This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa File: 2af882a7-ba1b-3658-a246-84894c29d7a2.roa (raw, json) Hash identifier: 244IPGOSey5OYIm/EX9Spa4JIVE4J325sEIhCjsvHvM= Subject key identifier: 1C:79:E1:AC:9F:83:0B:64:47:E5:64:F1:9C:95:35:D7:5E:46:0E:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8A0C593A474BEB6BA1699300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.68.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:59:3a:47:4b:eb:6b:a1:69:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=09039c0d-fe7a-4961-a398-1c750f2d8669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:94:e9:cc:b4:f5:86:23:2d:24:ca:27:1f: a2:ca:c0:00:90:2d:83:41:77:23:fb:d7:7d:df:1b: ff:f2:97:f2:6a:bb:5f:6f:f2:be:8f:82:cc:13:e9: e3:4f:57:f8:cc:6d:1a:53:ae:69:71:63:81:77:b5: 8c:a6:70:3e:0e:b2:2d:bc:90:93:17:36:fa:0d:a5: 43:ed:1b:51:2d:68:76:8e:6b:9f:e3:eb:a6:c4:b4: b2:8d:3f:e6:05:33:f5:7c:e9:97:8d:b8:e0:e0:07: 4e:84:c0:96:96:eb:af:43:75:fe:27:b3:5a:5b:f7: b5:78:7e:63:ec:ac:81:0a:73:45:da:0a:3b:22:b6: 78:aa:da:6c:8d:8f:32:1d:81:46:3c:7b:0a:16:9a: b4:c4:09:ce:6c:8b:f2:e3:13:e5:74:a0:61:d1:b9: 77:51:8d:ae:57:b0:9d:84:e0:b1:c0:9d:d5:d6:d8: 35:cc:39:58:4a:16:2a:da:d9:3f:50:6e:48:d1:7e: b0:17:4e:f7:ec:9d:9f:4a:7f:6b:fb:87:b9:7f:e5: e4:27:0c:f4:8d:ee:b0:6a:1d:d5:f5:e1:53:1f:2d: ce:8c:6a:f1:82:1d:4f:30:ed:b8:6c:ad:a9:ef:b9: 5d:cd:88:c6:7e:74:54:67:a2:fd:fb:e9:d9:6c:4d: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:E1:AC:9F:83:0B:64:47:E5:64:F1:9C:95:35:D7:5E:46:0E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:49:cb:ec:8e:00:53:00:6a:9d:0c:f9:ae:1f:fb:c7:70:8e: a4:fd:91:a8:85:84:b2:3b:ee:e2:b1:e2:a0:cd:b9:df:d3:43: cd:75:c0:bb:e7:80:4e:4f:16:e5:cc:93:f3:5e:18:ed:2c:6d: 40:a9:12:22:58:13:e9:23:e5:48:24:91:8e:31:f6:1c:3b:d3: bb:42:28:31:9a:73:fb:fb:44:58:cf:b3:41:9e:aa:f8:30:c0: 5d:45:2e:99:70:bb:f7:1f:5a:0b:da:02:82:74:f2:3b:27:70: 25:02:7e:52:4b:1e:36:17:08:c1:0c:53:4a:50:b9:29:28:47: 95:5b:0b:b2:9d:04:21:93:6b:4e:89:4f:da:47:9e:68:53:99: 9e:98:ce:dd:c3:a0:85:58:d6:6f:a8:90:1f:ac:ca:49:38:82: a9:79:d8:60:d9:44:53:b8:81:24:26:af:ea:71:c6:7f:41:27: 08:b4:7e:96:e5:e9:5d:55:ff:81:22:87:45:c6:a0:e1:0d:94: 9c:d6:87:cf:38:4f:d3:db:68:82:39:1d:a5:37:ae:ca:53:bc: db:8b:9d:cc:8d:d6:6a:0a:c6:57:e1:e4:99:a2:e7:d0:dc:c5: 3c:96:9c:ab:01:24:7a:0a:a8:b2:d7:da:d9:86:f1:ea:bc:f0: a4:d2:e6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDFk6R0vra6FpkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk MDkwMzljMGQtZmU3YS00OTYxLWEzOTgtMWM3NTBmMmQ4NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptmU6cy09YYjLSTKJx+iysAAkC2DQXcj+9d9 3xv/8pfyartfb/K+j4LME+njT1f4zG0aU65pcWOBd7WMpnA+DrItvJCTFzb6DaVD 7RtRLWh2jmuf4+umxLSyjT/mBTP1fOmXjbjg4AdOhMCWluuvQ3X+J7NaW/e1eH5j 7KyBCnNF2go7IrZ4qtpsjY8yHYFGPHsKFpq0xAnObIvy4xPldKBh0bl3UY2uV7Cd hOCxwJ3V1tg1zDlYShYq2tk/UG5I0X6wF0737J2fSn9r+4e5f+XkJwz0je6wah3V 9eFTHy3OjGrxgh1PMO24bK2p77ldzYjGfnRUZ6L9++nZbE2ABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx54ayfgwtkR+Vk8ZyVNddeRg7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmODgyYTctYmExYi0z NjU4LWEyNDYtODQ4OTRjMjlkN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJJy+yOAFMAap0M+a4f+8dwjqT9kaiFhLI77uKx4qDNud/TQ811wLvn gE5PFuXMk/NeGO0sbUCpEiJYE+kj5UgkkY4x9hw707tCKDGac/v7RFjPs0Geqvgw wF1FLplwu/cfWgvaAoJ08jsncCUCflJLHjYXCMEMU0pQuSkoR5VbC7KdBCGTa06J T9pHnmhTmZ6Yzt3DoIVY1m+okB+sykk4gql52GDZRFO4gSQmr+pxxn9BJwi0fpbl 6V1V/4Eih0XGoOENlJzWh884T9PbaII5HaU3rspTvNuLncyN1moKxlfh5Jmi59Dc xTyWnKsBJHoKqLLX2tmG8eq88KTS5vU= -----END CERTIFICATE-----Generated at Sun Jan 18 11:08:52 2026 by rpki-client