This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa
File: a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa (raw, json)
Hash identifier: LOPTtDc+wV1ZlmdZD5zDgHvSeRMwAVktRdbQ7lsY4GI=
Subject key identifier: 47:8E:D4:09:D4:6F:C1:3D:26:73:65:B2:E2:E3:9D:75:4F:5F:CF:81
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C7C16AD286A790B07141A8AC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa
Signing time: Sun 11 Jan 2026 02:00:30 +0000
ROA not before: Sun 11 Jan 2026 02:00:30 +0000
ROA not after: Sat 11 Apr 2026 01:00:30 +0000
asID: 272122
IP address blocks: 38.61.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7c:16:ad:28:6a:79:0b:07:14:1a:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 11 02:00:30 2026 GMT
Not After : Apr 11 01:00:30 2026 GMT
Subject: CN=1665a956-5d92-44fe-b5a2-6e9bc88055ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:5d:65:d4:b7:ed:37:87:14:92:12:46:66:
ad:3f:33:84:e2:02:57:7f:18:47:c2:36:f7:2f:9e:
06:11:b2:5e:af:ec:0e:ef:b6:9d:4a:36:0e:71:8f:
ff:dd:b0:94:17:c8:77:5b:21:ff:86:d2:de:f5:fe:
92:59:24:ef:bb:1a:a7:1b:55:80:81:7e:f4:6c:40:
ac:ab:d2:66:b6:ae:a4:f1:dd:12:3f:46:b0:20:b7:
45:26:7b:13:d3:0a:cd:52:74:c1:5b:47:51:5d:62:
92:db:ff:fb:26:09:8b:a1:82:37:61:c5:04:96:49:
ca:5d:bf:bb:7f:1d:20:13:7e:fb:bb:66:64:2d:56:
46:ca:11:90:37:07:a5:d7:4f:a7:66:c1:9b:b7:5f:
0e:60:b4:6c:6e:7e:18:77:a4:50:71:6e:fa:96:5e:
15:ca:12:f4:85:aa:ed:54:01:d6:d0:ba:f4:9c:0a:
99:67:d7:7a:79:ca:b4:2a:60:a9:61:50:26:76:3f:
8f:79:2e:08:d4:69:d4:e1:65:e7:e7:13:8a:12:5b:
31:75:30:37:75:96:42:a1:d1:fb:9f:6a:89:a5:57:
bf:20:88:23:07:c9:a8:22:67:d3:8e:ba:99:bb:b9:
e7:f3:6f:84:6a:5b:36:0e:86:a8:71:f7:7b:95:8c:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:D4:09:D4:6F:C1:3D:26:73:65:B2:E2:E3:9D:75:4F:5F:CF:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.61.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:be:b8:09:68:e8:b7:f1:92:1e:30:a3:b1:ed:b8:3d:35:b6:
13:60:1f:4a:11:33:c9:03:85:df:f9:1b:9e:77:54:0c:41:9c:
78:29:44:af:d3:da:a0:9d:86:d5:46:c0:0d:77:30:75:da:79:
14:f4:80:a3:24:bd:45:b7:2b:a7:ea:53:18:da:f3:25:a1:69:
6b:74:be:1d:a4:87:9d:81:d3:e1:60:3b:67:19:51:4d:b1:82:
4b:cd:ee:9d:cb:8f:a2:10:51:a1:75:a2:9a:3b:e5:26:5d:53:
8e:87:e2:59:84:2b:d7:dc:3d:ce:13:79:9c:ef:46:a6:e4:35:
e5:4a:db:25:46:23:90:46:1f:0a:56:6f:8f:e7:c0:07:d3:2c:
b4:14:49:59:07:74:4f:48:c3:dc:68:3f:69:fb:1b:b1:52:ca:
52:56:5a:0d:9f:5c:84:d9:21:99:93:35:5e:4d:87:c0:df:b8:
71:af:b3:e5:c7:0d:db:33:99:bd:c2:f0:7e:2a:58:a5:40:fd:
ad:44:0c:fe:68:3c:bc:91:ed:14:3c:49:69:c5:da:37:4d:52:
e1:14:a9:0e:f2:04:eb:cf:9f:51:c1:c6:2c:08:dc:55:e3:2e:
a4:46:09:38:8f:4e:d3:09:47:cd:1f:9e:e0:7e:c6:fb:96:7c:
0c:d1:3f:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx8Fq0oankLBxQaisAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDExMTAyMDAzMFoXDTI2MDQxMTAxMDAzMFowLzEtMCsGA1UEAxMk
MTY2NWE5NTYtNWQ5Mi00NGZlLWI1YTItNmU5YmM4ODA1NWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEpdZdS37TeHFJISRmatPzOE4gJXfxhHwjb3
L54GEbJer+wO77adSjYOcY//3bCUF8h3WyH/htLe9f6SWSTvuxqnG1WAgX70bECs
q9Jmtq6k8d0SP0awILdFJnsT0wrNUnTBW0dRXWKS2//7JgmLoYI3YcUElknKXb+7
fx0gE377u2ZkLVZGyhGQNwel10+nZsGbt18OYLRsbn4Yd6RQcW76ll4VyhL0hart
VAHW0Lr0nAqZZ9d6ecq0KmCpYVAmdj+PeS4I1GnU4WXn5xOKElsxdTA3dZZCodH7
n2qJpVe/IIgjB8moImfTjrqZu7nn82+Eals2Doaocfd7lYwugwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeO1AnUb8E9JnNlsuLjnXVPX8+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTI1ODVjYTItZmZlYS0z
NzZlLWEwODEtYzVjYjJjNmUyYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHJj2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq+uAlo6Lfxkh4wo7HtuD01thNgH0oRM8kDhd/5G553VAxBnHgpRK/T
2qCdhtVGwA13MHXaeRT0gKMkvUW3K6fqUxja8yWhaWt0vh2kh52B0+FgO2cZUU2x
gkvN7p3Lj6IQUaF1opo75SZdU46H4lmEK9fcPc4TeZzvRqbkNeVK2yVGI5BGHwpW
b4/nwAfTLLQUSVkHdE9Iw9xoP2n7G7FSylJWWg2fXITZIZmTNV5Nh8DfuHGvs+XH
Ddszmb3C8H4qWKVA/a1EDP5oPLyR7RQ8SWnF2jdNUuEUqQ7yBOvPn1HBxiwI3FXj
LqRGCTiPTtMJR80fnuB+xvuWfAzRP3M=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:16:02 2026 by rpki-client