This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa File: 40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa (raw, json) Hash identifier: 6YeQMgNhatYEgYA53bJJJ8flCo6fGJtRtjDY/UX2gKA= Subject key identifier: 25:30:7B:7E:46:7D:77:8F:70:6F:AF:E5:91:46:8D:BE:10:B4:2A:35 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C99670FF1F467D8775C9B7F00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 30238 IP address blocks: 68.232.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:0f:f1:f4:67:d8:77:5c:9b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=e6b6c40e-3dcb-4da3-bcc7-7367f48c8a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:7d:25:a2:98:77:34:06:23:b5:7c:d4:b9: 7c:fb:f3:d0:05:09:78:5d:77:b0:f8:18:9a:39:77: b4:cf:9c:b9:ec:5a:3f:39:5c:8c:c9:27:70:96:c0: 95:f9:9b:e9:a5:68:f7:27:81:b2:ed:41:e3:48:03: 5a:a0:5c:4f:44:07:d1:41:b0:6b:b9:54:72:15:70: f6:57:92:0e:b0:7c:4b:5c:25:a6:62:1d:0b:51:71: ee:81:79:de:8b:6c:5d:43:5d:70:83:33:fb:37:93: d1:0d:64:55:35:35:bb:09:f6:1a:0e:87:bf:ba:d8: 94:e7:46:95:3e:4d:40:c7:6e:ee:56:32:05:88:07: 44:21:44:5a:f3:df:ad:4e:ee:4b:88:28:60:c3:2f: bb:81:87:b9:25:92:83:38:e2:11:aa:17:00:c0:98: 0a:bc:cb:e4:f0:bc:70:20:ea:50:25:6c:c8:7f:08: 25:9a:f0:1f:e4:bc:e1:3b:ec:3a:e2:cc:0a:00:ac: c8:19:43:5e:f1:94:43:c6:ee:b4:2f:90:56:4b:71: d8:b3:6e:8d:ff:fa:39:71:a3:70:fa:92:79:eb:8c: b3:8b:c4:b4:b2:36:16:1f:78:38:a6:b0:b4:00:f5: c1:f5:11:47:86:63:43:1d:90:80:e1:55:9e:c9:05: 1e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:7B:7E:46:7D:77:8F:70:6F:AF:E5:91:46:8D:BE:10:B4:2A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ca:1b:28:80:ac:8d:0c:d8:d8:90:ac:f0:85:03:fe:24:f4: d6:15:f6:74:23:aa:9a:11:f3:0a:18:ec:4f:86:9d:85:1e:d5: 2d:ea:ee:71:d1:13:a4:c3:f4:0c:6e:73:32:f2:6a:8f:42:63: c5:ce:ce:31:0e:83:df:52:46:b1:16:b1:d1:c4:1f:f1:0a:e3: 3a:3f:5e:d8:d4:45:c2:fe:b3:60:c9:c0:7b:db:e4:5f:ca:bb: cb:1e:e4:7c:91:a3:05:14:5b:43:e5:22:cb:f1:37:88:21:6b: f6:f1:7c:04:a1:7d:35:1a:74:f4:fc:36:f0:19:b6:1f:19:53: ca:cc:38:17:88:94:dd:8f:e6:86:34:76:3c:df:43:f2:2b:09: 64:e3:73:08:57:11:c9:16:61:93:8d:31:20:fa:ae:11:04:cc: 66:56:d1:17:ea:31:21:fc:76:3f:cc:e2:cb:29:7d:49:cb:56: 26:c1:24:34:ef:ae:7e:82:d1:0e:50:d3:8c:06:8a:87:ac:0b: 89:34:a6:65:6e:92:38:74:7d:26:d7:2d:af:a3:07:05:ac:36: 04:9a:b4:53:e1:4c:15:4e:a1:e8:09:bd:97:c5:5a:30:aa:74: fc:0c:0c:b5:13:58:4a:81:12:5f:6d:d0:54:62:14:0d:11:cf: c3:60:16:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZw/x9GfYd1ybfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk ZTZiNmM0MGUtM2RjYi00ZGEzLWJjYzctNzM2N2Y0OGM4YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk919JaKYdzQGI7V81Ll8+/PQBQl4XXew+Bia OXe0z5y57Fo/OVyMySdwlsCV+ZvppWj3J4Gy7UHjSANaoFxPRAfRQbBruVRyFXD2 V5IOsHxLXCWmYh0LUXHugXnei2xdQ11wgzP7N5PRDWRVNTW7CfYaDoe/utiU50aV Pk1Ax27uVjIFiAdEIURa89+tTu5LiChgwy+7gYe5JZKDOOIRqhcAwJgKvMvk8Lxw IOpQJWzIfwglmvAf5LzhO+w64swKAKzIGUNe8ZRDxu60L5BWS3HYs26N//o5caNw +pJ564yzi8S0sjYWH3g4prC0APXB9RFHhmNDHZCA4VWeyQUeCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUwe35GfXePcG+v5ZFGjb4QtCo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDBjNDg2NzAtMmZmOS0z ZDZiLWEzNTgtOWJmY2RlMGY3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjKGyiArI0M2NiQrPCFA/4k9NYV9nQjqpoR8woY7E+GnYUe1S3q7nHR E6TD9AxuczLyao9CY8XOzjEOg99SRrEWsdHEH/EK4zo/XtjURcL+s2DJwHvb5F/K u8se5HyRowUUW0PlIsvxN4gha/bxfAShfTUadPT8NvAZth8ZU8rMOBeIlN2P5oY0 djzfQ/IrCWTjcwhXEckWYZONMSD6rhEEzGZW0RfqMSH8dj/M4sspfUnLVibBJDTv rn6C0Q5Q04wGioesC4k0pmVukjh0fSbXLa+jBwWsNgSatFPhTBVOoegJvZfFWjCq dPwMDLUTWEqBEl9t0FRiFA0Rz8NgFs8= -----END CERTIFICATE-----Generated at Fri Jan 30 14:55:05 2026 by rpki-client