This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa
File: 819b42a5-05dc-37b0-b3b8-ce850217123f.roa (raw, json)
Hash identifier: Rm2rtnejdsj7wWhqpJNV2DJFuL9WOwqf0xQFP5hW1ZI=
Subject key identifier: 90:36:40:11:5E:DB:5D:A3:F1:40:34:2B:57:65:5E:19:04:A7:B7:F5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C688C11214FF11B275631AB40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 32699
IP address blocks: 38.76.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:68:8c:11:21:4f:f1:1b:27:56:31:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=c8d94abb-2915-4085-9b66-711ab40b50be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:c1:90:78:96:f2:e8:23:10:77:e6:77:64:
a5:0d:38:8d:a5:66:a5:85:21:ce:da:cb:67:5e:06:
1a:71:9b:a7:d6:ee:d1:96:23:81:df:83:36:9c:6e:
4a:13:4e:17:62:24:cb:cb:d9:54:e5:25:42:1d:45:
a1:4f:18:77:22:51:ff:5e:96:05:1f:61:b8:42:4f:
79:8f:c9:a6:ca:1c:f5:04:f8:d9:9d:e8:49:42:84:
69:3b:ad:1c:b3:54:e2:1a:01:38:71:6c:d3:a0:4b:
cf:c4:4d:6c:c3:fe:0c:ec:7a:c3:b7:fd:c4:ca:b5:
f3:4a:24:44:21:a8:87:ae:02:0e:c1:c8:a8:0a:0b:
2f:97:0f:d9:0b:a8:6d:56:d4:67:d2:1b:e6:2d:fb:
d1:3a:45:1b:85:48:fd:bc:1b:59:a2:2b:cc:8c:f0:
00:5d:6c:6e:d2:b6:46:b9:90:5b:fe:d9:7d:8f:ac:
b1:c8:9a:4a:cc:1f:4c:e7:29:01:51:81:0c:6b:3f:
ad:e4:7e:58:4b:8f:8d:56:ba:c5:5f:f4:0f:9c:26:
5b:8a:8f:87:64:8a:1a:38:9c:93:82:18:0f:f2:21:
c6:e9:0d:b7:62:48:76:ce:54:72:ea:c5:e7:c1:64:
61:55:2c:d3:1b:0f:33:ab:db:21:f1:5e:6b:14:d4:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:40:11:5E:DB:5D:A3:F1:40:34:2B:57:65:5E:19:04:A7:B7:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.76.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:fd:30:8a:20:8e:50:88:41:7e:35:2d:6b:c3:f3:98:4a:a1:
a9:d3:4f:77:89:2d:81:3e:c2:f0:a2:ef:f2:a3:6d:2c:58:dc:
40:f9:e4:91:14:a9:9b:16:23:57:5b:2f:70:a6:20:0c:95:f4:
e0:ff:32:ea:9a:93:9a:5a:b2:d3:41:7f:cb:c4:01:55:5a:25:
65:e1:32:45:5f:42:ad:cf:54:bd:79:05:50:b9:da:81:6f:07:
74:19:26:5b:a6:3c:76:3c:54:a5:69:bb:ba:1f:b7:9d:75:48:
05:8b:fc:73:a9:61:08:9b:3a:4d:1c:c3:05:a4:0a:57:0e:ca:
83:f2:30:5d:5b:d1:0b:1e:45:17:50:23:95:a3:71:ed:d4:5b:
c8:e8:0b:51:7e:b7:06:27:7a:f2:f4:04:ad:ed:68:5b:c9:0c:
a7:8c:2f:09:6e:de:7c:dc:24:d1:0b:0a:6a:9b:97:59:4e:51:
d0:67:98:a0:c3:28:ca:3b:58:65:18:56:8d:a1:96:ae:4a:5c:
db:9e:41:3c:76:94:bb:36:cf:17:a7:24:87:c2:9a:84:75:ab:
6a:ad:9c:86:d8:a8:4f:9a:2b:b4:16:c4:64:c0:26:f0:9b:4c:
73:f5:99:a6:f5:d6:82:cf:a0:57:52:7d:9e:3c:e3:b5:6c:c0:
29:b3:0d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExojBEhT/EbJ1Yxq0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDEwNDAyMDAzMFoXDTI2MDQwNDAxMDAzMFowLzEtMCsGA1UEAxMk
YzhkOTRhYmItMjkxNS00MDg1LTliNjYtNzExYWI0MGI1MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHzBkHiW8ugjEHfmd2SlDTiNpWalhSHO2stn
XgYacZun1u7RliOB34M2nG5KE04XYiTLy9lU5SVCHUWhTxh3IlH/XpYFH2G4Qk95
j8mmyhz1BPjZnehJQoRpO60cs1TiGgE4cWzToEvPxE1sw/4M7HrDt/3EyrXzSiRE
IaiHrgIOwcioCgsvlw/ZC6htVtRn0hvmLfvROkUbhUj9vBtZoivMjPAAXWxu0rZG
uZBb/tl9j6yxyJpKzB9M5ykBUYEMaz+t5H5YS4+NVrrFX/QPnCZbio+HZIoaOJyT
ghgP8iHG6Q23Ykh2zlRy6sXnwWRhVSzTGw8zq9sh8V5rFNQEjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA2QBFe212j8UA0K1dlXhkEp7f1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODE5YjQyYTUtMDVkYy0z
N2IwLWIzYjgtY2U4NTAyMTcxMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkz/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/9MIogjlCIQX41LWvD85hKoanTT3eJLYE+wvCi7/KjbSxY3ED55JEU
qZsWI1dbL3CmIAyV9OD/Muqak5pastNBf8vEAVVaJWXhMkVfQq3PVL15BVC52oFv
B3QZJlumPHY8VKVpu7oft511SAWL/HOpYQibOk0cwwWkClcOyoPyMF1b0QseRRdQ
I5Wjce3UW8joC1F+twYnevL0BK3taFvJDKeMLwlu3nzcJNELCmqbl1lOUdBnmKDD
KMo7WGUYVo2hlq5KXNueQTx2lLs2zxenJIfCmoR1q2qtnIbYqE+aK7QWxGTAJvCb
THP1mab11oLPoFdSfZ4847VswCmzDfU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:22:17 2026 by rpki-client