This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa File: a38a8da5-2705-3176-9add-cee9d33d73a3.roa (raw, json) Hash identifier: ofrjiyP7MeE31ZKU32gfUYPyg9sj2DQ3NQFHxeAyJHA= Subject key identifier: 3E:CF:A5:9D:FB:47:C3:CF:4B:B6:48:51:54:F7:07:73:E3:0A:7B:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C8E3C59A15828F4C1B393E380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 397200 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:59:a1:58:28:f4:c1:b3:93:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=8b44326b-c1f8-49d9-ae31-8989929dbc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:83:e5:36:22:26:11:db:6c:77:f1:62:fc: 59:78:07:9d:45:b7:7a:c4:fa:98:38:9a:e0:fa:c7: 29:0f:a7:a1:ce:67:f3:37:d5:49:78:c5:82:4d:85: 6f:3b:b8:36:de:5c:6e:38:9e:d7:4c:09:49:cd:9d: 45:92:be:ab:0f:3a:5c:fb:a2:e1:5d:d8:ea:79:f7: 62:45:56:18:19:df:13:ec:c7:0e:88:18:0d:33:56: 09:4d:6c:a5:fb:ce:c9:b7:5b:63:b4:60:60:6f:e1: 01:ac:e4:72:04:26:56:11:7f:98:ee:44:79:3d:13: 20:45:f4:e0:b1:4a:11:e2:a0:31:e7:82:7e:cc:b4: 9b:de:7b:8a:e8:c8:75:f5:d9:da:b1:3f:53:f6:91: 86:81:80:f9:e4:86:2a:4a:0d:79:d9:fd:c6:f1:6b: c1:1f:ca:b0:df:60:97:ec:3e:cf:e2:dd:0a:1a:8b: a2:d9:8e:0a:a9:c4:dc:53:b5:4a:08:00:5e:96:2e: 16:1f:2d:2d:d5:35:96:f6:51:f3:4d:df:ba:09:b4: 6f:4c:a9:41:ca:bc:49:f3:ef:af:75:66:3b:dc:58: 09:26:bd:2c:20:0f:6b:28:a3:68:75:4b:ae:a1:d4: f6:bf:05:27:06:c1:82:23:9b:b1:2b:07:24:3a:b6: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:A5:9D:FB:47:C3:CF:4B:B6:48:51:54:F7:07:73:E3:0A:7B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:10:42:a4:22:e4:8e:8c:1d:01:4e:43:50:ce:4b:e8:c2:bf: 0c:23:be:70:d3:a9:a5:74:3d:af:21:0a:51:0b:f3:6e:4c:57: ae:3d:6d:57:4b:9d:f3:86:f3:05:09:60:49:fb:21:a7:55:1a: 8a:23:2d:6f:56:62:db:a5:9a:66:d4:41:00:8b:ff:ab:7d:80: b9:32:08:f8:4f:31:11:14:6e:69:d4:db:5e:3b:8d:af:1d:7f: 28:db:e3:f6:4e:85:f5:84:65:47:e6:67:46:37:b8:b9:f7:c9: 6b:3b:2a:ed:c2:2e:eb:71:77:23:da:71:15:8b:11:95:b5:ce: a0:0f:68:52:5e:2a:c8:a0:78:09:f1:55:18:30:ef:d4:43:91: f3:1e:12:02:1c:e3:07:79:d8:83:73:a0:06:31:3d:26:17:2f: f3:f5:26:84:21:a4:6e:0f:ca:eb:d4:79:df:ec:ef:78:b3:72: 91:9d:df:0f:e6:91:03:a0:dd:8f:8c:21:53:1f:15:7f:34:7b: c2:cd:e4:27:88:b6:6b:1f:ad:8a:f1:56:d0:16:8b:db:65:bf: e9:71:af:6d:7b:22:bc:69:3f:6f:b7:25:9b:0a:a0:87:c2:c7: c0:86:59:ff:33:60:1b:47:60:3e:ba:3c:fb:35:ee:e2:f8:3b: 35:8d:a7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyOPFmhWCj0wbOT44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk OGI0NDMyNmItYzFmOC00OWQ5LWFlMzEtODk4OTkyOWRiYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxWD5TYiJhHbbHfxYvxZeAedRbd6xPqYOJrg +scpD6ehzmfzN9VJeMWCTYVvO7g23lxuOJ7XTAlJzZ1Fkr6rDzpc+6LhXdjqefdi RVYYGd8T7McOiBgNM1YJTWyl+87Jt1tjtGBgb+EBrORyBCZWEX+Y7kR5PRMgRfTg sUoR4qAx54J+zLSb3nuK6Mh19dnasT9T9pGGgYD55IYqSg152f3G8WvBH8qw32CX 7D7P4t0KGoui2Y4KqcTcU7VKCABeli4WHy0t1TWW9lHzTd+6CbRvTKlByrxJ8++v dWY73FgJJr0sIA9rKKNodUuuodT2vwUnBsGCI5uxKwckOra5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7PpZ37R8PPS7ZIUVT3B3PjCnuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM4YThkYTUtMjcwNS0z MTc2LTlhZGQtY2VlOWQzM2Q3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIQQqQi5I6MHQFOQ1DOS+jCvwwjvnDTqaV0Pa8hClEL825MV649bVdL nfOG8wUJYEn7IadVGoojLW9WYtulmmbUQQCL/6t9gLkyCPhPMREUbmnU2147ja8d fyjb4/ZOhfWEZUfmZ0Y3uLn3yWs7Ku3CLutxdyPacRWLEZW1zqAPaFJeKsigeAnx VRgw79RDkfMeEgIc4wd52INzoAYxPSYXL/P1JoQhpG4PyuvUed/s73izcpGd3w/m kQOg3Y+MIVMfFX80e8LN5CeItmsfrYrxVtAWi9tlv+lxr217IrxpP2+3JZsKoIfC x8CGWf8zYBtHYD66PPs17uL4OzWNp44= -----END CERTIFICATE-----Generated at Mon Jan 26 00:48:08 2026 by rpki-client