This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa File: 4d9dde79-a7a1-3002-99de-718c0934d901.roa (raw, json) Hash identifier: 9youGMgr/CqBAWnZpNl/D0kY9MrkldYBDS5uXZmOPCs= Subject key identifier: 82:F2:DF:5A:80:07:20:0A:A9:DD:46:BE:34:A2:D7:30:9A:2D:9A:CF Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584C69F165C64E9893344EA88D40 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa Signing time: Sun 04 Jan 2026 14:00:38 +0000 ROA not before: Sun 04 Jan 2026 14:00:38 +0000 ROA not after: Sat 04 Apr 2026 13:00:38 +0000 asID: 40628 IP address blocks: 199.27.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:f1:65:c6:4e:98:93:34:4e:a8:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jan 4 14:00:38 2026 GMT Not After : Apr 4 13:00:38 2026 GMT Subject: CN=78163a63-650b-4e64-b88f-90a5cd9463fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:48:fe:96:77:9b:14:3c:89:e8:a6:82:2a: 7c:00:78:57:54:c3:dc:65:ce:d3:a9:e2:34:92:04: 33:c9:3d:13:66:24:45:5b:17:ac:60:f5:46:42:62: e9:52:1e:a9:5f:94:20:f8:e1:bd:e1:f6:93:5b:5f: f4:53:f4:d5:72:d8:de:27:5d:ba:a2:53:07:5c:93: 41:9b:7a:e2:d3:33:3f:fe:ba:23:4f:b5:2d:46:f1: 9f:e9:f6:5e:8f:06:3a:28:2a:a2:af:33:63:c1:2d: 6e:27:bf:ea:fa:67:e5:f2:64:b4:53:59:72:eb:00: c7:44:77:58:1a:9f:18:3b:42:68:1e:1c:55:66:d7: d2:23:fc:9a:cf:a2:87:3f:f5:2e:b1:10:3f:b4:b6: 9b:f7:00:3d:d5:ca:e1:2a:1d:e8:e4:56:ec:c7:78: 82:ca:de:c9:5f:9e:6a:3f:ec:cf:89:ff:aa:70:5a: 70:5e:47:48:ab:d0:33:a6:52:7d:6c:16:43:94:ec: 1c:c6:3c:44:69:7e:19:44:a6:e3:58:2c:db:95:dc: f8:13:7b:86:5d:09:ff:8f:27:73:9c:9d:3b:e7:e9: 4d:15:07:5d:ef:a5:38:d9:2e:ce:5b:72:1d:76:bc: 8b:d1:e7:d9:73:30:ca:60:50:7e:42:d1:72:77:63: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:DF:5A:80:07:20:0A:A9:DD:46:BE:34:A2:D7:30:9A:2D:9A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 199.27.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:79:84:00:cb:38:33:7e:1b:2f:fb:c8:68:3e:87:66:3a:d7: 39:93:93:7d:da:4a:0e:54:2c:22:eb:84:13:67:b2:87:fa:3c: f1:73:0a:14:43:cf:53:d2:54:1e:81:c5:6f:e5:cf:0c:9e:fd: ab:32:30:29:a3:4a:23:f1:91:26:d8:2d:11:f9:8d:eb:96:bc: 9c:79:6f:34:10:d9:2f:33:f1:cb:ab:23:fc:5f:11:be:7f:63: 29:04:62:db:59:e0:e4:c2:15:30:e9:fd:a0:ac:21:8a:9e:8a: 82:ca:d9:c5:54:86:97:2c:0d:e4:a9:49:65:4a:e4:76:b2:d1: 25:b0:8b:64:c2:a6:40:8a:1d:ff:f5:07:1c:77:5b:9e:fa:56: d3:1e:84:20:65:b5:26:a8:37:23:37:8a:dc:89:0a:f2:c1:50: 1b:b8:3e:83:a2:82:cb:62:63:db:ba:62:83:42:71:52:3a:a4: e5:1a:d5:09:83:13:87:79:14:d3:37:df:14:55:25:d7:ac:0d: a5:f3:9e:b8:0e:c3:bd:09:d7:56:cf:24:af:5d:e0:10:ac:52: 69:0f:6a:59:4c:39:c1:93:5c:a5:38:58:df:90:54:f6:e1:cf: 2b:f1:09:2e:d3:75:77:6e:31:9a:3c:90:c8:1b:f0:ea:97:b0: 55:69:26:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8WXGTpiTNE6ojUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk NzgxNjNhNjMtNjUwYi00ZTY0LWI4OGYtOTBhNWNkOTQ2M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntI/pZ3mxQ8ieimgip8AHhXVMPcZc7TqeI0 kgQzyT0TZiRFWxesYPVGQmLpUh6pX5Qg+OG94faTW1/0U/TVctjeJ126olMHXJNB m3ri0zM//rojT7UtRvGf6fZejwY6KCqirzNjwS1uJ7/q+mfl8mS0U1ly6wDHRHdY Gp8YO0JoHhxVZtfSI/yaz6KHP/UusRA/tLab9wA91crhKh3o5Fbsx3iCyt7JX55q P+zPif+qcFpwXkdIq9AzplJ9bBZDlOwcxjxEaX4ZRKbjWCzbldz4E3uGXQn/jydz nJ075+lNFQdd76U42S7OW3IddryL0efZczDKYFB+QtFyd2P+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILy31qAByAKqd1GvjSi1zCaLZrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNGQ5ZGRlNzktYTdhMS0z MDAyLTk5ZGUtNzE4YzA5MzRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx5hADLODN+Gy/7yGg+h2Y61zmTk33aSg5ULCLrhBNnsof6PPFzChRD z1PSVB6BxW/lzwye/asyMCmjSiPxkSbYLRH5jeuWvJx5bzQQ2S8z8curI/xfEb5/ YykEYttZ4OTCFTDp/aCsIYqeioLK2cVUhpcsDeSpSWVK5Hay0SWwi2TCpkCKHf/1 Bxx3W576VtMehCBltSaoNyM3ityJCvLBUBu4PoOigstiY9u6YoNCcVI6pOUa1QmD E4d5FNM33xRVJdesDaXznrgOw70J11bPJK9d4BCsUmkPallMOcGTXKU4WN+QVPbh zyvxCS7TdXduMZo8kMgb8OqXsFVpJoA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:34 2026 by rpki-client