This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json) Hash identifier: YUW7y0B/bFM1ckwUjpv+WEYIxkF8A1B8rpGbVBWftik= Subject key identifier: DD:C0:D4:2D:1B:71:76:DF:EF:0E:13:47:C7:7B:30:C0:30:7E:7F:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8B71B75452B0E2932F6EA080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa Signing time: Fri 16 Jan 2026 14:00:40 +0000 ROA not before: Fri 16 Jan 2026 14:00:40 +0000 ROA not after: Thu 16 Apr 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:71:b7:54:52:b0:e2:93:2f:6e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 14:00:40 2026 GMT Not After : Apr 16 13:00:40 2026 GMT Subject: CN=89efe9b1-cea7-40ec-9752-471ffba09c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:bd:1f:a9:8a:6c:73:dc:7a:85:39:dd:84: 39:2a:d4:53:46:df:d9:aa:f7:12:cd:6f:99:27:f5: 26:33:62:b8:6a:d4:94:ea:7f:6a:0c:38:65:a3:db: 6a:d8:2e:2d:6f:b5:46:45:cd:ca:e8:bb:c8:de:08: e3:2d:0f:8d:2f:cc:0d:d3:de:aa:c2:21:43:a3:93: d1:3b:cc:82:41:24:93:3f:36:f5:c8:2a:2e:76:66: 34:91:e1:c0:23:79:6e:3f:4a:26:57:fe:20:9c:a2: b8:84:b5:ed:d9:ce:23:b5:62:dd:06:e7:6c:ef:86: 70:c7:71:d3:2a:87:c1:cb:b9:56:87:2a:ee:0a:51: 3e:b2:3b:8a:47:73:c6:21:e2:13:0a:f7:b0:59:04: 2b:1c:9d:c1:de:ea:c7:6f:27:a3:ba:7e:53:d4:2b: b9:d1:b5:38:8d:6c:e0:26:45:64:55:31:ce:71:45: f6:ad:46:0c:c0:4f:51:f2:f5:d6:df:6a:0e:58:e0: 0a:e0:e6:3a:8f:0a:e6:d4:2c:4d:d4:59:ab:c1:9a: 9c:61:d3:3d:ab:81:78:71:d5:41:c8:48:7c:13:84: 24:b6:ae:57:86:ef:ca:d0:bc:2a:05:ba:33:12:4f: 29:58:47:ba:07:aa:a6:5c:fa:f4:a9:5d:59:70:6c: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:D4:2D:1B:71:76:DF:EF:0E:13:47:C7:7B:30:C0:30:7E:7F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:50:1f:00:14:27:c0:cf:a0:0a:46:07:54:f3:f5:94:cd:4d: 9e:30:97:84:f8:40:a2:a9:ed:eb:e7:12:01:df:d6:e8:04:c8: 1a:a7:af:0e:b7:60:4a:66:63:48:61:44:6e:a7:03:c7:00:a7: 5b:86:99:e8:3b:ca:91:01:47:d3:b8:0e:3d:e1:e1:d1:0e:ba: 00:68:21:04:0b:dc:d5:99:11:98:df:1d:0e:76:e3:ba:38:95: 0a:e9:00:6f:b7:fd:b0:b9:d6:49:e4:6c:e2:55:ba:1d:95:52: a7:72:4e:58:d9:47:a6:70:11:9e:3d:ae:74:23:cc:2d:c1:78: d4:53:57:ee:f9:57:52:d8:68:6f:90:e3:a9:45:25:94:c2:4f: 01:d2:ca:3a:8c:e5:7d:d3:3f:2b:26:3b:5b:7e:ae:f8:75:2a: e5:98:f0:18:a0:51:98:eb:5b:6b:83:72:fb:de:0d:27:0b:d9: e1:cb:5b:68:c1:30:2a:dc:17:cc:2b:07:78:11:0f:db:d9:40: 90:8b:19:51:a2:3e:8d:30:4e:65:e9:af:46:e8:8a:cf:f5:f7: 43:1b:6b:00:54:f4:a9:91:69:d5:5c:3c:5e:ba:f3:4a:02:29: dd:84:78:8f:b7:7f:03:fe:35:fe:fe:85:5a:c8:c9:cf:b4:0a: 0b:f6:e1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcbdUUrDiky9uoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk ODllZmU5YjEtY2VhNy00MGVjLTk3NTItNDcxZmZiYTA5YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii+9H6mKbHPceoU53YQ5KtRTRt/ZqvcSzW+Z J/UmM2K4atSU6n9qDDhlo9tq2C4tb7VGRc3K6LvI3gjjLQ+NL8wN096qwiFDo5PR O8yCQSSTPzb1yCoudmY0keHAI3luP0omV/4gnKK4hLXt2c4jtWLdBuds74Zwx3HT KofBy7lWhyruClE+sjuKR3PGIeITCvewWQQrHJ3B3urHbyejun5T1Cu50bU4jWzg JkVkVTHOcUX2rUYMwE9R8vXW32oOWOAK4OY6jwrm1CxN1FmrwZqcYdM9q4F4cdVB yEh8E4Qktq5Xhu/K0LwqBbozEk8pWEe6B6qmXPr0qV1ZcGz+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3A1C0bcXbf7w4TR8d7MMAwfn8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRQHwAUJ8DPoApGB1Tz9ZTNTZ4wl4T4QKKp7evnEgHf1ugEyBqnrw63 YEpmY0hhRG6nA8cAp1uGmeg7ypEBR9O4Dj3h4dEOugBoIQQL3NWZEZjfHQ5247o4 lQrpAG+3/bC51knkbOJVuh2VUqdyTljZR6ZwEZ49rnQjzC3BeNRTV+75V1LYaG+Q 46lFJZTCTwHSyjqM5X3TPysmO1t+rvh1KuWY8BigUZjrW2uDcvveDScL2eHLW2jB MCrcF8wrB3gRD9vZQJCLGVGiPo0wTmXpr0bois/190MbawBU9KmRadVcPF6680oC Kd2EeI+3fwP+Nf7+hVrIyc+0Cgv24Rs= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:14 2026 by rpki-client