This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json) Hash identifier: 4d0fr/+VaQO/z+gFlVs85ym+Ugoe+pneRAitz57PdDs= Subject key identifier: A8:3B:77:E3:6A:72:83:97:39:36:71:13:F8:87:DD:E0:57:A6:ED:60 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584C7D7C659B300AE7C14EFE5E00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 16696 IP address blocks: 67.221.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:65:9b:30:0a:e7:c1:4e:fe:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=f2be709b-4217-41ff-b8f8-6f14bc10ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:4f:cd:e3:99:25:70:f3:f8:36:c4:62:12: 71:b6:fe:03:e9:d1:0c:33:dc:17:a3:ce:5d:17:b4: 68:74:d7:de:ae:db:7d:d8:5b:29:68:0d:09:f1:b5: 86:c1:f1:f0:35:a8:17:b0:76:97:df:71:32:21:68: 57:49:7e:b8:4c:54:8f:76:aa:17:f6:11:0e:2a:73: 2b:20:a5:8b:02:73:dd:54:13:68:99:ac:e7:2e:b2: 56:02:9a:ab:61:db:c7:1c:c8:8a:f1:b7:0a:9f:44: 82:2b:27:a2:e3:36:7e:dc:0d:58:d6:59:f3:a2:15: 3f:0a:0e:f2:8f:8b:46:17:ed:07:83:d1:95:88:19: 4d:4a:b7:85:55:cf:4d:78:60:3e:64:79:f9:8b:e4: 52:31:a8:c7:96:54:86:47:08:b3:a6:11:cc:5e:a0: e2:c5:d2:86:0d:10:2f:2a:22:7b:c7:4c:ae:aa:3e: 12:48:b5:b3:b4:e2:9c:02:a1:0c:84:65:32:21:9d: aa:d9:73:5e:29:e6:2d:94:0b:9c:c4:99:2d:df:14: 0a:89:11:e8:dd:5a:72:67:ba:80:b3:98:18:12:6c: 94:ce:75:f5:97:30:ae:73:09:61:38:9e:ae:2f:6c: e0:53:e4:51:f0:47:9f:1d:27:51:44:7e:dd:ef:9e: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3B:77:E3:6A:72:83:97:39:36:71:13:F8:87:DD:E0:57:A6:ED:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cf:46:d2:b4:87:00:93:c1:e6:a5:0c:a2:45:ac:ba:93:33: b7:47:ab:2b:91:ce:05:36:88:f6:9e:c5:65:29:5f:22:f8:d9: 54:cd:21:05:d5:0f:15:20:36:84:9f:b0:25:89:0b:31:43:40: 4f:38:42:6e:a1:46:17:83:b8:82:d8:30:39:fb:d9:90:8d:2d: f7:3f:bc:c1:24:d7:b2:6a:ab:e6:03:54:46:36:ae:6c:28:53: a1:28:95:e7:f6:2a:0d:d1:42:22:5f:32:4b:14:b2:8b:23:cd: 4c:b3:95:c5:f0:b8:07:7b:c8:1e:26:5d:64:6c:59:ca:4c:a6: 61:a7:a4:b8:33:69:6d:bb:68:0a:f4:b0:f5:43:ab:e0:92:ea: a9:14:54:45:7d:51:b6:73:59:8b:cf:39:d1:cf:e5:9d:33:10: 9a:8a:c4:23:b5:5f:b5:ff:51:9e:1d:70:f7:10:29:ec:b3:8b: 8c:4f:20:15:ae:43:c4:0f:06:f3:15:bc:f0:c7:d0:eb:db:c2: ed:54:ab:25:69:33:f0:9a:ea:31:28:3a:db:00:11:92:0e:d5: 23:22:1c:2c:68:74:7f:a8:aa:e2:3b:e4:78:66:3c:e8:99:9b: f8:0b:38:bf:75:72:7e:4a:48:df:89:6c:3d:4e:23:60:79:51: 9f:e6:07:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGWbMArnwU7+XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjJiZTcwOWItNDIxNy00MWZmLWI4ZjgtNmYxNGJjMTBhZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDRPzeOZJXDz+DbEYhJxtv4D6dEMM9wXo85d F7RodNfertt92FspaA0J8bWGwfHwNagXsHaX33EyIWhXSX64TFSPdqoX9hEOKnMr IKWLAnPdVBNomaznLrJWApqrYdvHHMiK8bcKn0SCKyei4zZ+3A1Y1lnzohU/Cg7y j4tGF+0Hg9GViBlNSreFVc9NeGA+ZHn5i+RSMajHllSGRwizphHMXqDixdKGDRAv KiJ7x0yuqj4SSLWztOKcAqEMhGUyIZ2q2XNeKeYtlAucxJkt3xQKiRHo3VpyZ7qA s5gYEmyUznX1lzCucwlhOJ6uL2zgU+RR8EefHSdRRH7d755mNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg7d+NqcoOXOTZxE/iH3eBXpu1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjhiZTAwZWEtN2EwOS0z ZWEwLWJiYTQtODU2MzNmZGM3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrPRtK0hwCTwealDKJFrLqTM7dHqyuRzgU2iPaexWUpXyL42VTNIQXV DxUgNoSfsCWJCzFDQE84Qm6hRheDuILYMDn72ZCNLfc/vMEk17Jqq+YDVEY2rmwo U6Eolef2Kg3RQiJfMksUsosjzUyzlcXwuAd7yB4mXWRsWcpMpmGnpLgzaW27aAr0 sPVDq+CS6qkUVEV9UbZzWYvPOdHP5Z0zEJqKxCO1X7X/UZ4dcPcQKeyzi4xPIBWu Q8QPBvMVvPDH0Ovbwu1UqyVpM/Ca6jEoOtsAEZIO1SMiHCxodH+oquI75HhmPOiZ m/gLOL91cn5KSN+JbD1OI2B5UZ/mB40= -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:59 2026 by rpki-client