This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa File: f68f5a1a-81da-3371-99d7-e4f38db07770.roa (raw, json) Hash identifier: hF1+8fm/CG4QEYxih0KAxW/4GUgY6hI9gdtVroDJf8g= Subject key identifier: D5:A3:2B:79:AB:52:B4:C2:AC:63:F8:14:35:19:6D:F9:C4:24:46:44 Certificate issuer: /CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Certificate serial: 010D0C9F4328584C8CD6C83C9799A5C3A8D9F280 Authority key identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa Signing time: Sat 17 Jan 2026 02:00:30 +0000 ROA not before: Sat 17 Jan 2026 02:00:30 +0000 ROA not after: Fri 17 Apr 2026 01:00:30 +0000 asID: 20020 IP address blocks: 23.164.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8c:d6:c8:3c:97:99:a5:c3:a8:d9:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Validity Not Before: Jan 17 02:00:30 2026 GMT Not After : Apr 17 01:00:30 2026 GMT Subject: CN=ddb4e468-cab5-415a-88e7-034486b6a68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:78:18:d0:77:9f:8f:8c:5a:00:47:68:a5: a4:25:84:00:00:87:9b:d2:20:1e:51:c3:30:b0:03: a2:a8:2a:e1:da:bd:71:46:61:d0:f2:f6:d9:92:b7: 79:b4:08:1e:58:59:51:38:29:b2:8f:44:78:03:a8: 20:18:96:da:2a:00:1b:fb:68:75:33:62:cc:a4:87: f5:f2:05:7b:6b:01:32:b7:35:ba:f3:56:b7:61:67: a6:d2:2f:af:a3:c4:a6:9e:e7:2c:84:ef:25:04:07: 0d:74:82:62:93:50:ea:e5:26:71:43:ee:96:c4:03: 04:b2:77:19:8b:e2:43:ba:3a:fd:91:71:91:5e:42: 8b:5d:cf:2d:d4:9d:c4:28:bf:7f:75:3c:c9:03:e7: 9a:f5:36:76:e0:eb:2e:1a:87:85:8f:e6:bd:ad:0d: 51:c6:1a:b9:8b:2e:4a:6b:de:d8:4a:00:36:e0:32: 16:45:1d:2a:60:ec:5f:67:ad:f5:aa:23:53:93:7e: f6:a7:d3:e7:05:a7:44:3b:94:e0:f7:e2:c0:92:a9: dc:55:a8:e5:c2:ea:19:9d:a0:ea:38:38:3f:c9:9c: f3:6b:0c:9b:62:c5:2c:15:0b:3c:ce:7f:cf:79:93: 4d:12:4c:57:43:49:e7:4e:a4:65:40:f1:17:92:88: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:2B:79:AB:52:B4:C2:AC:63:F8:14:35:19:6D:F9:C4:24:46:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl X509v3 Authority Key Identifier: keyid:D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer sbgp-ipAddrBlock: critical IPv4: 23.164.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1b:ff:24:c1:05:3c:de:20:6d:55:01:75:6d:2f:9c:fc:cf: 6b:87:f7:3a:f5:2b:82:6a:9b:45:ac:1b:30:36:eb:51:ac:dc: c4:a7:72:5d:7d:98:99:c4:19:e9:f4:3a:74:2f:dc:1a:45:6b: 4f:82:df:34:83:e0:4f:85:1c:11:7b:d9:da:8d:ff:eb:04:8e: a5:6d:5d:da:de:be:d0:82:35:ea:03:bd:14:99:d9:7d:65:7c: ec:61:ac:8b:0b:90:22:b9:a5:ad:8f:9e:1b:d9:fe:7e:34:d3: 05:4a:0f:39:b0:15:d6:21:e3:9f:fb:a9:1f:33:b5:38:9b:4b: 3b:6d:29:d4:82:3b:df:71:cd:10:16:5d:bb:0e:b9:c7:03:18: a9:04:ce:c1:a0:d5:c5:08:7a:0d:8e:6b:36:ee:9c:aa:bd:de: 82:37:ac:44:9b:10:7e:70:77:87:30:6c:05:60:8e:0d:d3:10: b6:69:51:c5:68:6f:a0:ce:ef:10:2f:6b:aa:5d:b6:34:af:a4: 92:61:3d:9c:c1:23:4c:5f:e9:98:09:fc:d5:31:ac:f5:64:cf: 86:86:02:33:12:60:1c:8d:c3:a3:cf:84:a8:1f:ec:4d:8c:6f: 19:de:97:04:83:58:ad:4d:ce:a3:bc:9f:94:87:63:78:19:9b: 9f:69:e0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyM1sg8l5mlw6jZ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I4YmJjN2QtNDBhOC00NWE1LThhOWEtOTVjMDU0NTNj NjM1MB4XDTI2MDExNzAyMDAzMFoXDTI2MDQxNzAxMDAzMFowLzEtMCsGA1UEAxMk ZGRiNGU0NjgtY2FiNS00MTVhLTg4ZTctMDM0NDg2YjZhNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK54GNB3n4+MWgBHaKWkJYQAAIeb0iAeUcMw sAOiqCrh2r1xRmHQ8vbZkrd5tAgeWFlROCmyj0R4A6ggGJbaKgAb+2h1M2LMpIf1 8gV7awEytzW681a3YWem0i+vo8SmnucshO8lBAcNdIJik1Dq5SZxQ+6WxAMEsncZ i+JDujr9kXGRXkKLXc8t1J3EKL9/dTzJA+ea9TZ24OsuGoeFj+a9rQ1Rxhq5iy5K a97YSgA24DIWRR0qYOxfZ631qiNTk372p9PnBadEO5Tg9+LAkqncVajlwuoZnaDq ODg/yZzzawybYsUsFQs8zn/PeZNNEkxXQ0nnTqRlQPEXkohC2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWjK3mrUrTCrGP4FDUZbfnEJEZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhi YmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMwNTQ1M2M2MzUvZjY4ZjVhMWEtODFkYS0z MzcxLTk5ZDctZTRmMzhkYjA3NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2I4YmJjN2QtNDBhOC00NWE1LThh OWEtOTVjMDU0NTNjNjM1L2NiOGJiYzdkLTQwYTgtNDVhNS04YTlhLTk1YzA1NDUz YzYzNS5jcmwwHwYDVR0jBBgwFoAU2R6ztTgv3W9+7yK2CpwVJvqMpF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhiYmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMw NTQ1M2M2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6QIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAb/yTBBTzeIG1VAXVtL5z8z2uH9zr1K4Jqm0WsGzA261Gs3MSncl19 mJnEGen0OnQv3BpFa0+C3zSD4E+FHBF72dqN/+sEjqVtXdrevtCCNeoDvRSZ2X1l fOxhrIsLkCK5pa2PnhvZ/n400wVKDzmwFdYh45/7qR8ztTibSzttKdSCO99xzRAW XbsOuccDGKkEzsGg1cUIeg2OazbunKq93oI3rESbEH5wd4cwbAVgjg3TELZpUcVo b6DO7xAva6pdtjSvpJJhPZzBI0xf6ZgJ/NUxrPVkz4aGAjMSYByNw6PPhKgf7E2M bxnelwSDWK1NzqO8n5SHY3gZm59p4BA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:05 2026 by rpki-client