This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa File: aafb9f44-97f7-373c-a608-7201b7934395.roa (raw, json) Hash identifier: rCRqReIZH8PX0t2C2ut+oDg43WEh7EcRwk8ym1TuVFU= Subject key identifier: BE:61:00:78:B3:78:85:E5:0F:9E:2F:ED:1D:72:43:D5:57:E6:C0:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8FA1B1FA7CAEED18214D0880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa Signing time: Sun 18 Jan 2026 02:00:31 +0000 ROA not before: Sun 18 Jan 2026 02:00:31 +0000 ROA not after: Sat 18 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.71.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8f:a1:b1:fa:7c:ae:ed:18:21:4d:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 02:00:31 2026 GMT Not After : Apr 18 01:00:31 2026 GMT Subject: CN=8ddc8b46-fcce-4568-afd4-95da73e05eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:a6:67:ba:d3:0b:99:93:e1:65:54:04:24: a4:1d:2b:5c:8d:3b:44:e6:77:e5:01:08:f7:a8:af: 8e:e3:25:c5:74:c4:a6:d0:ef:cf:cb:2f:13:4b:10: db:7e:fa:b3:32:da:95:5d:30:b1:ef:7e:44:24:87: c8:ff:50:e2:53:9e:ae:b0:ec:df:6c:a8:26:55:61: 91:46:46:e7:a4:6c:e9:8b:31:68:cf:13:99:eb:81: fc:60:9d:b3:06:d0:28:42:96:64:f2:ee:96:7f:cc: 53:63:98:da:35:20:e6:f2:d9:ba:96:11:02:9d:83: 93:53:87:8a:a7:bd:0f:c4:3b:ea:55:0c:4d:15:2a: c1:3e:3e:12:bb:8e:a9:97:50:fe:78:70:f4:a4:d0: 2b:93:b1:61:4a:ae:6b:6e:f0:e0:12:4c:d4:c3:0a: a7:fa:46:20:19:21:d9:5e:f2:a7:1f:de:2b:47:50: 7e:f0:88:a3:e3:d9:a7:3c:44:1f:1d:f0:12:7d:6e: 59:c4:b3:4a:4d:d9:96:46:e3:7d:bc:c9:f9:e5:57: 0b:59:a1:15:aa:c6:ab:e6:ea:4d:25:67:5a:9a:67: 51:0f:13:fc:76:79:bb:9c:64:28:89:f7:d1:be:d1: 17:7b:6b:41:06:f0:dc:c5:dc:72:a0:e0:2a:13:df: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:00:78:B3:78:85:E5:0F:9E:2F:ED:1D:72:43:D5:57:E6:C0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:00:54:e6:6c:db:14:21:fd:98:6f:12:af:12:13:85:50:57: 6e:6c:71:16:dd:cd:a1:85:a7:94:cf:9e:ce:a3:e3:ce:ea:09: e9:7e:9b:d3:08:5b:56:87:8c:30:59:a6:2f:78:e5:55:95:df: 77:64:a6:0f:25:e7:7f:cf:8a:44:7e:e4:74:50:f2:04:04:3b: 5d:52:97:21:d5:f8:7e:44:49:59:02:6c:25:ab:5c:35:c8:31: 3b:8d:e4:f1:76:a6:b4:65:ee:b6:19:79:ff:72:6c:86:f7:8b: 18:c1:9d:ed:61:8a:49:8d:cf:db:b3:ad:05:c2:04:44:c3:9c: 34:a9:f5:f1:c2:40:02:34:76:64:99:8c:ea:8b:7a:f8:96:81: ab:6e:39:cd:38:b1:95:67:c7:cc:ee:f7:ea:a7:7b:61:35:49: 36:25:aa:10:e6:3f:3a:b2:bb:7e:cb:6e:a6:f4:05:c2:6c:5c: f7:62:86:1a:32:a4:78:e4:2e:05:7e:b9:b4:11:9e:d7:ef:7e: 6c:b3:a0:53:a2:0d:bc:0a:44:c9:39:c3:d1:0b:19:fa:29:86: ef:69:a7:1e:25:b1:74:2e:b7:f4:f8:65:73:12:30:25:73:48: f7:8b:6b:32:38:96:3b:18:32:43:76:4d:25:55:5e:76:23:a3: 1a:73:4b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyPobH6fK7tGCFNCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODAyMDAzMVoXDTI2MDQxODAxMDAzMVowLzEtMCsGA1UEAxMk OGRkYzhiNDYtZmNjZS00NTY4LWFmZDQtOTVkYTczZTA1ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t2mZ7rTC5mT4WVUBCSkHStcjTtE5nflAQj3 qK+O4yXFdMSm0O/Pyy8TSxDbfvqzMtqVXTCx735EJIfI/1DiU56usOzfbKgmVWGR RkbnpGzpizFozxOZ64H8YJ2zBtAoQpZk8u6Wf8xTY5jaNSDm8tm6lhECnYOTU4eK p70PxDvqVQxNFSrBPj4Su46pl1D+eHD0pNArk7FhSq5rbvDgEkzUwwqn+kYgGSHZ XvKnH94rR1B+8Iij49mnPEQfHfASfW5ZxLNKTdmWRuN9vMn55VcLWaEVqsar5upN JWdammdRDxP8dnm7nGQoiffRvtEXe2tBBvDcxdxyoOAqE99zfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5hAHizeIXlD54v7R1yQ9VX5sDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFmYjlmNDQtOTdmNy0z NzNjLWE2MDgtNzIwMWI3OTM0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAAVOZs2xQh/ZhvEq8SE4VQV25scRbdzaGFp5TPns6j487qCel+m9MI W1aHjDBZpi945VWV33dkpg8l53/PikR+5HRQ8gQEO11SlyHV+H5ESVkCbCWrXDXI MTuN5PF2prRl7rYZef9ybIb3ixjBne1hikmNz9uzrQXCBETDnDSp9fHCQAI0dmSZ jOqLeviWgatuOc04sZVnx8zu9+qne2E1STYlqhDmPzqyu37Lbqb0BcJsXPdihhoy pHjkLgV+ubQRntfvfmyzoFOiDbwKRMk5w9ELGfophu9ppx4lsXQut/T4ZXMSMCVz SPeLazI4ljsYMkN2TSVVXnYjoxpzS6k= -----END CERTIFICATE-----Generated at Sun Jan 18 11:11:08 2026 by rpki-client