This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa File: f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa (raw, json) Hash identifier: oETKtwiO2UQKvLRhognz7BWaF7DCDLWFwcaW6TInsZE= Subject key identifier: 96:3A:16:E2:D5:A9:D7:7C:B4:B8:84:D6:2B:70:50:E5:52:1A:41:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A823A69156BB8722A1DE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:23:a6:91:56:bb:87:22:a1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=65f48169-e25a-4121-8777-311737ca9f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:9e:96:14:7d:4d:1a:7d:69:06:a8:99:8f: 4e:45:81:a9:82:23:33:80:35:47:cb:eb:ef:f2:0c: 3e:06:c2:00:f5:ef:47:6c:b9:e6:e7:e2:3e:1c:08: 80:6f:c6:08:10:79:03:62:f9:aa:c4:cd:0d:79:05: 90:ab:b9:e7:47:12:27:51:53:bc:7b:31:4c:6e:9e: 9a:68:a9:d4:97:31:66:5a:bc:dd:3a:7c:9e:ba:fc: 32:ab:60:39:ef:fe:36:2f:bb:e2:83:81:2e:bc:27: 96:42:43:79:6e:ba:0d:9f:94:42:b8:69:93:56:d8: 43:3e:94:ef:ea:a6:ea:8d:ed:cb:0c:2c:9c:1a:3f: b8:1d:67:d3:b3:e2:84:cf:63:44:1d:70:9c:fa:7e: bc:8a:78:fa:03:18:a2:66:c0:1b:3a:0f:53:2c:f2: fa:f8:f2:72:0e:b6:ba:d1:08:de:4e:5e:ea:d1:6f: 9c:df:0f:f6:e3:b5:9b:6e:5c:77:0d:3b:47:33:ea: 02:de:6d:fa:3a:20:8a:3d:05:ac:ea:c3:64:11:a8: 52:96:80:30:2a:77:7d:95:07:c2:ce:d0:6b:36:e9: 60:c4:fe:c2:25:3a:e0:f1:ac:e3:2c:57:c7:42:ee: 9b:09:e3:8a:ce:2b:19:03:9b:4c:bb:9b:7b:30:18: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:16:E2:D5:A9:D7:7C:B4:B8:84:D6:2B:70:50:E5:52:1A:41:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:38:a8:ae:26:c4:a8:46:f7:ef:30:3b:44:49:f5:fd:60:ca: 65:a9:c1:8f:77:4d:af:56:d6:ca:58:53:36:6c:08:74:ea:50: 5d:c8:d4:6b:5e:5c:4f:fa:98:d7:ce:21:5e:00:44:c1:03:e6: 67:80:0a:2c:2b:7a:3c:83:50:20:c7:a1:29:29:c5:9e:46:85: 07:63:ac:fd:f7:80:34:75:2b:60:ff:36:fb:26:d2:07:28:67: b4:db:28:64:ba:8e:67:5a:61:33:a8:0a:b6:1a:95:44:e9:58: 97:ba:49:f3:df:a4:d7:64:fc:d5:b0:b8:de:a6:0a:77:84:38: e5:4e:a7:03:82:0e:4d:63:d6:ed:44:94:4c:ae:00:30:3c:94: 60:3f:b4:6e:b0:33:dd:b6:9d:2f:80:80:a1:74:c8:72:a2:e3: 6f:2b:bb:4d:8b:dd:ec:19:6d:9e:7b:99:7a:6b:87:d7:d4:82: e7:2f:0e:b9:e1:1b:56:67:8e:35:1d:09:44:87:8a:20:e7:14: 97:e3:26:fb:78:3e:ed:c9:2a:74:0a:e2:a1:66:a3:e6:f1:a6: 68:f5:3a:ef:51:94:02:a9:c2:e7:6d:93:f4:be:ce:98:33:d2: 5e:c6:d0:63:b2:35:93:00:ad:41:54:f4:da:95:a6:de:14:5b: ee:24:0e:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqCOmkVa7hyKh3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjVmNDgxNjktZTI1YS00MTIxLTg3NzctMzExNzM3Y2E5ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDaelhR9TRp9aQaomY9ORYGpgiMzgDVHy+vv 8gw+BsIA9e9HbLnm5+I+HAiAb8YIEHkDYvmqxM0NeQWQq7nnRxInUVO8ezFMbp6a aKnUlzFmWrzdOnyeuvwyq2A57/42L7vig4EuvCeWQkN5broNn5RCuGmTVthDPpTv 6qbqje3LDCycGj+4HWfTs+KEz2NEHXCc+n68inj6AxiiZsAbOg9TLPL6+PJyDra6 0QjeTl7q0W+c3w/247Wbblx3DTtHM+oC3m36OiCKPQWs6sNkEahSloAwKnd9lQfC ztBrNulgxP7CJTrg8azjLFfHQu6bCeOKzisZA5tMu5t7MBhN7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJY6FuLVqdd8tLiE1itwUOVSGkHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjA4MjExNmEtNGMxZC0z Y2QyLTg1ZTEtMmMyODNhMmQxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIg4qK4mxKhG9+8wO0RJ9f1gymWpwY93Ta9W1spYUzZsCHTqUF3I 1GteXE/6mNfOIV4ARMED5meACiwrejyDUCDHoSkpxZ5GhQdjrP33gDR1K2D/Nvsm 0gcoZ7TbKGS6jmdaYTOoCrYalUTpWJe6SfPfpNdk/NWwuN6mCneEOOVOpwOCDk1j 1u1ElEyuADA8lGA/tG6wM922nS+AgKF0yHKi428ru02L3ewZbZ57mXprh9fUgucv DrnhG1ZnjjUdCUSHiiDnFJfjJvt4Pu3JKnQK4qFmo+bxpmj1Ou9RlAKpwudtk/S+ zpgz0l7G0GOyNZMArUFU9NqVpt4UW+4kDgE= -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:36 2026 by rpki-client