This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
File: 5e5cf601-dd4a-3483-b580-0ba6786cf229.roa (raw, json)
Hash identifier: okUFeQS/LsEn+zhyzAOXa8kQ9pH7CWQ8Q3250S4zofc=
Subject key identifier: 80:2B:0B:9D:77:41:FC:0E:E1:4B:72:2B:B8:42:F6:7F:6A:28:E1:0D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C8A0C4DB6DC00ED0B806F5EB0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
Signing time: Fri 16 Jan 2026 02:00:31 +0000
ROA not before: Fri 16 Jan 2026 02:00:31 +0000
ROA not after: Thu 16 Apr 2026 01:00:31 +0000
asID: 13335
IP address blocks: 172.68.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8a:0c:4d:b6:dc:00:ed:0b:80:6f:5e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 16 02:00:31 2026 GMT
Not After : Apr 16 01:00:31 2026 GMT
Subject: CN=d8a7e761-37c4-4632-911c-3644e6347ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:6b:94:43:63:92:d4:d9:17:cf:81:f4:97:
4b:84:d5:c9:ed:05:c4:36:e7:77:e2:3b:60:b8:2b:
15:e4:c4:0f:13:a9:57:f7:ef:72:dc:b5:93:d9:4c:
a4:0c:7a:c5:dd:67:76:81:a1:5d:e9:51:c7:49:d7:
fd:fc:45:a6:6b:9e:30:8c:06:9f:15:8b:07:f1:66:
2a:4f:2d:08:0d:35:6b:52:ac:b5:39:3e:98:5b:1b:
04:16:3d:3e:3b:0d:81:a4:cf:d3:16:b7:e8:97:4d:
9b:fd:7e:d4:da:a3:b4:b5:90:c7:75:b1:25:72:c4:
30:c3:a9:d5:02:80:33:e2:73:52:6d:fe:25:a0:a4:
5e:01:28:a0:7c:ce:8b:3d:66:8b:ca:ee:53:3d:20:
23:cb:9d:cf:28:2c:1f:57:5f:60:f1:1f:12:4b:f5:
e8:87:22:da:83:e0:b2:5d:04:81:cc:71:fc:2b:22:
26:4d:4a:86:50:fe:f8:dc:4a:bd:d0:9e:80:f3:5b:
a2:db:3f:11:52:3b:69:0e:d4:8e:51:3f:97:16:21:
48:38:3d:b6:32:42:b6:e9:60:96:83:11:dc:4c:9f:
26:48:05:a2:ae:27:cf:c1:a0:e7:d5:08:de:2f:7a:
3d:fa:66:ba:17:aa:4a:b4:97:92:fd:17:e6:4a:8b:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:0B:9D:77:41:FC:0E:E1:4B:72:2B:B8:42:F6:7F:6A:28:E1:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:e0:4e:bb:01:59:f4:f4:89:33:db:1f:74:65:99:a2:dd:2e:
e5:2d:4b:5c:c9:23:ef:1f:84:c3:97:ec:a8:c8:ec:ab:c8:b2:
9c:ec:c3:b6:2a:ee:ac:6c:f0:e7:23:0e:45:2d:2f:32:7c:7f:
1b:2f:ff:69:c2:cf:a0:1f:96:20:91:ee:ad:55:1d:a7:36:c3:
05:44:18:eb:a6:12:9c:f9:3e:54:66:74:d9:98:7a:58:dc:c4:
94:e4:66:8a:9b:35:a9:39:9b:9e:c9:0a:db:4e:73:f0:34:a5:
11:e5:58:c0:dd:fe:ce:78:85:31:32:43:51:27:aa:6d:99:90:
53:ad:d5:19:82:e7:7b:ce:cb:cc:d2:c2:80:07:37:a5:ed:da:
99:55:72:a2:ae:f6:f2:2d:7e:42:ff:da:89:5d:f8:4b:1a:a3:
6b:35:e8:43:bc:47:c9:5f:e5:29:37:2a:6d:9a:5f:61:aa:ae:
0b:f2:07:83:c7:25:50:1c:3f:24:1d:79:db:62:05:36:36:c9:
d0:62:30:bc:68:15:c8:85:c0:49:33:93:70:6f:49:1d:96:a4:
bf:c8:09:d9:1d:bb:e1:59:12:f0:1d:7e:2f:e8:a5:cf:60:52:
c2:36:c5:c4:31:5b:51:00:70:dc:05:e7:08:a4:13:24:69:0e:
cc:5f:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:08:12 2026 by rpki-client