This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa
File: 2d657b26-c82d-34c0-b092-2cd65a4479a3.roa (raw, json)
Hash identifier: jfUOMAgc/cSKVrotpBPGXd7u7sKI1Qp92ucoVcbaacg=
Subject key identifier: EA:0C:A4:22:F3:58:CA:BC:74:48:9F:F4:D9:9A:78:D6:B4:C6:8D:47
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C788178C6D1EE9EEE56062040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa
Signing time: Fri 09 Jan 2026 19:12:31 +0000
ROA not before: Fri 09 Jan 2026 19:12:31 +0000
ROA not after: Thu 09 Apr 2026 18:12:31 +0000
asID: 273018
IP address blocks: 38.252.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:78:81:78:c6:d1:ee:9e:ee:56:06:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 9 19:12:31 2026 GMT
Not After : Apr 9 18:12:31 2026 GMT
Subject: CN=f83f51dd-d38b-42b1-831c-0a90cd64752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:10:e8:62:7b:84:42:77:f0:da:7d:c4:94:
1a:0c:80:7d:76:c7:98:e2:03:7c:e2:f3:98:75:e6:
37:fb:b1:40:96:be:cd:54:62:a2:1e:cb:47:d6:4f:
61:ad:6d:af:94:8e:8b:d7:cb:d1:35:9e:d7:4a:4e:
f4:d6:6b:63:e3:6a:cb:70:15:90:66:20:ba:14:4b:
fe:13:65:0e:ba:eb:64:f8:ab:94:e9:1a:31:2c:a5:
86:d6:e4:d8:cc:2b:bb:ac:1b:97:c8:d2:11:6e:74:
cf:49:66:4c:e8:83:b2:22:d1:b3:10:3e:76:35:9c:
6c:13:32:ad:3e:10:fe:ab:41:b8:01:6e:d4:2f:14:
5c:ae:a9:e5:44:92:ab:86:71:a3:bd:7e:26:f9:f0:
4a:c0:e5:dd:fc:9f:3c:cd:8a:ee:e1:3e:67:d1:0b:
dd:46:ca:72:90:18:24:f5:2d:ed:8d:b0:b6:c6:ec:
72:91:4d:ea:33:cd:7f:5c:e8:87:71:63:4e:cb:f2:
02:b8:46:05:27:7d:c4:98:25:02:86:86:d0:ff:21:
ff:37:4c:2c:85:bd:13:a5:b2:eb:22:df:e9:ea:72:
7f:54:60:20:95:80:35:17:95:13:05:15:2f:35:43:
63:84:7c:9c:21:7a:cb:f8:86:f4:e9:4b:92:9a:a0:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:A4:22:F3:58:CA:BC:74:48:9F:F4:D9:9A:78:D6:B4:C6:8D:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.252.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:31:04:f9:ae:a6:99:97:5a:0b:e2:84:31:b9:f1:26:14:60:
32:c7:49:6c:6b:38:e4:e2:3f:3b:44:3a:80:70:8e:e3:1c:f6:
d7:c5:8f:51:fd:2a:7e:7e:d8:59:58:69:a7:31:a3:bf:45:97:
19:e9:32:35:75:03:2a:c7:d4:a4:26:85:a2:7b:49:a1:64:83:
a0:02:c7:83:65:7c:ea:fe:0d:05:76:dd:0b:63:58:26:cc:94:
b1:ac:14:90:62:6d:66:89:7e:ae:98:21:22:f0:47:09:95:d7:
b3:5d:26:cf:ba:af:13:cf:bc:8a:25:b3:3d:74:ba:cf:68:b6:
43:db:3a:0e:4b:14:3f:c3:95:a1:e8:51:85:73:36:d7:87:fd:
88:5b:39:7b:4b:cf:55:21:0d:66:bb:90:9e:58:d5:be:7e:d3:
a0:0d:48:81:2e:fe:f7:f6:3c:58:2e:4c:ed:60:9b:0e:3a:ce:
9d:29:ff:54:ad:22:95:f8:a8:3c:b0:09:d8:1a:9a:c5:27:d4:
a3:78:c4:fe:99:4c:fb:82:41:a7:6d:65:11:64:01:03:24:95:
f5:8d:ac:18:48:ed:86:c9:04:cb:8e:c4:23:8c:e4:f6:f1:19:
1a:f6:fc:2f:3f:3b:83:31:9c:64:73:b7:1d:a2:b1:6c:91:64:
9a:9d:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:21:04 2026 by rpki-client