This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa File: ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json) Hash identifier: pwrLNSR0ALeHT60e00rebRDxN3c6grEckXPOIBRcX78= Subject key identifier: DD:F9:F9:2B:C4:21:DC:8B:35:2B:82:94:46:96:7D:50:C2:D0:1B:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A67E0BDA20891BFCB56014 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:7e:0b:da:20:89:1b:fc:b5:60:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b74a5f8b-8789-4f49-8ca5-13ae35cf4a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:60:65:64:61:29:81:e0:b6:47:e6:6f:9a:f3: c7:39:81:e1:d7:66:94:ac:58:22:27:3e:cf:9b:38: 98:96:f6:42:32:ec:16:1e:5b:bf:ef:22:36:38:a7: 01:72:35:2e:02:f4:52:70:19:30:5b:b7:74:8e:8e: 97:3a:74:cd:6e:af:33:fd:83:21:da:35:40:de:93: 7b:23:9f:87:d8:3f:fd:40:cc:14:06:9f:3b:4e:39: 7e:20:42:43:d8:09:dd:03:d6:cc:cf:7c:52:32:11: 5a:bd:ac:cf:b0:69:40:ef:46:86:59:c6:13:df:29: ec:ce:d7:ee:b0:d6:69:fb:0c:7c:1e:a1:2a:c3:9d: 5a:f0:a0:e5:70:76:62:b7:9c:07:d7:9c:41:97:b2: 5c:a4:0e:31:ea:78:53:de:da:50:28:c5:86:b7:94: 57:2d:35:2a:d3:aa:1e:17:45:c6:a3:1b:72:6f:ca: 02:1d:42:42:84:c4:42:ac:7b:11:4b:98:41:d0:d2: 8d:6d:cc:05:3b:3c:b3:da:d8:2e:63:07:d1:e3:25: 85:52:bb:38:b9:37:9a:c8:48:d8:55:6b:15:58:b1: 38:a7:80:ad:49:ac:a7:7b:ad:6f:f7:21:c2:55:86: ca:c9:b9:29:73:b2:a1:c7:4f:a1:b3:32:f8:5d:d6: 26:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F9:F9:2B:C4:21:DC:8B:35:2B:82:94:46:96:7D:50:C2:D0:1B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e2:62:ac:98:04:1b:f9:03:4e:5a:a4:0d:f7:b1:61:d2:ac: 29:64:c9:c0:22:5b:65:cc:a1:6e:87:a8:01:3c:c9:5e:43:6d: 9d:0e:9d:e4:d1:88:b4:8a:01:aa:7d:0d:d6:3b:dc:e2:57:5e: bf:87:0b:0e:66:38:9d:9f:de:1e:03:85:76:91:98:fe:23:9d: 52:8e:27:43:a8:69:f0:60:00:24:c2:e2:b1:bb:f1:47:4e:ed: e4:15:ee:00:85:ab:d3:9d:0d:8e:24:fa:6c:96:4e:4d:66:4f: e4:78:3c:c3:19:8f:4c:ca:3d:bf:60:ae:d0:47:a8:94:64:44: d3:ba:fd:9a:cd:ea:70:e4:6b:ae:ab:fa:ec:06:9f:46:c4:f1: 4f:e4:1d:1a:80:35:61:07:7f:86:c7:16:30:58:c6:e4:d2:be: 44:e5:95:ac:ca:6e:34:6e:76:a7:39:2f:33:78:69:6e:6b:c2: 8f:fd:25:8b:7f:08:62:b7:bd:57:37:a7:4b:de:8f:6c:62:1e: b1:a9:3e:9e:b6:8c:50:35:c7:59:82:bb:94:37:90:43:41:d6: af:f2:93:af:66:a9:39:8f:39:4e:36:e0:3e:9f:0f:93:31:f7: 75:32:59:9b:52:89:f2:99:79:34:48:97:ae:2f:52:50:85:58: 12:76:7d:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpn4L2iCJG/y1YBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Yjc0YTVmOGItODc4OS00ZjQ5LThjYTUtMTNhZTM1Y2Y0YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGBlZGEpgeC2R+ZvmvPHOYHh12aUrFgiJz7P mziYlvZCMuwWHlu/7yI2OKcBcjUuAvRScBkwW7d0jo6XOnTNbq8z/YMh2jVA3pN7 I5+H2D/9QMwUBp87Tjl+IEJD2AndA9bMz3xSMhFavazPsGlA70aGWcYT3ynsztfu sNZp+wx8HqEqw51a8KDlcHZit5wH15xBl7JcpA4x6nhT3tpQKMWGt5RXLTUq06oe F0XGoxtyb8oCHUJChMRCrHsRS5hB0NKNbcwFOzyz2tguYwfR4yWFUrs4uTeayEjY VWsVWLE4p4CtSayne61v9yHCVYbKybkpc7Khx0+hszL4XdYmowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN35+SvEIdyLNSuClEaWfVDC0BsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E1N2Y4YWUtMzc4Ny0z OTgyLWI0MjMtZWEzNWJiZjQyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/iYqyYBBv5A05apA33sWHSrClkycAiW2XMoW6HqAE8yV5DbZ0O neTRiLSKAap9DdY73OJXXr+HCw5mOJ2f3h4DhXaRmP4jnVKOJ0OoafBgACTC4rG7 8UdO7eQV7gCFq9OdDY4k+myWTk1mT+R4PMMZj0zKPb9grtBHqJRkRNO6/ZrN6nDk a66r+uwGn0bE8U/kHRqANWEHf4bHFjBYxuTSvkTllazKbjRudqc5LzN4aW5rwo/9 JYt/CGK3vVc3p0vej2xiHrGpPp62jFA1x1mCu5Q3kENB1q/yk69mqTmPOU424D6f D5Mx93UyWZtSifKZeTRIl64vUlCFWBJ2feg= -----END CERTIFICATE-----Generated at Tue Dec 23 15:24:16 2025 by rpki-client