This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
File: 86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa (raw, json)
Hash identifier: qTDKx9+mf9kEkk7LSGqg2DSMTYW86mLMHqb0j1ofAT8=
Subject key identifier: 20:E7:23:40:A7:D1:91:2D:0E:F3:97:09:60:03:C8:E2:51:7A:65:CC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C9106FE411FD4FF43323E9880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
Signing time: Sun 18 Jan 2026 14:00:39 +0000
ROA not before: Sun 18 Jan 2026 14:00:39 +0000
ROA not after: Sat 18 Apr 2026 13:00:39 +0000
asID: 13335
IP address blocks: 172.70.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:91:06:fe:41:1f:d4:ff:43:32:3e:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 18 14:00:39 2026 GMT
Not After : Apr 18 13:00:39 2026 GMT
Subject: CN=3dfb547c-4f56-4c5e-a467-4b400aac4384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:ca:5c:8f:20:c7:2d:2e:8d:3d:6c:ea:e6:
a4:e8:84:40:c3:c3:0f:3e:94:82:a5:9f:51:68:4b:
06:6a:ac:39:ea:de:04:f0:ea:7e:8c:59:15:0f:2d:
d4:41:e5:cb:af:8f:54:18:e4:5a:73:29:e6:41:db:
9e:9c:7f:7d:71:d9:70:6a:f3:ac:63:91:00:f7:91:
63:b3:d9:8f:08:1b:6d:09:69:de:97:3f:04:52:41:
12:5b:b4:65:03:d2:79:9b:07:7a:a7:c1:59:dd:43:
32:a1:aa:9f:93:ed:1c:4d:c6:2d:82:8b:51:e9:11:
d8:d1:50:02:5a:06:fb:df:45:20:90:c8:a2:8d:ab:
a7:a1:15:7c:b4:7d:7e:8e:ed:31:e0:10:d0:af:81:
1d:21:b4:b4:19:62:80:0d:da:8e:d4:4d:f6:6e:fa:
36:b3:e8:ee:63:2c:6c:0e:72:d5:cc:9c:51:5b:17:
88:8c:e3:bb:3b:77:b7:c8:38:84:ac:86:2c:6e:88:
36:61:f9:c9:7d:41:ac:da:d6:10:75:2b:12:cc:51:
70:0a:00:ef:6f:8f:8d:fd:5a:ee:dc:87:6e:1a:6e:
ca:65:6a:e0:03:90:67:7d:0f:56:46:63:72:b0:0e:
28:b1:b7:03:d9:5e:17:35:5c:49:40:cc:d9:58:38:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:23:40:A7:D1:91:2D:0E:F3:97:09:60:03:C8:E2:51:7A:65:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:13:56:ed:66:b5:a7:af:3e:9a:c5:59:8c:58:56:1f:2e:fc:
06:1d:63:32:85:e6:dd:fd:cd:fa:74:f4:f3:6d:8f:e9:47:fc:
e1:34:95:96:ad:94:f8:c4:c8:69:8e:00:7e:c1:6e:6a:13:d1:
1c:af:c9:af:58:47:3f:43:57:e8:1e:e4:1f:b9:bf:f0:44:8d:
68:fd:b1:b1:5f:ad:70:37:8e:13:dd:65:a7:3d:27:fb:3a:ed:
a6:49:4a:41:58:8b:58:11:a3:73:3d:81:4f:b1:96:b6:46:e4:
24:29:9f:8a:f0:79:cb:38:4d:68:c2:a4:b2:d3:16:6f:e3:ed:
59:f4:a5:c7:8c:16:29:35:66:8b:79:c7:dc:f7:ec:09:21:b4:
8e:91:db:3b:eb:3f:94:29:5c:b8:25:fb:66:ee:78:4e:02:1e:
e4:75:65:8c:1c:d3:a1:4a:b2:53:0c:36:fe:56:78:0c:96:00:
d6:f0:78:49:17:71:52:57:6e:6a:2a:e1:46:7e:ee:78:4d:13:
17:ee:4b:13:ae:29:a8:f1:c4:9d:20:0e:66:45:94:9c:4f:81:
61:33:a3:c1:97:58:ad:19:60:96:3b:72:46:89:10:81:b8:01:
96:95:e0:ae:d2:1d:40:98:18:62:5e:90:da:b2:bf:a9:37:1b:
1a:dc:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:58 2026 by rpki-client