This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa File: 023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa (raw, json) Hash identifier: 59/bpE8vgNbLE5koIDfONgaUk55UhQaf4iBo8iXz1hc= Subject key identifier: 5B:98:7A:E9:A9:5F:25:B1:AB:11:C6:59:AB:39:FA:13:4A:F7:08:A0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C99A086AFA66C11CEAE541B40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa Signing time: Wed 21 Jan 2026 15:56:45 +0000 ROA not before: Wed 21 Jan 2026 15:56:45 +0000 ROA not after: Tue 21 Apr 2026 14:56:45 +0000 asID: 22598 IP address blocks: 38.147.144.0/22 maxlen: 24 154.7.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:a0:86:af:a6:6c:11:ce:ae:54:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 21 15:56:45 2026 GMT Not After : Apr 21 14:56:45 2026 GMT Subject: CN=280166b5-7b8d-4b78-8554-30141c9f4e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:76:15:89:2b:71:a9:37:38:b2:a4:db:8d: ed:eb:cb:5b:53:06:d4:bb:8d:e9:a0:fd:cf:78:05: 7a:f2:86:c2:93:1c:30:15:40:e4:f2:83:f9:82:38: 67:c0:8a:b1:9c:5b:f2:35:18:ac:07:f7:55:95:6c: ff:af:77:4d:1b:18:1e:27:33:50:8d:8c:ad:83:3c: e9:e2:16:68:d9:c3:52:f9:5c:67:19:21:31:66:8c: 65:ac:19:42:78:47:9b:56:02:e5:68:cf:f4:80:ce: 2b:73:71:d6:9d:35:63:e4:fe:b6:65:9b:e1:14:2c: b5:70:8e:cf:2a:ec:a8:62:fb:85:ae:62:e8:f0:01: a4:70:ee:cd:17:6b:37:f6:fa:92:5b:69:35:72:85: 8d:30:98:43:3b:fe:c3:ac:74:a6:f9:08:31:f4:0c: 72:8b:f2:5e:94:8e:ba:ce:c2:43:47:9f:12:70:77: e7:11:9a:71:7a:62:39:6b:6d:1e:01:30:9d:4f:48: 0d:48:3d:52:4b:ba:88:96:16:31:84:8a:eb:54:38: c3:ef:e4:4c:9a:e9:d0:ce:bc:33:84:71:68:ea:6b: 63:79:46:98:6c:15:2b:22:ce:8e:e6:c1:85:09:da: 15:31:5d:74:62:01:83:e3:c3:87:65:a5:ae:17:df: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:7A:E9:A9:5F:25:B1:AB:11:C6:59:AB:39:FA:13:4A:F7:08:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.147.144.0/22 154.7.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9d:28:d4:3e:db:b6:4b:55:62:07:f3:b0:83:20:70:46:93: 0a:d9:25:ab:2e:08:c1:11:14:4e:79:05:e3:0e:a7:48:6b:a3: c5:24:81:66:5c:d5:94:72:9e:e2:cb:32:3c:f9:23:dd:3a:39: 3b:5a:f3:6b:13:c3:3b:fa:02:41:42:e9:f7:f0:13:83:c8:27: b2:74:0b:39:33:22:b7:67:ae:03:23:1b:9a:1a:cb:dc:bd:ad: df:8e:dd:58:65:a0:cb:b9:d2:3f:5b:8f:d8:5b:56:c7:8f:20: d6:87:81:4d:d6:6d:90:af:76:65:00:d4:d9:c1:7b:cc:e0:d9: 86:56:67:39:16:f0:8f:a5:38:ef:ea:2e:0a:40:e4:7c:81:6b: 70:a2:7d:eb:3b:fb:e3:ea:63:1f:e9:2f:01:33:90:d8:1e:ff: fd:2e:ac:c0:8a:54:dc:a4:47:c1:e9:17:12:f0:82:1c:34:6e: 2a:44:ad:b1:46:35:a5:13:e9:1f:49:a2:82:7f:21:93:ee:98: eb:81:22:4e:6f:03:9f:6a:f3:a2:3b:3e:4f:31:53:eb:0a:fa: 78:34:8f:c1:f3:c2:99:0e:ab:92:3a:cf:6b:33:8b:a7:68:71: 03:e9:f1:8f:c4:63:29:be:51:cc:85:79:70:4c:3b:f8:9f:1c: e8:e6:3a:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyZoIavpmwRzq5UG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEyMTE1NTY0NVoXDTI2MDQyMTE0NTY0NVowLzEtMCsGA1UEAxMk MjgwMTY2YjUtN2I4ZC00Yjc4LTg1NTQtMzAxNDFjOWY0ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF52FYkrcak3OLKk243t68tbUwbUu43poP3P eAV68obCkxwwFUDk8oP5gjhnwIqxnFvyNRisB/dVlWz/r3dNGxgeJzNQjYytgzzp 4hZo2cNS+VxnGSExZoxlrBlCeEebVgLlaM/0gM4rc3HWnTVj5P62ZZvhFCy1cI7P KuyoYvuFrmLo8AGkcO7NF2s39vqSW2k1coWNMJhDO/7DrHSm+Qgx9Axyi/JelI66 zsJDR58ScHfnEZpxemI5a20eATCdT0gNSD1SS7qIlhYxhIrrVDjD7+RMmunQzrwz hHFo6mtjeUaYbBUrIs6O5sGFCdoVMV10YgGD48OHZaWuF99eBwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFuYeumpXyWxqxHGWas5+hNK9wigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDIzYmZiNGUtNjRhYy0z YzdkLWE4YWEtZTMzOGNhYjg3NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJpOQAwQC mgeEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAGdKNQ+27ZLVWIH87CDIHBGkwrZJasuCMERFE55BeMOp0hr o8UkgWZc1ZRynuLLMjz5I906OTta82sTwzv6AkFC6ffwE4PIJ7J0CzkzIrdnrgMj G5oay9y9rd+O3VhloMu50j9bj9hbVsePINaHgU3WbZCvdmUA1NnBe8zg2YZWZzkW 8I+lOO/qLgpA5HyBa3Cifes7++PqYx/pLwEzkNge//0urMCKVNykR8HpFxLwghw0 bipErbFGNaUT6R9JooJ/IZPumOuBIk5vA59q86I7Pk8xU+sK+ng0j8HzwpkOq5I6 z2szi6docQPp8Y/EYym+UcyFeXBMO/ifHOjmOlU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:51 2026 by rpki-client