This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa File: 24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa (raw, json) Hash identifier: Klknyni9z9+nID3wg8NO+EP2rLR3jg08oNfWPgT6pN0= Subject key identifier: B9:EE:8E:26:2C:CE:43:79:D2:4B:A2:F2:D7:C6:B0:85:5B:AB:41:F9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8A0C40E13BE7556781F43280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:40:e1:3b:e7:55:67:81:f4:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=7097e347-f609-43c3-bf19-58029073072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:4c:56:0b:e0:a1:d0:51:55:49:37:82:28: e5:28:b2:da:a2:46:ad:5b:d7:db:c3:52:7e:06:59: 1d:57:5b:9e:7d:43:16:ec:c0:4f:51:0f:cb:bc:d7: 37:28:5a:e4:43:d9:8f:3b:fd:e5:d2:c2:63:b8:3f: ed:2b:8c:10:b4:5a:80:b6:d4:98:e5:53:4d:ad:3d: 76:2e:66:56:4c:2e:51:1b:41:12:5d:c9:16:b8:e9: 55:b8:6e:69:9f:d6:9a:b7:8e:75:fd:d7:9b:da:f6: a2:23:e7:3f:a9:46:88:9e:e6:a9:43:b8:a4:34:63: be:80:59:0b:aa:f9:d3:0a:fb:37:3e:a0:a2:41:9d: 34:b6:39:ed:4b:dd:89:2f:83:b8:59:3b:8b:af:14: d3:a7:be:32:9d:83:a5:9c:7b:87:71:c4:92:bb:f7: 9c:a5:28:f0:5e:30:2a:73:a0:a8:8a:36:2c:4b:75: 2e:b7:b1:af:11:b1:fb:88:22:ee:79:02:87:70:89: 8c:5c:f3:69:ea:82:d9:52:6d:fa:c1:31:91:97:93: 36:aa:dc:40:48:c6:79:41:32:89:b0:2f:73:da:18: 97:5b:12:6b:bc:44:31:69:cb:95:39:37:6a:23:6e: fc:8b:06:de:29:32:a9:36:74:bc:15:49:da:f4:67: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EE:8E:26:2C:CE:43:79:D2:4B:A2:F2:D7:C6:B0:85:5B:AB:41:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f3:52:3d:f8:42:5e:4e:ea:9f:e7:8d:66:f1:3d:ca:cb:46: 95:45:9b:5c:26:33:05:59:44:a9:3b:bb:59:ac:c6:d0:66:f3: 3d:be:a9:dd:4d:af:84:a5:14:f1:ae:ea:d4:1d:6b:31:6f:94: 46:78:2d:7c:c0:d5:01:c0:77:f9:60:f1:a4:1d:c3:22:af:01: 5f:ca:f8:b1:95:41:ec:eb:21:83:c9:ea:50:d6:93:40:de:8f: dd:17:30:68:4b:bc:99:72:fe:3c:f2:23:8e:8c:ba:de:63:5f: 32:9a:a9:b3:da:4c:b5:7b:4b:ce:1b:3d:37:c0:a2:f9:73:12: b0:fe:c7:68:fd:ff:68:e2:c5:8d:bc:ff:ff:53:39:b6:77:a6: 1c:9b:92:c0:07:0a:31:b0:89:14:32:68:a8:d4:83:11:27:4b: be:cb:a7:4c:42:53:84:5c:ef:09:36:79:8a:ca:ae:fb:b6:44: ca:13:d5:db:b1:33:83:6d:ba:43:4e:ba:1b:25:cf:a9:09:40: 26:cb:b4:88:3f:f6:a5:1a:1f:0a:d6:a4:e4:71:06:9a:5f:5a: 56:56:1e:be:85:bb:a2:25:59:f3:90:3e:fe:32:d1:b8:ad:39: a0:8a:b3:1f:11:e8:d2:86:80:9d:f3:46:9b:21:55:56:89:b4: aa:bb:22:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDEDhO+dVZ4H0MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NzA5N2UzNDctZjYwOS00M2MzLWJmMTktNTgwMjkwNzMwNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMxMVgvgodBRVUk3gijlKLLaokatW9fbw1J+ BlkdV1uefUMW7MBPUQ/LvNc3KFrkQ9mPO/3l0sJjuD/tK4wQtFqAttSY5VNNrT12 LmZWTC5RG0ESXckWuOlVuG5pn9aat451/deb2vaiI+c/qUaInuapQ7ikNGO+gFkL qvnTCvs3PqCiQZ00tjntS92JL4O4WTuLrxTTp74ynYOlnHuHccSSu/ecpSjwXjAq c6CoijYsS3Uut7GvEbH7iCLueQKHcImMXPNp6oLZUm36wTGRl5M2qtxASMZ5QTKJ sC9z2hiXWxJrvEQxacuVOTdqI278iwbeKTKpNnS8FUna9GewAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnujiYszkN50kui8tfGsIVbq0H5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjRiYWE4NmEtYjJlZi0z ODUyLWEyYWItNGJjNjE2OWRiZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfzUj34Ql5O6p/njWbxPcrLRpVFm1wmMwVZRKk7u1msxtBm8z2+qd1N r4SlFPGu6tQdazFvlEZ4LXzA1QHAd/lg8aQdwyKvAV/K+LGVQezrIYPJ6lDWk0De j90XMGhLvJly/jzyI46Mut5jXzKaqbPaTLV7S84bPTfAovlzErD+x2j9/2jixY28 //9TObZ3phybksAHCjGwiRQyaKjUgxEnS77Lp0xCU4Rc7wk2eYrKrvu2RMoT1dux M4NtukNOuhslz6kJQCbLtIg/9qUaHwrWpORxBppfWlZWHr6Fu6IlWfOQPv4y0bit OaCKsx8R6NKGgJ3zRpshVVaJtKq7IrA= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:07 2026 by rpki-client