This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
File: 2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa (raw, json)
Hash identifier: PMU4dz1OB4k/EtZ9BVF+ooBR19qaDfPEYazpJOV7MRk=
Subject key identifier: AB:13:E5:2C:37:B8:5A:5E:85:2B:00:C7:E1:24:44:E7:24:AA:A2:A2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C9967384D57B419FD395C1500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 132892
IP address blocks: 172.70.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:67:38:4d:57:b4:19:fd:39:5c:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=5fb135f9-d6ea-49bf-99be-84aa7b4ea476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:15:f0:19:ba:c1:73:ac:d5:bc:e3:5d:18:
4f:f9:01:a9:e9:b0:9e:c6:a2:4c:be:4c:6a:0d:c2:
d0:46:d5:43:29:db:a8:51:c2:89:ab:06:e2:2e:d1:
b1:00:91:90:61:12:8c:64:04:bc:d9:3a:e5:03:eb:
9b:37:38:16:68:d6:18:43:76:49:e3:22:e2:97:ef:
ff:83:d9:e8:66:09:79:08:c0:fa:b6:d9:cf:35:b9:
ac:c2:e8:99:c0:34:f9:b2:b7:be:1f:61:9f:f4:3b:
c2:07:07:90:2d:f8:19:94:49:bd:c8:0a:50:da:3f:
81:53:61:c3:b3:02:05:63:70:8c:0b:f6:a3:b9:70:
70:96:8a:94:a6:ad:8c:71:fd:a9:cb:f2:26:9b:d4:
60:fa:59:b8:6b:37:00:5f:c1:90:7c:22:62:69:60:
5d:e7:1e:12:21:91:7a:63:55:00:76:32:33:56:b6:
b9:4b:da:63:bc:94:54:9d:a0:65:6e:85:62:87:99:
78:d2:57:66:68:cc:88:b2:bb:23:8f:95:7b:48:99:
e9:e2:73:35:a4:41:fa:8d:4c:b8:58:58:cf:2a:ef:
6a:f1:5f:b3:39:1d:1c:e9:fb:b6:7d:23:c3:c4:f1:
fc:27:03:be:1a:24:ef:bb:f8:b9:6e:aa:b6:72:3a:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:E5:2C:37:B8:5A:5E:85:2B:00:C7:E1:24:44:E7:24:AA:A2:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3d:4b:41:23:d6:1b:53:fc:5c:1e:e5:36:0e:3c:dd:32:67:
c8:ab:cd:c2:2f:12:21:36:b6:60:a9:1c:45:fe:b7:26:29:62:
9d:27:1e:33:7f:d2:c5:c7:54:66:bf:9f:51:cb:de:a2:18:bf:
30:3a:d2:6d:60:3d:55:b6:40:0c:23:3d:a2:5a:e1:a6:88:c7:
12:92:1d:6f:a5:83:f3:a2:84:a6:d0:40:4c:00:1f:21:0b:80:
b3:2c:f3:6d:8f:40:a0:41:dd:9d:a3:2b:e0:78:03:1a:2a:ad:
87:bc:9e:7f:75:de:41:c9:0e:f2:38:db:1c:59:b5:d5:62:e2:
e9:d7:d2:a0:a2:c2:54:64:ca:3d:ce:c5:48:d0:48:37:9e:73:
08:2d:48:6c:9b:a4:45:df:8a:bc:df:0c:98:35:d1:4f:cb:3a:
c4:97:b8:c7:6f:41:3c:cc:85:c7:2a:bc:45:6c:84:df:7d:41:
a3:53:e6:ed:8f:a2:55:60:a2:a3:94:9e:bc:6a:2c:fd:52:7b:
05:40:fa:de:0a:12:49:05:ac:8b:76:10:ca:e2:29:fb:93:11:
46:19:ce:8d:3f:fd:a8:ac:3e:35:50:dc:e0:b3:53:73:34:43:
ac:97:14:ce:b8:ab:24:24:7a:44:09:4a:d5:0c:6f:85:67:3f:
1c:8b:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:22 2026 by rpki-client