This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa File: ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa (raw, json) Hash identifier: FGuIZjSCHq4+2a4MS+filGqzMC/WclOIeofBl8F3Oyg= Subject key identifier: AF:34:5C:20:1B:99:09:9C:B9:3B:04:BE:8E:C5:C9:C2:FE:29:62:CD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A6A439F56519BB85DA4D40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:a4:39:f5:65:19:bb:85:da:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d48ce224-d1f4-406c-a1bf-5633b2c1c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:74:7a:5b:e3:b8:5c:ca:b4:bf:43:78:05: 06:69:13:41:95:c5:08:8e:a0:83:3b:63:14:ff:95: 8c:60:7f:56:bd:38:2a:2a:0e:6d:37:e9:02:f8:8e: c9:1e:79:fc:73:ee:ad:08:44:78:8d:f4:16:52:f9: 04:98:5d:74:f5:36:1e:26:d0:9a:76:d8:dd:b6:3b: bf:8e:86:0b:63:05:6d:8c:11:d5:92:d9:d5:10:4a: 34:29:43:83:02:83:52:b2:a5:ef:ab:d5:d6:50:e4: 42:98:aa:e1:06:8b:56:27:67:f4:75:ae:23:ff:1c: 66:c3:d4:09:08:55:1f:b6:83:20:d8:ab:f6:d3:15: ef:01:29:41:c1:ee:c8:ac:b9:97:db:98:04:55:65: 22:d3:97:da:e4:d4:30:44:9a:0e:13:35:4c:75:67: 86:bd:0b:af:8d:48:f3:70:5d:55:17:20:80:cd:4f: 13:7f:b6:48:7a:94:2b:e0:d4:f0:08:54:46:23:ce: 6b:77:3c:bb:ec:16:bc:cb:83:43:70:05:82:23:6d: 0d:6d:df:af:ab:0b:9e:90:39:3e:db:1a:9c:b3:ac: c2:22:03:3e:82:d6:48:93:46:43:66:95:6f:92:1c: f0:a6:54:08:06:5d:60:78:d6:19:27:fb:73:dd:b8: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:5C:20:1B:99:09:9C:B9:3B:04:BE:8E:C5:C9:C2:FE:29:62:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:59:75:33:ac:9f:6e:38:84:3a:e9:06:b0:67:de:56:8e:b7: b1:63:54:13:eb:14:be:08:8c:dd:6c:74:d2:8c:6c:57:b5:76: 3e:49:a5:9d:d9:4d:84:f7:87:b4:d4:24:62:3b:41:7e:87:09: a8:24:29:76:e2:9f:38:34:ca:ff:67:c0:b4:5c:87:81:8c:f5: e0:1f:70:47:ce:5e:53:5c:e6:31:f3:2f:66:b1:4a:2f:6d:10: a3:19:ed:f8:35:4e:31:53:21:33:d5:21:9f:5e:94:18:7a:78: 96:3b:a4:a6:fd:00:9e:18:5b:94:95:be:2c:74:ce:fb:a4:74: 67:39:1f:63:ca:79:bc:35:32:d8:53:1a:d9:7a:78:fb:08:00: 88:08:3d:94:e0:37:91:9b:02:b9:f7:b7:00:e9:4c:98:98:d3: 27:08:89:f9:4a:3f:ba:ac:c7:59:08:05:3c:68:80:95:f5:dd: e3:90:8b:64:c2:42:a7:fc:80:88:5d:09:f5:da:21:52:d1:66: d9:4d:1a:e3:d8:1a:f9:62:27:96:69:d7:be:0f:94:e3:1b:0f: 3d:7e:13:cd:71:8e:27:f9:e7:57:c0:79:36:d6:15:8d:c6:63: 56:d8:60:b8:68:26:f7:61:51:45:5d:8d:24:cf:55:53:18:35: c5:75:8c:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpqQ59WUZu4XaTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDQ4Y2UyMjQtZDFmNC00MDZjLWExYmYtNTYzM2IyYzFjM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptR0elvjuFzKtL9DeAUGaRNBlcUIjqCDO2MU /5WMYH9WvTgqKg5tN+kC+I7JHnn8c+6tCER4jfQWUvkEmF109TYeJtCadtjdtju/ joYLYwVtjBHVktnVEEo0KUODAoNSsqXvq9XWUORCmKrhBotWJ2f0da4j/xxmw9QJ CFUftoMg2Kv20xXvASlBwe7IrLmX25gEVWUi05fa5NQwRJoOEzVMdWeGvQuvjUjz cF1VFyCAzU8Tf7ZIepQr4NTwCFRGI85rdzy77Ba8y4NDcAWCI20Nbd+vqwuekDk+ 2xqcs6zCIgM+gtZIk0ZDZpVvkhzwplQIBl1geNYZJ/tz3bjBUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK80XCAbmQmcuTsEvo7FycL+KWLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2NkYmY5YmYtYWZjNS0z YjdhLWIyOGEtZWU3NmZiYTFhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALpZdTOsn244hDrpBrBn3laOt7FjVBPrFL4IjN1sdNKMbFe1dj5J pZ3ZTYT3h7TUJGI7QX6HCagkKXbinzg0yv9nwLRch4GM9eAfcEfOXlNc5jHzL2ax Si9tEKMZ7fg1TjFTITPVIZ9elBh6eJY7pKb9AJ4YW5SVvix0zvukdGc5H2PKebw1 MthTGtl6ePsIAIgIPZTgN5GbArn3twDpTJiY0ycIiflKP7qsx1kIBTxogJX13eOQ i2TCQqf8gIhdCfXaIVLRZtlNGuPYGvliJ5Zp174PlOMbDz1+E81xjif551fAeTbW FY3GY1bYYLhoJvdhUUVdjSTPVVMYNcV1jA0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:59 2026 by rpki-client