This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa File: 868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa (raw, json) Hash identifier: J1OH4CzHMMICQm/iDPT8SsE4OkkEE864+8gCm2GFUso= Subject key identifier: 6E:69:A0:0D:D3:65:15:3B:04:53:67:48:09:09:FF:11:2B:A2:6F:1F Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584C8A0C2BB9A41351F2DEA6A900 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 22606 IP address blocks: 13.111.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:2b:b9:a4:13:51:f2:de:a6:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=1cffe3fc-12c4-4c69-83c4-4c19dbaeed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:62:0a:e9:58:b2:a1:22:0e:b6:a9:22:07: 97:59:c6:6c:27:4a:cc:72:4b:ae:bc:de:da:b2:1d: bd:54:c5:1f:ca:74:04:8c:d4:c0:33:d1:56:f4:d7: ce:2a:f0:75:63:9f:77:9b:47:c6:34:58:ee:8d:65: a2:f0:d8:a6:a8:41:5b:72:d5:7b:54:12:93:1b:18: 92:85:4e:6d:57:32:08:05:f5:83:ff:fa:0d:02:d6: 3e:29:37:3d:1a:52:df:35:38:ee:17:7d:e8:52:08: d7:14:6f:31:0d:34:bf:e5:6d:e4:b2:df:0c:20:b1: eb:4e:91:4a:9a:cb:a3:ac:c0:34:5f:22:b4:ad:63: ae:5c:ec:19:66:08:d5:9b:77:03:06:d1:fa:21:f7: d8:7a:c8:01:f4:eb:ab:e2:23:26:b6:0e:73:d1:1e: 9d:93:1c:f2:71:cb:8d:b8:ac:3f:0d:a4:d3:94:f7: 27:90:dd:b5:e0:66:89:8e:04:03:1f:ed:e6:14:c6: 1c:5f:25:82:51:ba:f8:54:83:9b:c4:fe:62:4b:0a: 1c:d7:ae:81:03:e8:b2:28:d9:06:9d:6e:3c:ab:af: c5:ec:41:f3:d8:98:17:69:43:23:cc:5d:1d:84:60: c5:0d:a7:6f:3d:51:48:16:9d:af:60:bf:d0:cd:76: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:69:A0:0D:D3:65:15:3B:04:53:67:48:09:09:FF:11:2B:A2:6F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:83:f7:93:3c:34:a5:19:b8:2f:b8:fa:9e:54:c2:c3:28:a5: e5:46:42:56:48:6f:f7:23:5f:12:a7:c4:a0:f8:9e:94:94:9b: f5:55:1f:27:9e:07:83:7d:e8:bd:15:ef:1e:6e:e0:fa:e2:87: 8d:7c:87:96:ba:df:7c:4a:71:91:0a:76:b0:42:cf:68:de:7c: af:3a:1f:03:6f:7f:f6:10:ba:5b:ef:67:8e:c5:3e:da:ae:a6: b4:ff:4f:b5:d0:02:85:71:77:16:62:87:ac:41:1e:02:c6:4a: 5c:7c:6c:2e:f8:81:b9:08:02:dd:1d:6b:d9:eb:f9:4d:dd:37: 34:d9:8b:d2:7f:56:23:a4:4b:96:e2:4c:87:46:ef:2e:4a:ed: 18:d2:7c:d5:54:1b:3b:cb:c4:f5:25:c9:25:1b:1c:c4:69:b3: ab:44:38:f5:b9:49:14:16:98:1b:86:9a:a8:09:eb:53:7d:a7: 1d:5e:a3:45:d0:27:a0:75:75:99:04:6b:c9:21:44:a4:5f:82: 97:da:64:7a:f3:33:18:e3:7e:04:3f:51:ec:84:0f:67:df:9f: 11:a8:46:59:ed:4a:df:c6:ec:1d:d6:c9:fe:71:34:27:06:dd: d2:50:3b:5c:28:78:34:f3:49:fc:3d:e9:14:8f:d4:ff:e3:50: a5:c8:0d:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyKDCu5pBNR8t6mqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk MWNmZmUzZmMtMTJjNC00YzY5LTgzYzQtNGMxOWRiYWVlZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIBiCulYsqEiDrapIgeXWcZsJ0rMckuuvN7a sh29VMUfynQEjNTAM9FW9NfOKvB1Y593m0fGNFjujWWi8NimqEFbctV7VBKTGxiS hU5tVzIIBfWD//oNAtY+KTc9GlLfNTjuF33oUgjXFG8xDTS/5W3kst8MILHrTpFK msujrMA0XyK0rWOuXOwZZgjVm3cDBtH6IffYesgB9Our4iMmtg5z0R6dkxzyccuN uKw/DaTTlPcnkN214GaJjgQDH+3mFMYcXyWCUbr4VIObxP5iSwoc166BA+iyKNkG nW48q6/F7EHz2JgXaUMjzF0dhGDFDadvPVFIFp2vYL/QzXbl0wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG5poA3TZRU7BFNnSAkJ/xErom8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvODY4YTZkMzktYmFkOS0z NDI4LWFlMDctM2E4YzU0YWNiM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMADW8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA1IP3kzw0pRm4L7j6nlTCwyil5UZCVkhv9yNfEqfEoPielJSb9VUfJ54H g33ovRXvHm7g+uKHjXyHlrrffEpxkQp2sELPaN58rzofA29/9hC6W+9njsU+2q6m tP9PtdAChXF3FmKHrEEeAsZKXHxsLviBuQgC3R1r2ev5Td03NNmL0n9WI6RLluJM h0bvLkrtGNJ81VQbO8vE9SXJJRscxGmzq0Q49blJFBaYG4aaqAnrU32nHV6jRdAn oHV1mQRrySFEpF+Cl9pkevMzGON+BD9R7IQPZ9+fEahGWe1K38bsHdbJ/nE0Jwbd 0lA7XCh4NPNJ/D3pFI/U/+NQpcgNgA== -----END CERTIFICATE-----Generated at Mon Jan 19 13:27:37 2026 by rpki-client