This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa File: 40fd236d-3bdc-3348-8667-257ffc06e7a5.roa (raw, json) Hash identifier: vIjQDSQ4NpXGY0yu+YGMEZ0QOU+UsaQY9K74a2JswAg= Subject key identifier: 4B:A0:EA:F6:0B:D0:45:52:E4:A7:3F:40:26:DB:C5:87:CD:38:B7:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C688C0A89314E2312BEEAEFF8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa Signing time: Sun 04 Jan 2026 02:00:30 +0000 ROA not before: Sun 04 Jan 2026 02:00:30 +0000 ROA not after: Sat 04 Apr 2026 01:00:30 +0000 asID: 273039 IP address blocks: 38.254.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:68:8c:0a:89:31:4e:23:12:be:ea:ef:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 4 02:00:30 2026 GMT Not After : Apr 4 01:00:30 2026 GMT Subject: CN=16243bcb-01b9-4c2d-bd2e-d09d8076972d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:b8:63:21:bd:1f:28:3e:13:b2:57:06:fa: 4b:5b:49:3e:6e:ce:32:fa:94:96:20:27:26:e2:f5: eb:63:f9:0a:b2:18:ee:f2:10:ab:a2:0a:94:4e:26: a2:a3:68:c4:26:d9:07:22:12:2a:ce:7f:90:26:f8: 0d:be:a7:03:63:53:28:05:7b:f4:28:df:7d:0b:b8: 05:67:b4:47:af:ed:9a:62:22:91:75:89:f2:73:3d: fd:e7:5d:46:7a:fa:92:3c:46:c8:e6:52:ea:3d:4c: e7:c3:fa:42:7d:5a:54:5d:29:b0:79:47:eb:be:93: 66:f9:45:65:c7:d8:8b:40:16:e6:15:e4:7d:27:5a: 73:fa:34:6f:22:86:98:33:d7:c4:75:de:15:9d:63: fd:4f:e9:92:73:79:71:00:51:f1:bf:25:de:18:eb: 03:84:49:ef:04:15:d4:28:f4:5b:ce:d8:8c:a7:c4: 72:f9:23:d9:34:94:c2:90:82:46:ee:2b:0c:e6:f2: fb:92:4c:28:25:9d:bc:bc:e1:57:a4:7a:c8:7a:56: 48:77:84:5b:21:19:00:6f:ce:71:e8:fb:62:05:9d: 1b:20:a3:eb:1c:64:f4:f9:d8:cf:fe:bf:8a:59:64: cb:c1:20:01:3e:b6:be:98:6f:d2:8c:78:d3:eb:55: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A0:EA:F6:0B:D0:45:52:E4:A7:3F:40:26:DB:C5:87:CD:38:B7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:10:1f:36:b5:7d:56:57:7c:d6:15:9b:76:f9:11:af:49:32: ca:b5:9a:df:d9:4d:6c:3c:b5:cd:36:0a:69:6a:29:b8:6a:8b: bf:5b:a0:a2:11:f4:41:4e:b3:db:1a:1f:cd:a1:3e:e9:73:ec: a2:79:20:fa:aa:b1:33:33:c7:b7:47:f1:c7:99:1b:fc:7c:09: 63:bd:f3:1e:5e:76:17:cf:bc:99:69:b8:9f:6f:9b:4d:49:1e: f6:17:fd:81:2b:62:dd:d6:fd:74:4c:c1:4f:e8:4a:25:a4:a4: 84:50:72:b8:86:37:5e:9a:4d:ac:f8:77:0b:1e:53:ed:46:92: 53:25:47:a8:b3:74:c3:82:06:02:22:47:95:95:5e:61:f4:fe: 87:27:75:dc:7a:a1:c2:06:20:2d:3d:bf:e4:19:63:f8:ec:97: 00:e9:21:82:80:fa:39:78:52:b9:71:1a:97:b6:96:82:8f:dd: 05:be:4a:d2:2d:e6:dd:bb:39:71:3c:e9:16:a4:a7:1b:22:e5: f1:07:76:bc:3b:e1:5e:32:d8:78:b3:61:d4:f5:f1:a0:06:2e: 8f:b0:30:48:77:da:09:e3:81:b0:80:cb:5b:e8:54:cb:d0:e7: 0c:a8:4f:fa:c3:58:86:b4:8f:71:ba:28:82:90:21:d2:f1:d4: 8a:cd:8a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExojAqJMU4jEr7q7/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEwNDAyMDAzMFoXDTI2MDQwNDAxMDAzMFowLzEtMCsGA1UEAxMk MTYyNDNiY2ItMDFiOS00YzJkLWJkMmUtZDA5ZDgwNzY5NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFm4YyG9Hyg+E7JXBvpLW0k+bs4y+pSWICcm 4vXrY/kKshju8hCrogqUTiaio2jEJtkHIhIqzn+QJvgNvqcDY1MoBXv0KN99C7gF Z7RHr+2aYiKRdYnycz39511GevqSPEbI5lLqPUznw/pCfVpUXSmweUfrvpNm+UVl x9iLQBbmFeR9J1pz+jRvIoaYM9fEdd4VnWP9T+mSc3lxAFHxvyXeGOsDhEnvBBXU KPRbztiMp8Ry+SPZNJTCkIJG7isM5vL7kkwoJZ28vOFXpHrIelZId4RbIRkAb85x 6PtiBZ0bIKPrHGT0+djP/r+KWWTLwSABPra+mG/SjHjT61WXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEug6vYL0EVS5Kc/QCbbxYfNOLeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDBmZDIzNmQtM2JkYy0z MzQ4LTg2NjctMjU3ZmZjMDZlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUQHza1fVZXfNYVm3b5Ea9JMsq1mt/ZTWw8tc02CmlqKbhqi79boKIR 9EFOs9saH82hPulz7KJ5IPqqsTMzx7dH8ceZG/x8CWO98x5edhfPvJlpuJ9vm01J HvYX/YErYt3W/XRMwU/oSiWkpIRQcriGN16aTaz4dwseU+1GklMlR6izdMOCBgIi R5WVXmH0/ocnddx6ocIGIC09v+QZY/jslwDpIYKA+jl4UrlxGpe2loKP3QW+StIt 5t27OXE86Rakpxsi5fEHdrw74V4y2HizYdT18aAGLo+wMEh32gnjgbCAy1voVMvQ 5wyoT/rDWIa0j3G6KIKQIdLx1IrNij4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:01 2026 by rpki-client