This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: zkXq+upjpYOFR238Jxwp4mCxe5SMbbC9npAzbgX53d4= Subject key identifier: C1:69:9A:FF:52:D1:39:DC:15:8F:7A:D5:A6:97:B6:36:47:97:73:F0 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584CB81C897D0DDA68B84599BB00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:89:7d:0d:da:68:b8:45:99:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=557ece6d-1aad-4bf6-9081-9701e173a445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:26:44:47:71:e3:e9:09:11:5a:e1:6c:55: 94:7c:5f:9a:52:47:d2:37:99:37:45:2f:48:00:95: 92:f9:71:d9:a6:db:87:fd:e2:4b:fc:5c:90:13:48: f5:1e:32:6f:8a:e2:18:f5:9f:97:1f:3e:27:67:3b: 19:5f:1e:90:80:c7:8e:02:8d:d0:25:1e:13:93:f9: fb:e1:eb:00:9b:e8:10:e6:8a:a1:27:47:eb:67:48: d8:b5:b1:20:d6:d4:df:b4:b1:e4:0f:d9:97:db:dc: 46:4b:e6:92:46:e3:f2:10:8f:72:9b:26:f7:43:b6: 8b:a0:d5:55:51:b6:5a:0e:f0:2e:9f:97:af:0a:e5: da:ee:34:5b:12:93:23:b6:26:41:4d:f8:e9:8a:d0: fc:80:16:7f:12:8b:65:b8:11:df:6f:6a:25:5c:4c: 79:43:c8:d5:73:58:db:20:9b:b2:4b:f7:b9:84:a3: 5f:75:ab:c8:90:de:2d:e0:83:d2:78:c6:19:0d:17: f6:0a:61:e4:5c:8f:ee:f9:3f:f4:21:89:64:37:0c: 55:ef:8c:ad:65:f2:94:ef:8e:d2:ba:08:b5:28:11: 32:07:41:1c:c5:2f:01:5f:a4:fb:bb:a0:0d:8e:91: 7a:df:1b:0e:3d:60:6c:f0:10:92:80:ed:0c:37:62: 9c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:69:9A:FF:52:D1:39:DC:15:8F:7A:D5:A6:97:B6:36:47:97:73:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:75:9e:93:d6:28:b3:2c:ee:f5:61:bf:63:2b:7b:c4:95:af: da:8a:97:ce:f2:71:f0:90:c3:6d:50:ff:60:c4:0b:a0:a8:9f: 37:3f:f1:46:5a:68:35:70:e4:cb:69:7a:7f:42:8a:d1:cf:a3: 30:06:c5:26:3c:b5:34:09:a2:00:08:66:74:ec:cf:94:d9:32: 3a:ee:9d:2a:85:93:81:08:42:bf:e6:49:11:f5:6d:99:7e:97: 23:43:1b:7f:ed:95:ef:4d:77:ce:60:75:b7:61:2a:8a:2f:65: 42:f1:63:32:18:72:fb:b6:d4:8c:d7:a1:ea:cf:50:a2:f0:4e: 8f:3b:de:f1:2b:9f:3c:36:e9:d2:dd:cd:14:18:32:64:b9:b5: f8:dd:76:38:8e:02:6d:6d:07:9c:2e:93:9b:75:46:70:95:e0: 66:c2:76:f7:0b:4e:98:b6:5c:f6:22:b7:12:24:c0:d2:8f:2a: 5a:2a:9f:56:ef:41:3a:ff:05:22:33:93:a5:b5:28:48:07:0d: 4b:0d:3d:b3:76:e0:1a:37:ac:17:ff:83:7a:31:7d:6a:9d:21: 26:e0:c9:13:aa:ff:5a:f4:25:90:f4:8f:7d:a8:86:55:f0:68: 84:7f:f4:36:3f:a2:08:24:f9:39:88:e6:e0:de:ec:74:bd:db: 48:6a:9a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIl9DdpouEWZuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NTU3ZWNlNmQtMWFhZC00YmY2LTkwODEtOTcwMWUxNzNhNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEcmREdx4+kJEVrhbFWUfF+aUkfSN5k3RS9I AJWS+XHZptuH/eJL/FyQE0j1HjJviuIY9Z+XHz4nZzsZXx6QgMeOAo3QJR4Tk/n7 4esAm+gQ5oqhJ0frZ0jYtbEg1tTftLHkD9mX29xGS+aSRuPyEI9ymyb3Q7aLoNVV UbZaDvAun5evCuXa7jRbEpMjtiZBTfjpitD8gBZ/EotluBHfb2olXEx5Q8jVc1jb IJuyS/e5hKNfdavIkN4t4IPSeMYZDRf2CmHkXI/u+T/0IYlkNwxV74ytZfKU747S ugi1KBEyB0EcxS8BX6T7u6ANjpF63xsOPWBs8BCSgO0MN2KcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFpmv9S0TncFY961aaXtjZHl3PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd1npPWKLMs7vVhv2Mre8SVr9qKl87ycfCQw21Q/2DEC6Conzc/8UZa aDVw5Mtpen9CitHPozAGxSY8tTQJogAIZnTsz5TZMjrunSqFk4EIQr/mSRH1bZl+ lyNDG3/tle9Nd85gdbdhKoovZULxYzIYcvu21IzXoerPUKLwTo873vErnzw26dLd zRQYMmS5tfjddjiOAm1tB5wuk5t1RnCV4GbCdvcLTpi2XPYitxIkwNKPKloqn1bv QTr/BSIzk6W1KEgHDUsNPbN24Bo3rBf/g3oxfWqdISbgyROq/1r0JZD0j32ohlXw aIR/9DY/oggk+TmI5uDe7HS920hqmsE= -----END CERTIFICATE-----Generated at Wed Feb 11 08:44:36 2026 by rpki-client