This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa File: 88f60682-178e-3081-8a29-930c6e857939.roa (raw, json) Hash identifier: ioOf3fiUKSPlG1+4+TmI2yjVfc56ytisMANWj5d/7mg= Subject key identifier: 50:C1:C5:A6:8B:E7:5D:40:41:7A:E1:98:32:2E:7B:C3:08:60:97:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C1630EAC93B261A4490080E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:ea:c9:3b:26:1a:44:90:08:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=2a9651ce-91e9-467c-a9b5-56dca5aed570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:7e:a0:76:52:2c:d7:f6:55:90:3e:77:63: b5:9b:74:fa:ac:7f:44:eb:dc:1a:25:1d:5a:5d:33: 6e:51:2a:99:c5:1a:ee:3f:92:25:f5:00:0f:f2:a9: 0f:ff:93:5c:02:ac:e2:3e:9f:7b:cd:05:55:8f:f1: 40:15:1e:6a:f2:6b:f8:9e:27:90:23:b9:63:11:e3: 4d:6d:39:a2:19:31:d8:00:ed:86:b9:57:5a:3b:04: 07:d2:86:65:43:75:d9:86:09:5d:7d:8f:26:c8:e2: 50:96:15:91:f2:30:a0:59:00:83:52:3a:5e:37:c2: ed:de:bd:1e:7c:8a:49:d1:fe:a7:90:c0:3b:32:ce: 3b:df:e9:0f:91:a0:59:96:48:22:25:cd:d3:15:5a: c9:de:79:a0:bd:d9:45:7c:2c:01:e2:e5:2d:e8:ef: bd:08:ff:5f:a6:d7:91:5a:02:4d:f2:6e:f4:2e:e1: 54:63:15:ba:fa:77:59:56:98:0c:6c:6f:7e:ab:09: b9:d6:23:89:2c:89:80:b5:53:33:9b:e5:01:14:05: 24:8c:0d:bb:10:bc:1b:2f:33:bb:a8:3d:62:af:53: cb:5f:d5:3f:59:79:b8:5a:e4:51:77:d0:15:bb:3d: c7:eb:89:a4:d5:a1:21:7c:7a:75:20:85:1d:c7:b4: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C1:C5:A6:8B:E7:5D:40:41:7A:E1:98:32:2E:7B:C3:08:60:97:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c3:fa:6e:82:98:cc:e9:df:26:d6:49:e5:5a:74:a5:00:ac: 10:58:f5:f6:0c:53:d1:af:ab:ed:e5:6e:c3:e5:fd:a9:af:d8: b7:7f:5f:76:18:de:eb:3b:61:0f:63:71:98:07:e8:96:ed:58: d3:ce:b6:63:e5:54:61:28:82:3e:8a:94:42:13:c7:83:94:0b: 9d:bf:8a:bb:2e:1e:7a:a0:bd:af:b5:56:67:27:3c:c0:28:05: d4:f7:e9:7c:0b:66:25:38:10:43:3a:6a:22:05:7b:b2:68:0e: d6:94:9b:f5:65:0f:14:9f:78:af:15:97:8a:2d:fe:9f:8d:f9: 91:03:a2:13:8a:8a:a3:3d:a8:2a:ed:20:5f:ae:33:0f:a1:be: be:d0:8c:63:d4:56:b7:96:8b:d2:06:d5:c3:a6:21:fd:38:6a: ed:04:0b:03:52:16:f9:0f:e3:6e:3a:9c:27:a2:a0:a1:d2:3f: 51:10:2e:a6:02:32:bb:f3:55:e1:04:ed:8f:21:38:b8:9f:25: df:28:8e:00:fc:bf:3e:51:aa:29:03:d7:77:44:54:98:8a:5a: 86:cc:57:93:aa:01:74:fa:fd:e4:2c:5f:a9:5b:ab:41:88:19: 8b:9b:c7:dc:5f:a4:a4:39:81:a6:db:d0:13:5c:6d:b1:ef:44: ec:df:4c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMOrJOyYaRJAIDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk MmE5NjUxY2UtOTFlOS00NjdjLWE5YjUtNTZkY2E1YWVkNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOh+oHZSLNf2VZA+d2O1m3T6rH9E69waJR1a XTNuUSqZxRruP5Il9QAP8qkP/5NcAqziPp97zQVVj/FAFR5q8mv4nieQI7ljEeNN bTmiGTHYAO2GuVdaOwQH0oZlQ3XZhgldfY8myOJQlhWR8jCgWQCDUjpeN8Lt3r0e fIpJ0f6nkMA7Ms473+kPkaBZlkgiJc3TFVrJ3nmgvdlFfCwB4uUt6O+9CP9fpteR WgJN8m70LuFUYxW6+ndZVpgMbG9+qwm51iOJLImAtVMzm+UBFAUkjA27ELwbLzO7 qD1ir1PLX9U/WXm4WuRRd9AVuz3H64mk1aEhfHp1IIUdx7TCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDBxaaL511AQXrhmDIue8MIYJd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODhmNjA2ODItMTc4ZS0z MDgxLThhMjktOTMwYzZlODU3OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzD+m6CmMzp3ybWSeVadKUArBBY9fYMU9Gvq+3lbsPl/amv2Ld/X3YY 3us7YQ9jcZgH6JbtWNPOtmPlVGEogj6KlEITx4OUC52/irsuHnqgva+1VmcnPMAo BdT36XwLZiU4EEM6aiIFe7JoDtaUm/VlDxSfeK8Vl4ot/p+N+ZEDohOKiqM9qCrt IF+uMw+hvr7QjGPUVreWi9IG1cOmIf04au0ECwNSFvkP4246nCeioKHSP1EQLqYC MrvzVeEE7Y8hOLifJd8ojgD8vz5RqikD13dEVJiKWobMV5OqAXT6/eQsX6lbq0GI GYubx9xfpKQ5gabb0BNcbbHvROzfTNY= -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:04 2025 by rpki-client