This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa File: ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa (raw, json) Hash identifier: YNCCMEagUVzENeh9SerjtkW/S5PoY/7HHMY8auFkkDw= Subject key identifier: 28:74:FE:6A:C8:43:42:D9:3F:12:82:84:8D:4D:4F:B7:DB:D8:E5:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A840EB7A74B2B1030B7830 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:40:eb:7a:74:b2:b1:03:0b:78:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5a4c2df9-fe43-4af3-8381-bf3e1e6487ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:30:77:25:7e:3f:74:e1:66:bb:6c:d4:76: 58:c2:5d:a3:25:0a:c7:ac:21:2f:f0:fe:65:c5:9a: 85:b3:e7:76:67:62:a3:dd:0c:09:25:68:87:32:5b: 49:08:fd:c0:e9:f0:d3:15:da:4e:53:70:89:08:a1: 79:ce:1e:58:2c:42:53:56:98:12:3a:ab:ce:d5:32: 98:d0:40:50:53:73:4f:53:b9:d1:de:d8:a1:4d:f8: 72:59:8d:52:82:09:21:53:cc:07:32:8d:88:7a:b9: 86:a5:a8:a6:11:99:62:89:12:e0:71:f1:6e:0a:8f: cf:87:96:ed:25:8a:56:20:94:c1:ba:1b:6d:54:90: f2:8a:77:b2:61:63:39:f9:fa:87:a6:d6:0e:84:88: 34:bd:8d:a0:aa:24:a5:44:6e:b0:1e:8b:7b:5b:79: 0b:64:a2:7d:a5:fe:8b:7e:2d:1b:8c:6c:db:82:f2: 2e:be:f5:56:aa:fe:14:b6:1b:d7:1f:ed:11:ac:25: f9:61:ea:4e:5b:7e:59:e8:45:37:1d:69:3f:b6:09: 49:e5:b3:6c:c4:e7:97:5a:22:04:2c:3f:9c:64:aa: 16:7f:41:32:37:cb:64:e9:57:0f:ed:11:71:96:b9: ba:d0:d0:f4:af:09:4c:dd:d1:26:44:3a:ef:35:91: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:FE:6A:C8:43:42:D9:3F:12:82:84:8D:4D:4F:B7:DB:D8:E5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:47:99:12:87:b7:65:85:e9:b4:a5:e3:a7:12:7f:d4:7f: 42:e4:7e:fa:9b:2a:ad:b9:83:81:64:40:9c:4a:04:8b:47:91: 1d:cb:7c:e8:5b:4b:e7:27:87:69:87:89:66:ed:f4:2a:e0:46: b7:18:cc:2a:0c:25:15:4a:a2:e5:b1:8b:9e:45:c7:88:6c:9e: 18:c0:ec:96:55:19:b9:8f:c8:a4:9c:74:10:6a:76:64:0e:dc: 3d:db:cc:d5:22:c8:a9:df:03:8a:bd:20:a7:62:76:1b:d1:93: 3b:23:59:a9:e4:f7:40:da:1c:4b:9b:1c:7a:c8:ff:7d:25:fb: fd:13:65:8d:66:3e:99:a2:83:b7:6a:38:aa:4b:30:0d:f3:81: b4:37:71:c5:07:a1:8c:bd:52:fd:7a:d2:53:66:85:95:7d:3c: dc:ca:bf:8f:ef:aa:32:ac:d3:ec:5a:9a:fd:2d:e8:d2:7c:4d: 54:3f:cb:42:9a:bc:a4:c5:0d:12:8f:e7:9a:ac:c1:a9:32:67: 92:6c:5c:e6:6a:a4:48:30:4a:bd:f4:13:00:e4:2f:44:4f:08: a8:5f:61:71:62:6c:f2:15:d5:1b:21:93:9f:30:c7:ea:1f:90: 83:40:e9:4e:72:fb:b9:6d:60:8f:f2:a1:fb:ed:59:d5:53:c4: 7e:fb:97:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqEDrenSysQMLeDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NWE0YzJkZjktZmU0My00YWYzLTgzODEtYmYzZTFlNjQ4N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkEwdyV+P3ThZrts1HZYwl2jJQrHrCEv8P5l xZqFs+d2Z2Kj3QwJJWiHMltJCP3A6fDTFdpOU3CJCKF5zh5YLEJTVpgSOqvO1TKY 0EBQU3NPU7nR3tihTfhyWY1SggkhU8wHMo2IermGpaimEZliiRLgcfFuCo/Ph5bt JYpWIJTBuhttVJDyineyYWM5+fqHptYOhIg0vY2gqiSlRG6wHot7W3kLZKJ9pf6L fi0bjGzbgvIuvvVWqv4UthvXH+0RrCX5YepOW35Z6EU3HWk/tglJ5bNsxOeXWiIE LD+cZKoWf0EyN8tk6VcP7RFxlrm60ND0rwlM3dEmRDrvNZGMEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCh0/mrIQ0LZPxKChI1NT7fb2OWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmY5NWM2ZWUtNjIwNi0z YzQ4LWE4ZmQtZGRlMmE1NmI2NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEt+R5kSh7dlhem0peOnEn/Uf0LkfvqbKq25g4FkQJxKBItHkR3L fOhbS+cnh2mHiWbt9CrgRrcYzCoMJRVKouWxi55Fx4hsnhjA7JZVGbmPyKScdBBq dmQO3D3bzNUiyKnfA4q9IKdidhvRkzsjWank90DaHEubHHrI/30l+/0TZY1mPpmi g7dqOKpLMA3zgbQ3ccUHoYy9Uv160lNmhZV9PNzKv4/vqjKs0+xamv0t6NJ8TVQ/ y0KavKTFDRKP55qswakyZ5JsXOZqpEgwSr30EwDkL0RPCKhfYXFibPIV1Rshk58w x+ofkINA6U5y+7ltYI/yofvtWdVTxH77lzI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:33 2026 by rpki-client