This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: AGEs5bb3B1jd71JR5bUS+vRx0WjsoYEwF0mdVqPReBw= Subject key identifier: AA:8E:45:CA:DC:71:D5:08:79:C1:16:7B:29:C7:CC:A8:6C:0B:58:D2 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584C688BE69457421BED0B5C7900 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Sun 04 Jan 2026 02:00:30 +0000 ROA not before: Sun 04 Jan 2026 02:00:30 +0000 ROA not after: Sat 04 Apr 2026 01:00:30 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:68:8b:e6:94:57:42:1b:ed:0b:5c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Jan 4 02:00:30 2026 GMT Not After : Apr 4 01:00:30 2026 GMT Subject: CN=5d5a882d-2629-4be8-a2ff-7ce1afef646f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:26:d9:4f:8f:d0:24:23:27:2d:8d:d8:49: 75:ed:e1:da:ce:28:6b:54:c6:d0:98:5f:d0:2a:3d: 99:8b:5c:5f:97:24:81:94:a5:ac:95:c6:84:54:c3: 84:07:76:7f:1e:fa:98:05:36:56:c7:31:c6:36:2c: e5:dd:06:6e:80:a3:2f:6d:4a:96:5d:d3:fc:fb:de: 5c:f8:5d:fc:25:9f:29:9c:a6:45:e9:c1:bd:9d:2c: c5:3f:73:e3:e8:12:2a:aa:c9:e6:60:3e:90:92:df: 26:ac:a0:ad:a1:b4:1d:3f:7f:23:65:93:6c:8d:46: 60:e4:42:6c:b6:21:80:c9:a3:87:26:5c:6f:1c:16: 7c:90:69:63:0e:84:60:ec:2f:68:3a:47:08:1b:c4: 80:54:42:dc:9e:88:d4:a3:79:95:66:e9:f6:4f:e5: 53:95:c0:e0:62:53:16:fe:ac:f8:4c:24:ca:6b:e4: 01:ce:a8:5b:c8:5a:da:6b:1d:2a:48:33:15:d4:49: 2e:47:b6:f0:4b:f3:d5:84:3c:3c:f9:dc:3d:7f:01: 7c:24:b8:20:23:2a:9b:81:2f:b0:ea:b4:e5:9f:a6: f1:c3:68:c6:85:a2:c1:6e:08:ee:bf:80:50:2f:e6: 6f:e4:39:3c:3c:a2:f5:c8:78:04:09:12:56:df:2a: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:45:CA:DC:71:D5:08:79:C1:16:7B:29:C7:CC:A8:6C:0B:58:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bd:74:2d:5d:1d:12:69:1c:cc:f5:8b:ad:bc:f8:95:90:fe: dc:ed:c1:5a:0c:c1:6c:41:41:0b:63:43:b0:e1:11:28:0f:13: a0:b8:e8:16:bd:d5:07:c4:7f:40:90:55:3a:27:b1:bf:02:80: eb:f6:e5:fe:84:91:4f:b5:f4:42:a6:dc:82:2c:d2:d6:65:3f: 76:ad:bf:3f:ce:79:80:90:6a:79:70:a8:ed:77:56:f6:2a:d5: bf:c2:df:4a:c9:24:95:13:9d:c0:0a:05:fd:ec:c8:23:4a:4a: f2:43:87:51:b7:74:c7:45:67:c2:d1:1f:8f:79:8c:63:7f:cd: 33:67:3e:32:9b:de:a9:e9:0f:86:7d:72:38:e6:76:74:20:bf: b9:7c:e7:20:81:67:da:fd:fe:1b:4d:63:46:e0:6b:65:f4:cd: b8:18:9a:0c:8b:bb:2f:55:99:3a:56:fb:16:93:0f:49:df:a8: a1:d6:55:4c:3c:05:46:4b:a0:87:1a:f9:51:79:e2:59:53:5e: 96:57:1a:d3:0b:31:d6:a9:d3:f3:56:71:61:55:52:78:18:67: 97:45:a0:c4:3a:1b:ba:a3:e3:20:91:bc:05:0f:38:25:2f:39: 3c:03:1e:00:0a:b0:0d:e4:cc:c4:14:be:13:90:fe:2f:43:6f: 80:1d:78:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExoi+aUV0Ib7QtceQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI2MDEwNDAyMDAzMFoXDTI2MDQwNDAxMDAzMFowLzEtMCsGA1UEAxMk NWQ1YTg4MmQtMjYyOS00YmU4LWEyZmYtN2NlMWFmZWY2NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Em2U+P0CQjJy2N2El17eHazihrVMbQmF/Q Kj2Zi1xflySBlKWslcaEVMOEB3Z/HvqYBTZWxzHGNizl3QZugKMvbUqWXdP8+95c +F38JZ8pnKZF6cG9nSzFP3Pj6BIqqsnmYD6Qkt8mrKCtobQdP38jZZNsjUZg5EJs tiGAyaOHJlxvHBZ8kGljDoRg7C9oOkcIG8SAVELcnojUo3mVZun2T+VTlcDgYlMW /qz4TCTKa+QBzqhbyFraax0qSDMV1EkuR7bwS/PVhDw8+dw9fwF8JLggIyqbgS+w 6rTln6bxw2jGhaLBbgjuv4BQL+Zv5Dk8PKL1yHgECRJW3yp8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqORcrccdUIecEWeynHzKhsC1jSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi9dC1dHRJpHMz1i628+JWQ/tztwVoMwWxBQQtjQ7DhESgPE6C46Ba9 1QfEf0CQVTonsb8CgOv25f6EkU+19EKm3IIs0tZlP3atvz/OeYCQanlwqO13VvYq 1b/C30rJJJUTncAKBf3syCNKSvJDh1G3dMdFZ8LRH495jGN/zTNnPjKb3qnpD4Z9 cjjmdnQgv7l85yCBZ9r9/htNY0bga2X0zbgYmgyLuy9VmTpW+xaTD0nfqKHWVUw8 BUZLoIca+VF54llTXpZXGtMLMdap0/NWcWFVUngYZ5dFoMQ6G7qj4yCRvAUPOCUv OTwDHgAKsA3kzMQUvhOQ/i9Db4AdeGA= -----END CERTIFICATE-----Generated at Sun Jan 25 04:38:47 2026 by rpki-client