This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa File: 7baff904-2187-3e6d-a308-6053d042470c.roa (raw, json) Hash identifier: LHtZ8GavuHQ5fpifYmThyika9HDb8gEMMPOj2wXT6j4= Subject key identifier: 02:21:FC:A1:23:2B:0A:7E:05:1E:23:A7:EC:E8:93:C5:74:CD:29:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C42DBEB0617A7BA94C8F64A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:eb:06:17:a7:ba:94:c8:f6:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1e2246b7-2b57-4b49-94fe-3bd3eadd84b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:73:7b:d0:d9:2c:6e:3f:62:03:04:70:97: a5:2e:67:ab:2b:e3:6e:61:21:dd:61:c5:28:ac:10: 5c:26:64:c9:15:21:1c:2c:0c:45:e3:78:01:0d:9e: f1:5d:e3:1e:9f:14:14:06:54:dd:a8:9d:16:cf:1d: 31:4c:43:5e:dd:4b:ce:88:f5:04:4b:8a:2a:1d:99: c9:8d:89:6e:58:ee:0a:42:06:83:8c:cc:36:7a:bd: 5d:ea:07:c7:f4:13:01:11:e8:d3:bf:b7:19:4a:be: 98:70:2c:c0:a9:9c:fd:cb:65:04:eb:5e:79:82:3a: e0:24:d3:a3:5e:90:85:53:ed:8b:72:da:ad:a5:e7: 64:af:16:9c:a3:d1:44:c7:ab:9e:a7:6c:c4:69:b1: 17:d6:f0:53:ed:4b:44:c6:90:d0:b2:d4:e6:64:f4: f2:c0:f7:98:b3:73:1b:41:bf:6c:c4:42:91:62:a2: d7:02:aa:cf:07:a8:ef:80:fe:d5:f7:0b:ae:51:d9: 89:5d:79:ad:b8:94:41:0e:18:ee:0a:ad:7a:9d:9c: 1c:ae:71:db:4f:41:a6:93:68:fa:c8:f8:63:cf:e1: 45:d6:3f:c9:07:07:ae:f4:76:d6:10:9a:fd:96:58: ee:6c:fc:d6:fb:1d:03:cc:0e:6d:a6:a3:27:a9:d1: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:FC:A1:23:2B:0A:7E:05:1E:23:A7:EC:E8:93:C5:74:CD:29:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d3:53:e4:41:0a:ec:9f:79:13:5a:f7:26:ac:f4:0e:f7:87: 09:aa:56:dd:a2:3e:79:31:7a:82:08:53:ed:5c:7f:18:bf:dc: 27:d2:b4:9b:d9:e9:a1:76:b6:6e:27:c8:c6:d0:d2:2f:2f:54: 52:ae:ed:30:f1:13:bb:9e:c8:f5:d3:0b:6a:75:d3:34:69:4b: 08:d5:af:34:2f:d6:96:d3:3e:f4:ec:1f:43:b6:d5:20:ee:03: f3:35:9e:d9:bd:6b:91:88:e3:f8:7d:7b:f1:eb:7d:8a:04:a0: 4f:d1:71:43:de:0d:7a:55:3a:9e:80:5c:3c:e6:ac:3b:d8:81: d9:8f:63:c4:eb:08:6c:da:f6:47:a8:95:d7:e3:1a:13:56:9d: c8:b4:76:54:ae:48:9b:6d:df:42:18:43:e9:6b:06:9c:83:7c: 95:ef:9b:e7:fe:b7:5e:77:08:07:b2:7c:db:1a:f7:be:c9:49: 64:79:01:40:3c:94:2c:e2:87:eb:02:fa:05:03:b8:51:6b:ce: 0d:ca:11:1e:a5:89:14:40:bd:90:46:66:19:19:77:20:ef:dd: 39:66:3f:bf:a2:01:3c:b4:11:d7:94:5b:4f:47:c5:b8:ed:e6: bd:d2:df:1a:6c:b9:a4:72:ee:83:ce:2d:3b:d0:12:a9:c6:53: 80:1f:75:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+sGF6e6lMj2SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWUyMjQ2YjctMmI1Ny00YjQ5LTk0ZmUtM2JkM2VhZGQ4NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiihze9DZLG4/YgMEcJelLmerK+NuYSHdYcUo rBBcJmTJFSEcLAxF43gBDZ7xXeMenxQUBlTdqJ0Wzx0xTENe3UvOiPUES4oqHZnJ jYluWO4KQgaDjMw2er1d6gfH9BMBEejTv7cZSr6YcCzAqZz9y2UE6155gjrgJNOj XpCFU+2Lctqtpedkrxaco9FEx6uep2zEabEX1vBT7UtExpDQstTmZPTywPeYs3Mb Qb9sxEKRYqLXAqrPB6jvgP7V9wuuUdmJXXmtuJRBDhjuCq16nZwcrnHbT0Gmk2j6 yPhjz+FF1j/JBweu9HbWEJr9lljubPzW+x0DzA5tpqMnqdE6wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIh/KEjKwp+BR4jp+zok8V0zSmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2JhZmY5MDQtMjE4Ny0z ZTZkLWEzMDgtNjA1M2QwNDI0NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTTU+RBCuyfeRNa9yas9A73hwmqVt2iPnkxeoIIU+1cfxi/3CfStJvZ 6aF2tm4nyMbQ0i8vVFKu7TDxE7ueyPXTC2p10zRpSwjVrzQv1pbTPvTsH0O21SDu A/M1ntm9a5GI4/h9e/HrfYoEoE/RcUPeDXpVOp6AXDzmrDvYgdmPY8TrCGza9keo ldfjGhNWnci0dlSuSJtt30IYQ+lrBpyDfJXvm+f+t153CAeyfNsa977JSWR5AUA8 lCzih+sC+gUDuFFrzg3KER6liRRAvZBGZhkZdyDv3TlmP7+iATy0EdeUW09Hxbjt 5r3S3xpsuaRy7oPOLTvQEqnGU4AfdbA= -----END CERTIFICATE-----Generated at Sun Jan 18 11:10:07 2026 by rpki-client