This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa File: c8b5f545-8d59-3559-b440-3648cf897e34.roa (raw, json) Hash identifier: 0KD9BQqr5Jk+XS2XF7As7uuZlggz5ipHAcjWpsAhzok= Subject key identifier: C1:1D:9A:F6:AC:73:2F:04:D9:63:C3:A9:F6:EE:F6:32:BB:29:69:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8A0C78E3C1A150DAD5D3E7FC Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.68.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:78:e3:c1:a1:50:da:d5:d3:e7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=de849a1e-0fe1-4f63-9942-5acc31ff6a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:be:b6:51:23:6c:d0:79:90:94:a5:c3:0e: b9:51:ac:cc:c8:71:a9:0c:89:f5:00:4f:87:b0:56: 2c:15:7d:21:1d:a9:3e:b8:53:28:77:b4:be:ab:2e: e8:d9:dd:51:55:0a:09:3b:46:71:15:e7:fa:92:c1: 55:1c:7c:ac:6d:dc:d3:9b:ce:a9:01:d5:98:13:86: 04:9d:bf:55:6d:fa:e7:ee:5c:4c:92:19:ee:49:76: 63:ed:ff:56:89:fe:0a:f0:86:32:01:9f:c6:6b:7c: 1c:50:eb:eb:4f:a4:c1:e0:f5:44:dd:6d:ae:a2:ce: e3:2d:ea:f4:09:b8:65:71:82:a8:f7:1a:48:0c:cd: b3:a2:5e:58:ef:f9:6a:b2:b2:15:e9:ac:48:5d:69: 30:22:a8:3b:29:42:cf:15:1b:0d:40:ac:ea:3d:f3: ad:e0:b7:81:34:d1:92:11:89:95:54:1a:1b:27:65: 89:91:87:db:42:08:4a:cb:c0:7b:6e:af:87:e6:99: a3:cd:68:ad:81:33:d3:06:22:6c:28:d7:87:57:9a: ec:2a:89:cd:52:3d:d5:56:97:93:2e:ab:45:6d:c9: a4:f6:e8:1e:da:b2:6f:31:29:f8:03:66:e3:09:cc: ce:20:be:90:dd:91:7a:d1:72:08:7c:70:e3:d2:fa: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:9A:F6:AC:73:2F:04:D9:63:C3:A9:F6:EE:F6:32:BB:29:69:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:00:60:5f:20:57:eb:da:61:01:60:6c:fb:60:1d:42:8f:b1: b5:e4:68:00:c0:bc:0f:61:19:39:fa:fc:ff:5e:64:c3:2a:e4: 51:d0:6a:69:d8:60:95:f4:bf:bd:68:8e:36:05:e3:35:cd:a3: c9:04:4c:a9:7f:a7:42:52:70:ef:6c:0b:95:6c:9b:9a:94:a3: 23:8e:d9:19:ef:5c:2e:84:83:94:19:86:54:3a:a9:63:00:e7: 03:36:30:2f:75:84:38:4b:ce:d8:ef:4d:24:9f:76:67:ee:48: cb:94:65:96:5f:16:d1:74:50:d5:15:30:19:c7:b1:30:d9:55: 74:e8:35:83:c8:ba:e0:b5:f1:00:0c:fb:9f:04:95:98:18:1c: d3:d1:22:a1:71:b6:d7:e3:d4:7a:56:ef:53:57:97:1f:a9:4b: 3e:da:a2:5e:07:cf:51:4a:5f:f3:81:7a:b2:22:95:13:a4:25: ae:d0:1d:cc:a3:b7:9f:bd:a7:7f:9a:ed:87:e3:9a:0f:8e:97: e6:ad:a5:89:3f:2b:fa:8e:a0:fc:09:9a:14:af:ce:d2:27:34: 1c:76:db:43:73:51:24:02:6b:a9:43:b6:2a:34:cf:d2:88:2b: e5:2f:e0:a1:47:0e:29:49:b1:b0:d5:6b:63:1c:53:32:96:77: 21:c3:36:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDHjjwaFQ2tXT5/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZGU4NDlhMWUtMGZlMS00ZjYzLTk5NDItNWFjYzMxZmY2YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKC+tlEjbNB5kJSlww65UazMyHGpDIn1AE+H sFYsFX0hHak+uFMod7S+qy7o2d1RVQoJO0ZxFef6ksFVHHysbdzTm86pAdWYE4YE nb9Vbfrn7lxMkhnuSXZj7f9Wif4K8IYyAZ/Ga3wcUOvrT6TB4PVE3W2uos7jLer0 CbhlcYKo9xpIDM2zol5Y7/lqsrIV6axIXWkwIqg7KULPFRsNQKzqPfOt4LeBNNGS EYmVVBobJ2WJkYfbQghKy8B7bq+H5pmjzWitgTPTBiJsKNeHV5rsKonNUj3VVpeT LqtFbcmk9uge2rJvMSn4A2bjCczOIL6Q3ZF60XIIfHDj0vqbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEdmvascy8E2WPDqfbu9jK7KWlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzhiNWY1NDUtOGQ1OS0z NTU5LWI0NDAtMzY0OGNmODk3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQAYF8gV+vaYQFgbPtgHUKPsbXkaADAvA9hGTn6/P9eZMMq5FHQamnY YJX0v71ojjYF4zXNo8kETKl/p0JScO9sC5Vsm5qUoyOO2RnvXC6Eg5QZhlQ6qWMA 5wM2MC91hDhLztjvTSSfdmfuSMuUZZZfFtF0UNUVMBnHsTDZVXToNYPIuuC18QAM +58ElZgYHNPRIqFxttfj1HpW71NXlx+pSz7aol4Hz1FKX/OBerIilROkJa7QHcyj t5+9p3+a7Yfjmg+Ol+atpYk/K/qOoPwJmhSvztInNBx220NzUSQCa6lDtio0z9KI K+Uv4KFHDilJsbDVa2McUzKWdyHDNuw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:07 2026 by rpki-client