This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa File: 954af7a6-17f4-38dc-afe0-e1022d94cfca.roa (raw, json) Hash identifier: o79eBWKz2oigl6HG6mN+MrhBF3ZFJod8ul3WprGNMeM= Subject key identifier: CF:07:8D:A8:1D:61:85:4E:2B:47:FA:8B:A2:8D:30:C1:A9:BB:AC:9F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C52366782001ACB86CFCDF300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 52468 IP address blocks: 38.250.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:67:82:00:1a:cb:86:cf:cd:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=1db463d7-7145-4582-861b-7cb58ccda677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:65:72:c2:63:5d:c7:b5:8d:03:95:59:11: cc:2c:53:9d:c4:dd:49:96:0a:d4:be:a1:8c:48:b9: 11:75:71:79:e4:b0:99:a2:3c:19:6e:0a:f9:eb:88: a5:fb:e4:8c:51:3b:2c:46:57:0e:e9:5f:30:15:dc: 6b:ad:fd:15:b7:4f:f0:30:85:98:08:7a:9f:a6:27: ec:99:f2:a0:4d:a6:e6:12:54:38:71:69:08:39:a6: 8a:2d:d5:db:66:d1:22:e4:69:80:8d:c3:1e:91:b8: 99:b7:71:73:9b:79:c6:1a:f6:ab:9b:1c:e3:5a:ce: bf:29:01:28:07:8e:cf:73:9f:16:ba:ba:fb:e3:72: ef:56:d0:34:93:1c:4d:b5:d7:e7:1b:74:ff:67:63: 0f:e2:fa:bf:d2:7b:c6:fd:ed:7f:4d:b3:d7:24:64: af:dd:2a:a7:72:4c:0d:e2:35:71:01:4e:23:96:7f: c7:b4:1d:f5:ca:e2:bd:d6:5a:a4:06:14:6a:ec:75: 2f:d7:04:01:88:4f:26:82:77:92:c5:57:90:88:44: c2:aa:5f:c4:85:19:3d:c4:66:30:a7:96:69:4c:14: 98:62:43:4f:61:55:7a:68:2c:73:aa:8a:02:65:13: a5:d9:e1:62:f6:bb:81:d7:c9:ef:ed:be:0d:3e:e9: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:07:8D:A8:1D:61:85:4E:2B:47:FA:8B:A2:8D:30:C1:A9:BB:AC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:08:15:16:05:c8:ec:8a:e3:0f:0f:6e:94:ed:8b:64:23:e2: 87:82:26:41:6c:2d:d0:63:c0:19:96:fd:b2:3a:f9:75:9c:de: 3a:67:87:ac:13:15:fd:2b:f0:51:9e:b6:24:bd:5a:e9:41:ea: 7d:da:e1:1c:66:af:a5:87:5b:7e:3f:e8:b4:9d:e5:19:90:eb: 2d:da:96:88:9f:f6:39:f7:e9:9a:5d:aa:83:54:de:29:ff:79: 10:98:7e:7f:a7:0b:fc:58:22:ef:19:61:ce:fa:8e:ec:7d:ba: 62:a8:a7:83:b1:29:f8:2a:cb:fc:ea:ef:6b:40:81:7c:b2:52: f2:99:6c:4c:09:52:ca:fe:50:37:19:4b:79:3f:33:3b:3c:40: cb:18:f8:19:b4:ce:90:e8:e8:9c:7b:5b:ed:01:56:38:ad:44: 17:1d:c6:49:61:16:3b:83:d9:4c:e9:a3:a7:23:bb:27:2d:9e: df:cf:e2:73:ed:b4:7d:57:84:29:21:b8:ae:22:67:08:fc:d9: 03:cf:40:b8:7a:4a:46:0c:3f:bb:d6:b3:ff:e3:2b:d3:c6:32: 31:d8:98:1d:e6:31:8a:36:a2:3d:d3:41:99:cb:de:ce:a8:0e: 41:18:66:b8:51:28:df:18:d3:df:64:a3:19:53:59:14:22:56: a9:09:81:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmeCABrLhs/N8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk MWRiNDYzZDctNzE0NS00NTgyLTg2MWItN2NiNThjY2RhNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yJlcsJjXce1jQOVWRHMLFOdxN1JlgrUvqGM SLkRdXF55LCZojwZbgr564il++SMUTssRlcO6V8wFdxrrf0Vt0/wMIWYCHqfpifs mfKgTabmElQ4cWkIOaaKLdXbZtEi5GmAjcMekbiZt3Fzm3nGGvarmxzjWs6/KQEo B47Pc58Wurr743LvVtA0kxxNtdfnG3T/Z2MP4vq/0nvG/e1/TbPXJGSv3SqnckwN 4jVxAU4jln/HtB31yuK91lqkBhRq7HUv1wQBiE8mgneSxVeQiETCql/EhRk9xGYw p5ZpTBSYYkNPYVV6aCxzqooCZROl2eFi9ruB18nv7b4NPulruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8HjagdYYVOK0f6i6KNMMGpu6yfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTU0YWY3YTYtMTdmNC0z OGRjLWFmZTAtZTEwMjJkOTRjZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMIFRYFyOyK4w8PbpTti2Qj4oeCJkFsLdBjwBmW/bI6+XWc3jpnh6wT Ff0r8FGetiS9WulB6n3a4Rxmr6WHW34/6LSd5RmQ6y3aloif9jn36ZpdqoNU3in/ eRCYfn+nC/xYIu8ZYc76jux9umKop4OxKfgqy/zq72tAgXyyUvKZbEwJUsr+UDcZ S3k/Mzs8QMsY+Bm0zpDo6Jx7W+0BVjitRBcdxklhFjuD2Uzpo6cjuyctnt/P4nPt tH1XhCkhuK4iZwj82QPPQLh6SkYMP7vWs//jK9PGMjHYmB3mMYo2oj3TQZnL3s6o DkEYZrhRKN8Y099koxlTWRQiVqkJgQQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:10:18 2026 by rpki-client