This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa File: a62dab88-34ee-38ef-a202-27e5c6b97999.roa (raw, json) Hash identifier: SDn5sLB72ixsR0kkNpLSEcZevU9puFv1goVbZGg/eF4= Subject key identifier: B9:F5:1B:AD:3B:E3:CA:C1:D0:2F:B9:DD:F4:CD:2F:68:BE:27:8D:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C44411AFD561FAC029CD10FC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 21859 IP address blocks: 38.131.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:1a:fd:56:1f:ac:02:9c:d1:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=4db1dd84-ec7c-4516-aea3-59de009ad1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:d9:6e:42:99:cf:89:0a:05:01:9f:d2:93: 74:23:74:57:cb:41:6c:6a:ee:e0:7d:ec:d5:4c:c7: f5:c5:0f:cb:a8:cf:19:f6:25:6d:b4:fb:5d:f2:2d: 8f:2d:f6:f7:a8:ba:e6:02:77:e8:33:e1:21:26:e4: 27:42:8d:3c:a3:75:78:ce:01:4e:61:e5:be:31:02: 70:7e:b8:0f:8a:56:18:dd:38:c6:5b:ac:08:ae:43: 1e:0a:aa:21:08:b7:f6:f3:89:37:4b:2e:16:7f:fc: 66:3a:a3:66:6c:8f:35:0c:58:bc:2b:ad:03:3b:b2: ff:54:7f:14:7e:ad:d3:f9:31:4d:9f:29:ce:88:7e: 51:8d:62:08:91:19:df:05:31:de:6e:ff:06:e8:97: 1f:fd:3b:66:2b:5a:54:c9:a8:02:13:ac:31:f7:18: 07:89:30:3b:df:7b:94:7e:ff:62:f9:e5:cb:30:f8: c2:e2:01:fb:80:58:e8:fb:a5:d8:fb:ce:19:36:41: 1f:0f:15:82:c9:87:9c:96:e7:c1:1c:8d:31:07:ab: e0:3b:06:63:e2:48:b9:70:3a:19:9b:a2:bd:47:da: 0c:43:98:b4:3c:5a:c4:cd:0c:e0:4c:12:1e:07:50: 63:2f:cd:fe:e3:ef:ec:c9:78:76:e3:a5:cf:1b:75: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:1B:AD:3B:E3:CA:C1:D0:2F:B9:DD:F4:CD:2F:68:BE:27:8D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.131.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:33:77:da:46:b1:b1:1b:b3:cf:9d:cf:5b:04:cf:04:95:01: 5d:77:39:75:f0:a3:01:a6:f3:33:28:f7:6a:fc:b7:25:b5:34: 58:77:9f:4b:37:05:eb:bc:ae:24:f2:29:94:16:c4:02:71:56: 2e:a5:a1:84:f0:5b:19:1c:4d:fa:77:98:67:fc:9a:cc:9d:f8: 85:18:e1:bc:b8:37:3d:66:81:72:8d:5a:64:ef:0a:23:14:b4: d7:80:37:fe:06:82:f2:6f:7b:e3:01:bf:24:1b:8f:65:54:17: 50:b1:21:a2:17:30:ed:00:5b:5b:c1:7a:b6:b7:d5:4c:ab:a4: 9a:ed:52:27:f7:69:fd:b3:1f:7c:17:41:ec:ba:c1:e0:cc:32: e8:a9:5a:b3:66:fc:d9:35:e4:7e:20:7e:4a:10:f5:6b:64:4a: 25:bb:5d:bd:d6:d6:cd:ad:98:2f:3c:08:de:a4:74:95:81:be: 54:1d:3a:08:a1:42:0b:90:3e:e9:5c:37:53:16:86:d2:7a:34: 29:df:0a:ba:e1:7c:84:73:61:6b:51:b0:48:d8:64:4b:5c:bf: f3:fe:d2:d4:4c:b4:d2:cb:5e:25:d1:c6:5b:fc:23:39:2a:46: cf:7d:38:f6:7a:6b:a6:9e:26:96:5a:d6:65:34:0d:1d:25:39: f4:20:dd:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRr9Vh+sApzRD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk NGRiMWRkODQtZWM3Yy00NTE2LWFlYTMtNTlkZTAwOWFkMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRzZbkKZz4kKBQGf0pN0I3RXy0Fsau7gfezV TMf1xQ/LqM8Z9iVttPtd8i2PLfb3qLrmAnfoM+EhJuQnQo08o3V4zgFOYeW+MQJw frgPilYY3TjGW6wIrkMeCqohCLf284k3Sy4Wf/xmOqNmbI81DFi8K60DO7L/VH8U fq3T+TFNnynOiH5RjWIIkRnfBTHebv8G6Jcf/TtmK1pUyagCE6wx9xgHiTA733uU fv9i+eXLMPjC4gH7gFjo+6XY+84ZNkEfDxWCyYeclufBHI0xB6vgOwZj4ki5cDoZ m6K9R9oMQ5i0PFrEzQzgTBIeB1BjL83+4+/syXh246XPG3VDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn1G60748rB0C+53fTNL2i+J40WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTYyZGFiODgtMzRlZS0z OGVmLWEyMDItMjdlNWM2Yjk3OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJoOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUzd9pGsbEbs8+dz1sEzwSVAV13OXXwowGm8zMo92r8tyW1NFh3n0s3 Beu8riTyKZQWxAJxVi6loYTwWxkcTfp3mGf8msyd+IUY4by4Nz1mgXKNWmTvCiMU tNeAN/4GgvJve+MBvyQbj2VUF1CxIaIXMO0AW1vBera31UyrpJrtUif3af2zH3wX Qey6weDMMuipWrNm/Nk15H4gfkoQ9WtkSiW7Xb3W1s2tmC88CN6kdJWBvlQdOgih QguQPulcN1MWhtJ6NCnfCrrhfIRzYWtRsEjYZEtcv/P+0tRMtNLLXiXRxlv8Izkq Rs99OPZ6a6aeJpZa1mU0DR0lOfQg3bQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:46:22 2026 by rpki-client