This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa File: 0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa (raw, json) Hash identifier: wQJIpBVONbnPF19CYDCBDfXw/GXZxqexiMx7lZ4GJS0= Subject key identifier: 3C:4C:9B:8F:18:A9:B6:3E:C7:33:C5:2E:BD:8F:31:52:C8:12:34:30 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584C7D7C3D87EACAE84B5B1F3180 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 23316 IP address blocks: 68.170.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:3d:87:ea:ca:e8:4b:5b:1f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=3995a65f-fff8-4217-9e2e-0596a201d514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:a1:dc:d6:b6:40:3f:85:53:e2:16:18:e9: 43:9d:4a:d5:39:cd:27:1c:64:3f:b4:21:49:29:51: f4:c0:b9:f6:03:1f:fe:17:af:60:b9:14:59:8a:3d: f3:29:2d:bc:cf:e5:8f:3d:5b:af:85:d1:b3:da:1e: 75:5d:5c:1b:26:eb:7c:11:f0:e5:90:43:22:f0:4e: 5c:a7:ca:7b:02:98:b6:cd:ed:24:37:08:6d:98:5c: 8a:1e:14:05:f9:56:38:d9:22:f1:01:47:74:72:47: c6:c4:34:f6:12:71:35:ea:55:57:06:6d:17:7c:24: 36:5e:43:64:03:08:02:1f:a9:79:76:ed:d9:af:c7: 3b:94:3c:4e:1b:b4:22:74:55:9a:ca:23:c8:4d:b7: 32:63:df:c4:6b:17:65:94:bd:b9:09:2a:ea:32:1f: 11:45:d2:97:d4:cd:0c:e2:64:a9:b5:86:13:7e:6c: 7c:62:a9:c3:49:9b:da:51:3d:57:db:61:ab:14:1f: 70:37:76:35:ab:0d:c2:09:83:c1:fe:50:23:df:36: 8f:ae:b2:76:4b:20:f0:ca:70:28:80:63:4e:0f:5d: b3:83:2e:fb:90:d3:9f:c0:a5:5d:1e:3e:f4:f2:a6: 60:8c:87:f7:c2:f1:3b:1f:ea:1a:db:c5:4a:cb:03: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:9B:8F:18:A9:B6:3E:C7:33:C5:2E:BD:8F:31:52:C8:12:34:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:52:d1:3f:e0:cd:c5:3f:d8:ea:6a:c2:ce:4c:bf:35:49:03: f6:24:7e:37:82:f0:fa:8f:23:46:2e:d1:dd:9b:23:20:1a:3d: 57:78:96:11:e8:ec:c0:9c:96:16:ae:24:4a:b8:dc:58:65:af: 59:69:f8:cf:b0:64:d1:a6:47:9f:74:79:86:f7:10:b4:70:cf: 49:0d:0d:e1:45:b5:7a:f9:ab:e9:a3:6d:c2:02:94:75:45:50: 98:f9:ae:cd:ac:32:3e:3d:5d:a2:ca:57:84:f5:eb:c8:87:d1: 73:48:72:0d:1c:9b:43:12:0a:d9:47:ce:9e:e3:28:ab:42:00: 43:2e:3b:f2:9a:fe:22:be:aa:eb:96:5b:db:72:04:22:9c:9a: 20:37:a2:ad:bb:3d:a1:73:b8:54:ca:6e:0c:2d:0e:59:8f:4d: ec:5d:95:e2:6b:49:f0:de:68:35:a8:f1:19:f6:d3:db:6c:ec: ff:b4:d9:7d:99:86:ec:c2:66:e6:04:91:d2:93:d2:1d:60:fd: 8b:13:04:fc:2a:bf:28:c7:e1:57:10:e2:ec:9f:01:c3:2d:8b: 1a:fe:8c:33:0c:8a:9b:f6:5d:82:46:61:8d:1e:c8:bd:9b:0a: 4f:44:9d:fb:a2:51:79:31:b9:31:07:70:46:62:b3:07:b1:16: 96:45:61:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fD2H6sroS1sfMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk Mzk5NWE2NWYtZmZmOC00MjE3LTllMmUtMDU5NmEyMDFkNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZah3Na2QD+FU+IWGOlDnUrVOc0nHGQ/tCFJ KVH0wLn2Ax/+F69guRRZij3zKS28z+WPPVuvhdGz2h51XVwbJut8EfDlkEMi8E5c p8p7Api2ze0kNwhtmFyKHhQF+VY42SLxAUd0ckfGxDT2EnE16lVXBm0XfCQ2XkNk AwgCH6l5du3Zr8c7lDxOG7QidFWayiPITbcyY9/EaxdllL25CSrqMh8RRdKX1M0M 4mSptYYTfmx8YqnDSZvaUT1X22GrFB9wN3Y1qw3CCYPB/lAj3zaPrrJ2SyDwynAo gGNOD12zgy77kNOfwKVdHj708qZgjIf3wvE7H+oa28VKywMfhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxMm48YqbY+xzPFLr2PMVLIEjQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMGYzYzBjMzctYzRiMS0z M2ZjLWIzYTAtZDhmNTkyYWMyN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVS0T/gzcU/2Opqws5MvzVJA/YkfjeC8PqPI0Yu0d2bIyAaPVd4lhHo 7MCclhauJEq43Fhlr1lp+M+wZNGmR590eYb3ELRwz0kNDeFFtXr5q+mjbcIClHVF UJj5rs2sMj49XaLKV4T168iH0XNIcg0cm0MSCtlHzp7jKKtCAEMuO/Ka/iK+quuW W9tyBCKcmiA3oq27PaFzuFTKbgwtDlmPTexdleJrSfDeaDWo8Rn209ts7P+02X2Z huzCZuYEkdKT0h1g/YsTBPwqvyjH4VcQ4uyfAcMtixr+jDMMipv2XYJGYY0eyL2b Ck9EnfuiUXkxuTEHcEZiswexFpZFYcE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:34:45 2026 by rpki-client