This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: cV+DUIVPO6MVjyq/95FB38Hr09tQImo4X6OteE6Tkkw= Subject key identifier: 68:20:58:D1:29:CC:F7:81:EE:38:B0:30:0B:51:CB:E6:B7:1D:BF:C3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C645C046C14BB039ECD607AC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:04:6c:14:bb:03:9e:cd:60:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=bc67405c-a405-4e5d-a6db-4e2c149eea01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:1c:bd:0b:fb:8d:b4:3f:29:22:43:5f:e0: 81:f8:62:bf:16:49:29:bb:01:eb:de:90:b1:72:2e: 88:c7:0d:6e:5f:d9:e3:73:30:b3:41:5f:59:53:17: b6:4e:6c:18:a2:40:b4:d2:49:f0:6f:8d:d8:15:11: d6:26:34:46:82:38:17:0b:e4:ee:a8:5e:86:79:d4: dd:83:d5:a1:d1:ed:49:2d:00:ef:cd:36:ab:ec:71: 0d:ac:e8:9c:2d:d3:e8:b4:58:94:9e:ce:17:f4:8c: 6d:23:52:ca:53:fc:64:08:06:9a:07:d9:6e:ef:3e: 01:e6:2a:d3:06:b1:2b:2b:9c:fb:85:22:e8:52:cc: a6:f1:55:37:07:92:4e:ba:bb:b1:df:dd:49:41:4a: 59:e6:7e:a9:cf:43:4d:3f:1f:95:be:3c:0c:04:f8: 1d:db:a5:cb:6e:44:84:95:95:c9:6d:c3:35:fb:91: 4b:db:e5:2d:96:01:b0:41:86:ad:d9:d8:0d:fa:d8: 31:2a:01:45:34:40:ba:b2:ba:df:45:b5:d1:3d:a5: a5:64:4d:72:5e:a8:78:64:41:bc:68:8e:d8:4c:7f: fe:83:84:7d:c6:30:6b:4d:97:e5:38:94:df:12:a9: 35:63:ac:45:65:38:df:04:8d:ac:67:35:b7:a5:11: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:20:58:D1:29:CC:F7:81:EE:38:B0:30:0B:51:CB:E6:B7:1D:BF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:aa:67:3a:1c:5b:f4:c7:8c:0b:28:72:91:22:ef:e1:71:28: 90:85:18:9e:d0:28:c8:d6:08:4e:10:a4:f8:46:21:2f:e3:34: 7f:2d:b6:c8:ec:07:cc:46:97:40:db:2f:7b:88:e3:84:47:ac: b6:a2:73:dc:7b:cd:ad:83:ca:a6:72:05:a8:40:3e:93:f5:72: 1b:23:07:ae:30:3f:e2:b2:45:96:1c:d3:9c:53:88:1f:e0:dd: 75:1d:d7:5e:26:95:91:c2:4b:0f:77:6c:ec:ac:14:33:3d:dd: bd:8c:46:87:70:ac:e6:86:8c:1a:29:f0:4a:ab:ce:45:37:18: e7:bc:29:06:df:6f:2a:6d:d9:3a:89:88:61:9a:4f:38:3f:1f: 22:55:3f:99:48:47:a2:22:fb:3a:98:b5:5b:49:0e:0a:76:91: ae:62:37:8b:ab:c7:79:b2:f4:a0:7c:8a:a4:71:30:1d:21:eb: c7:71:f3:8f:34:ac:2b:cd:00:8e:d2:41:71:56:a3:d3:0f:c3: 71:99:b8:46:e9:07:4d:47:af:7c:d7:fe:d4:19:7d:73:86:70: 9c:fc:69:6a:98:df:7b:26:b5:03:8f:9c:9c:ca:cd:72:6f:d6: 25:0e:06:2c:48:a0:07:42:84:f4:40:14:8b:e5:3f:68:06:3e: 01:21:75:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExkXARsFLsDns1gesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk YmM2NzQwNWMtYTQwNS00ZTVkLWE2ZGItNGUyYzE0OWVlYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupEcvQv7jbQ/KSJDX+CB+GK/FkkpuwHr3pCx ci6Ixw1uX9njczCzQV9ZUxe2TmwYokC00knwb43YFRHWJjRGgjgXC+TuqF6GedTd g9Wh0e1JLQDvzTar7HENrOicLdPotFiUns4X9IxtI1LKU/xkCAaaB9lu7z4B5irT BrErK5z7hSLoUsym8VU3B5JOurux391JQUpZ5n6pz0NNPx+VvjwMBPgd26XLbkSE lZXJbcM1+5FL2+UtlgGwQYat2dgN+tgxKgFFNEC6srrfRbXRPaWlZE1yXqh4ZEG8 aI7YTH/+g4R9xjBrTZflOJTfEqk1Y6xFZTjfBI2sZzW3pRFnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGggWNEpzPeB7jiwMAtRy+a3Hb/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaqZzocW/THjAsocpEi7+FxKJCFGJ7QKMjWCE4QpPhGIS/jNH8ttsjs B8xGl0DbL3uI44RHrLaic9x7za2DyqZyBahAPpP1chsjB64wP+KyRZYc05xTiB/g 3XUd114mlZHCSw93bOysFDM93b2MRodwrOaGjBop8EqrzkU3GOe8KQbfbypt2TqJ iGGaTzg/HyJVP5lIR6Ii+zqYtVtJDgp2ka5iN4urx3my9KB8iqRxMB0h68dx8480 rCvNAI7SQXFWo9MPw3GZuEbpB01Hr3zX/tQZfXOGcJz8aWqY33smtQOPnJzKzXJv 1iUOBixIoAdChPRAFIvlP2gGPgEhdR8= -----END CERTIFICATE-----Generated at Fri Jan 30 14:55:34 2026 by rpki-client