This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa
File: b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa (raw, json)
Hash identifier: QTRn5luZ/PrxEtP80lWmEDaCv9fOioiwO7ex6scUzEA=
Subject key identifier: 3B:59:0A:75:9B:A6:A7:22:3C:4A:93:19:04:13:6C:A3:AC:CF:36:49
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C44411D604A5BD3E502CEC1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa
Signing time: Mon 22 Dec 2025 02:00:32 +0000
ROA not before: Mon 22 Dec 2025 02:00:32 +0000
ROA not after: Sun 22 Mar 2026 01:00:32 +0000
asID: 14789
IP address blocks: 172.71.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:44:41:1d:60:4a:5b:d3:e5:02:ce:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 22 02:00:32 2025 GMT
Not After : Mar 22 01:00:32 2026 GMT
Subject: CN=4aa0db40-f279-4080-b480-70cc1fa32510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:92:90:df:b9:18:2b:e0:9b:8f:21:00:6f:
fc:f1:11:f6:0b:43:a6:8a:d7:1c:a7:81:2f:bf:fc:
ed:1d:52:a6:4e:88:2a:21:c9:c5:de:6a:ea:b4:68:
21:f3:8b:99:ee:be:9e:04:16:43:1f:1c:28:e5:62:
6d:df:86:e3:9e:ab:0f:c4:45:63:b9:a8:30:a2:87:
70:0d:11:f8:30:ab:ef:a1:8d:8e:c5:99:be:81:77:
5e:db:56:90:3f:2c:58:39:ad:d2:65:c4:b1:1a:3b:
26:c2:9e:c6:43:ac:c4:05:c1:6c:42:6f:0b:34:67:
15:a5:8c:cc:40:16:52:61:e6:00:85:88:1a:1f:08:
a9:fe:f0:70:a6:4d:65:07:58:80:9e:0d:6d:1a:4a:
73:4a:07:05:ea:40:c1:39:1e:e8:3e:04:fe:6f:c7:
39:46:d0:70:bb:78:32:51:f9:5c:a8:cf:c5:bc:b3:
c8:01:c5:18:29:77:72:ac:df:61:80:94:cd:22:3d:
38:ee:cf:92:72:0f:7c:d2:7a:7d:8a:10:1b:b3:ab:
a1:c2:af:7c:ee:51:61:0b:ee:69:95:01:7f:3d:8a:
ed:a5:b5:f6:2c:86:ef:6c:e0:b8:05:a6:15:2f:e9:
c5:e7:f5:63:ae:a4:f0:de:06:0b:6a:35:1a:80:c8:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:0A:75:9B:A6:A7:22:3C:4A:93:19:04:13:6C:A3:AC:CF:36:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:4b:43:6e:be:57:3e:2c:2a:88:6f:d5:5d:af:03:69:ab:e7:
9c:0a:20:0a:e1:49:af:bf:64:39:51:75:a2:ff:de:93:66:48:
75:c9:49:92:78:4a:99:4b:ca:f2:51:17:ad:86:ae:c6:13:2e:
49:e7:0f:3a:b2:6d:3d:b0:6b:79:0d:f0:4e:19:75:a0:11:fe:
2c:60:22:47:6d:96:59:08:ae:b7:41:c3:a7:02:05:0c:44:72:
02:02:2f:81:09:d4:d1:a7:67:c1:2f:67:9d:3c:a5:e8:59:39:
f8:a4:53:eb:2b:ff:be:11:06:69:6f:c2:83:b5:35:24:c0:9f:
30:e7:88:11:15:74:7a:c4:39:5e:68:30:c9:6b:e4:8e:79:c6:
bb:09:27:92:83:f1:cc:78:87:02:f0:f7:96:93:ee:6a:f2:89:
a9:16:46:fb:08:41:8f:20:70:56:d1:f3:30:67:11:39:cb:3c:
73:81:38:07:cb:28:a1:17:e4:b3:37:c2:59:1f:5c:de:04:70:
93:6e:cc:82:e1:d8:8d:00:d1:c4:5e:f4:3f:24:2a:82:80:b5:
8e:95:fa:eb:df:f6:6f:83:ff:60:24:28:2b:60:79:c8:7a:78:
ed:cd:27:d0:2f:ee:fc:1c:da:99:3e:0a:d5:b0:69:e8:f1:ad:
f9:9a:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:18 2026 by rpki-client