This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be80b755-813b-3b11-a122-a353460e0a17.roa File: be80b755-813b-3b11-a122-a353460e0a17.roa (raw, json) Hash identifier: 2X+TXVz6V8Yzd93sRVlGIGKnyHlVBItST+tWnsKzJnA= Subject key identifier: 0F:8F:A1:E9:8F:A6:D4:9F:AD:BE:20:9D:56:1B:E0:0B:BC:90:91:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8B71B7F0FFA5BB70F187A600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be80b755-813b-3b11-a122-a353460e0a17.roa Signing time: Fri 16 Jan 2026 14:00:40 +0000 ROA not before: Fri 16 Jan 2026 14:00:40 +0000 ROA not after: Thu 16 Apr 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:71:b7:f0:ff:a5:bb:70:f1:87:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 14:00:40 2026 GMT Not After : Apr 16 13:00:40 2026 GMT Subject: CN=c110c696-b943-46d3-b8b8-935db296ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:f2:e6:68:fd:d6:de:6a:d2:0f:0e:04:81: 1c:11:a5:13:a9:6b:b3:a7:1c:ec:b8:08:5a:4b:fc: e6:6f:7e:24:70:04:de:18:41:6b:b7:5f:f0:52:ea: 79:84:75:47:64:cd:29:78:1a:d3:bb:40:ea:87:dc: 56:99:fc:42:fa:04:d6:01:ca:88:71:b7:e8:1a:16: 6c:b3:f2:01:44:e9:50:0b:c8:a1:d9:d8:dc:3d:59: 6e:00:fb:86:62:aa:a2:04:74:07:c3:f1:6a:db:85: 92:f2:ef:38:3c:32:d4:63:93:4d:cc:d6:b5:b8:e9: 6c:e8:54:55:a0:9b:cd:2f:1c:a8:36:c7:d8:64:ab: f1:9f:66:57:70:70:f4:8c:34:80:f5:f8:72:ef:ca: 51:16:da:2b:b8:71:a1:a1:41:db:ad:f0:55:71:53: 94:9d:28:00:0a:5f:ce:f9:83:6c:ce:a0:1c:ce:46: 2b:46:09:f9:ee:94:20:9a:c0:ad:6e:54:ae:0c:a1: ac:6c:30:9f:20:82:77:18:13:c3:15:dd:7f:53:4e: 36:5b:78:b2:36:15:d1:5a:46:09:7a:54:62:dc:55: d2:d0:b0:bc:29:0e:8a:54:18:a6:ca:4a:e9:80:00: 5d:68:c6:f3:3f:04:0c:f4:7e:40:8c:5a:36:83:5f: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8F:A1:E9:8F:A6:D4:9F:AD:BE:20:9D:56:1B:E0:0B:BC:90:91:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be80b755-813b-3b11-a122-a353460e0a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4e:84:0c:7d:1f:c1:d9:f9:37:5e:37:e4:5f:fc:b6:5d:33: 6e:6e:6c:7c:fa:f9:12:95:55:30:eb:48:ed:53:77:06:13:19: 49:db:ac:0a:f6:b4:96:bf:02:d3:f4:ad:2d:c7:c6:9a:06:81: 45:01:3a:d4:30:a0:aa:90:54:f4:7b:c5:49:ad:83:b6:35:d8: 59:72:47:58:ee:23:67:bb:c7:01:9f:9c:7e:ce:c5:04:9f:62: 18:34:12:0c:c6:88:c8:f1:d4:cc:3d:67:25:78:00:a8:89:6f: 94:e2:af:1b:51:1b:f5:fd:7f:8d:15:54:21:06:08:b6:c8:fd: c6:27:84:29:d9:74:7a:f6:60:90:ae:b4:97:a9:0f:78:ef:40: 69:6a:0f:4b:96:be:7b:6d:70:54:39:3e:f3:dd:1c:0d:24:f4: 4e:16:d2:a6:6a:d9:4e:01:19:8e:95:fb:48:fe:a2:cd:17:e5: e2:f9:70:55:28:b5:d8:cf:d9:d6:9b:a9:02:e4:32:43:79:d8: 6e:7a:1a:bc:99:77:78:00:b4:29:5b:5f:a6:95:46:76:cc:9c: 17:6b:68:15:d1:fc:61:0c:b1:d5:a8:06:3c:2e:ea:77:77:94: c4:db:9f:f5:23:bb:63:c9:15:2f:81:00:e1:2f:f5:80:7d:0f: 0b:4f:fe:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcbfw/6W7cPGHpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzExMGM2OTYtYjk0My00NmQzLWI4YjgtOTM1ZGIyOTZjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHy5mj91t5q0g8OBIEcEaUTqWuzpxzsuAha S/zmb34kcATeGEFrt1/wUup5hHVHZM0peBrTu0Dqh9xWmfxC+gTWAcqIcbfoGhZs s/IBROlQC8ih2djcPVluAPuGYqqiBHQHw/Fq24WS8u84PDLUY5NNzNa1uOls6FRV oJvNLxyoNsfYZKvxn2ZXcHD0jDSA9fhy78pRFtoruHGhoUHbrfBVcVOUnSgACl/O +YNszqAczkYrRgn57pQgmsCtblSuDKGsbDCfIIJ3GBPDFd1/U042W3iyNhXRWkYJ elRi3FXS0LC8KQ6KVBimykrpgABdaMbzPwQM9H5AjFo2g1/ODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+PoemPptSfrb4gnVYb4Au8kJH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmU4MGI3NTUtODEzYi0z YjExLWExMjItYTM1MzQ2MGUwYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVOhAx9H8HZ+TdeN+Rf/LZdM25ubHz6+RKVVTDrSO1TdwYTGUnbrAr2 tJa/AtP0rS3HxpoGgUUBOtQwoKqQVPR7xUmtg7Y12FlyR1juI2e7xwGfnH7OxQSf Yhg0EgzGiMjx1Mw9ZyV4AKiJb5TirxtRG/X9f40VVCEGCLbI/cYnhCnZdHr2YJCu tJepD3jvQGlqD0uWvnttcFQ5PvPdHA0k9E4W0qZq2U4BGY6V+0j+os0X5eL5cFUo tdjP2dabqQLkMkN52G56GryZd3gAtClbX6aVRnbMnBdraBXR/GEMsdWoBjwu6nd3 lMTbn/Uju2PJFS+BAOEv9YB9DwtP/lE= -----END CERTIFICATE-----Generated at Sun Jan 18 12:16:48 2026 by rpki-client