec:2a:57:6b:57:60:03:fd:ff:81:10:cc: c0:aa:78:d3:f5:fc:76:21:62:b5:d4:28:0c:b6:ff: 91:77:67:a3:6f:db:0c:8f:4e:a5:6c:35:89:7a:58: d7:bf:68:2b:49:b7:6e:67:c0:82:e9:7e:eb:f2:5b: 3a:18:c8:c2:e3:02:b4:b1:51:3a:d5:b4:4f:15:c9: cc:f4:02:30:f5:ca:01:cf:2c:38:30:4d:bb:25:be: 78:97:be:86:f2:53:98:0c:f3:b4:21:05:cc:57:70: 24:8b:13:26:ed:dc:08:61:5d:ae:02:10:09:6b:5b: a7:0e:53:e8:f3:36:67:3d:d6:1f:20:ce:d1:f1:e2: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FB:A7:79:7B:E5:8D:33:58:73:4B:DD:C7:5F:CB:66:27:CC:DC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:27:7a:96:39:52:f2:e4:06:5e:46:b7:51:61:2c:66:1b:da: 0a:cd:21:53:dd:a6:e0:3a:9f:1d:32:2e:98:73:75:fb:b9:62: b7:93:44:f9:82:9b:42:58:9b:5b:75:78:fe:89:c6:39:e1:71: 56:d3:3a:d2:26:3e:11:67:69:ba:ff:6b:17:a5:02:cc:31:ee: f1:cb:f2:17:a9:ab:50:7c:aa:f7:6e:f3:e5:3d:2f:3e:9b:02: 2e:9b:6d:6f:50:2f:00:67:50:c3:d6:74:6e:6e:1c:ba:39:aa: a1:50:5e:06:61:5f:1d:a1:43:3f:57:7d:20:ce:5e:75:c6:c5: d0:bb:37:33:61:8f:a8:d9:d6:4d:2f:9c:06:9a:b0:51:f2:98: fc:bf:9e:9b:38:e0:f6:09:6d:ca:32:4f:82:1c:38:f9:15:4a: cd:60:71:9f:4e:6d:6f:86:78:58:2a:76:03:8d:49:2f:79:36: ac:5d:03:3f:ec:2a:39:77:33:a7:27:b4:97:15:41:8e:24:53: 28:a9:58:02:a3:d7:2d:f9:6f:15:8f:f0:06:68:9b:23:32:5f: 83:29:30:e7:e6:da:08:c4:4b:27:47:2c:9f:e8:3b:c2:83:ae: 44:7d:93:4d:09:be:10:3e:80:b2:96:96:69:f7:1b:08:dd:d5: c2:dc:05:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFppgl1D7Bbq8Z6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDE0MTgyZTUtZTNmYi00OTQ0LWJkYWYtZDgzNTc2NjkxZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSa8k3CcHPE/JvuI4JQLHYz2D3d7AzGN4aYN yqiG2tSo/G8SZakmsv/K26Kq6R1ikqYPCI3Wv16J6xb2GN1K1uWr2hDtYfdlp2j3 lulG7LnSybcBA+E/znr7c/5O/mT18h8JJukvKdQiwF0fPkfqqXVMwFH9drCVKKXs KldrV2AD/f+BEMzAqnjT9fx2IWK11CgMtv+Rd2ejb9sMj06lbDWJeljXv2grSbdu Z8CC6X7r8ls6GMjC4wK0sVE61bRPFcnM9AIw9coBzyw4ME27Jb54l76G8lOYDPO0 IQXMV3AkixMm7dwIYV2uAhAJa1unDlPo8zZnPdYfIM7R8eKtnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDj7p3l75Y0zWHNL3cdfy2YnzNxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmM2ZTI5YTctNmEzYy0z N2VkLTg0NTktMGZkZGMxMzNhNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIInepY5UvLkBl5Gt1FhLGYb2grNIVPdpuA6nx0yLphzdfu5YreT RPmCm0JYm1t1eP6JxjnhcVbTOtImPhFnabr/axelAswx7vHL8hepq1B8qvdu8+U9 Lz6bAi6bbW9QLwBnUMPWdG5uHLo5qqFQXgZhXx2hQz9XfSDOXnXGxdC7NzNhj6jZ 1k0vnAaasFHymPy/nps44PYJbcoyT4IcOPkVSs1gcZ9ObW+GeFgqdgONSS95Nqxd Az/sKjl3M6cntJcVQY4kUyipWAKj1y35bxWP8AZomyMyX4MpMOfm2gjESydHLJ/o O8KDrkR9k00JvhA+gLKWlmn3Gwjd1cLcBTA= -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:04 2026 by rpki-client