This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa
File: a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa (raw, json)
Hash identifier: mJ/sYRmW0AzdT1G8CN/CZvkaNzoC1lISE0MR0McxtKc=
Subject key identifier: 83:20:34:F2:37:78:56:F8:AF:77:6B:9D:F7:CE:79:8D:42:5E:13:8A
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C8CD6C6B1E7A46A7850340820
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa
Signing time: Sat 17 Jan 2026 02:00:30 +0000
ROA not before: Sat 17 Jan 2026 02:00:30 +0000
ROA not after: Fri 17 Apr 2026 01:00:30 +0000
asID: 274004
IP address blocks: 38.224.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8c:d6:c6:b1:e7:a4:6a:78:50:34:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 17 02:00:30 2026 GMT
Not After : Apr 17 01:00:30 2026 GMT
Subject: CN=9b54ff38-1c50-4a43-82da-9556c9b635c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:0f:ba:de:25:02:62:db:04:b2:37:38:cf:
47:e3:a2:af:6d:69:4b:88:99:3b:01:93:e0:ff:c4:
8a:d6:ae:0f:22:0c:e8:f8:b3:76:c3:71:38:c4:ef:
2f:5f:bb:1a:fe:21:e1:4a:d6:df:19:1a:7b:df:20:
ef:21:2e:f0:0a:46:89:b0:8c:0b:9c:9b:6e:14:0f:
f3:66:f4:e5:77:51:80:1c:4e:c6:91:dd:0b:ec:1b:
80:2c:ad:43:13:57:12:8d:d6:ab:f6:40:cf:b1:06:
8c:37:02:01:f3:31:7e:c1:fc:f1:ab:0b:78:17:c2:
61:35:4e:5f:d5:33:0c:95:01:bf:6e:2b:3e:db:e2:
e5:ad:86:1f:56:42:79:84:1c:48:82:3d:02:11:37:
1d:b9:81:20:8f:83:34:fc:e1:78:9f:c6:51:7c:dc:
0c:20:71:d3:66:46:9a:d9:c4:cf:8d:56:a9:c6:00:
68:8c:38:fb:0b:e0:2c:c6:7e:0d:a2:78:1d:3f:06:
76:b4:2a:53:90:4d:6a:57:92:30:10:16:04:17:96:
1e:54:71:c9:93:eb:87:6a:95:fb:3c:bf:56:c1:ec:
cb:b0:d5:68:bf:27:dc:8d:9b:d9:44:b3:3e:e4:72:
4b:39:f7:f4:7f:77:eb:e6:1a:f2:fc:5b:af:34:e2:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:34:F2:37:78:56:F8:AF:77:6B:9D:F7:CE:79:8D:42:5E:13:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.224.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:66:0d:33:c7:31:f4:9a:70:38:b2:f8:0f:46:9f:bc:b2:cf:
b7:5d:52:ba:70:7c:19:bc:c7:4d:e5:98:18:1e:55:7f:a2:eb:
69:74:d3:71:2d:30:2d:35:83:d5:70:5d:32:a2:e8:ae:36:93:
33:22:4d:7c:eb:ed:6b:38:8a:6d:d3:e4:11:d4:18:36:ae:7b:
c3:3a:4d:b0:9c:da:8c:bf:a1:c8:67:a4:7b:3f:33:c7:13:a2:
49:2e:d7:ac:f4:12:47:95:9b:96:73:70:2a:35:33:2d:9b:e7:
96:0a:cd:f8:2d:9c:c2:09:09:7e:cf:dd:ee:6a:3b:f3:e6:72:
a5:55:27:a8:12:40:34:17:1b:14:6c:0c:02:5a:dd:c8:50:1b:
92:2d:af:f4:34:eb:39:09:73:69:31:36:ad:7e:af:54:da:d0:
2f:35:57:2b:b0:ff:7c:2b:1c:02:52:c9:70:b1:cb:d4:a7:aa:
14:a7:c1:64:cf:c5:81:d2:41:da:32:0c:7c:99:c0:7c:d1:3b:
15:31:2a:e5:b8:a7:80:28:2b:dd:08:92:e8:4d:67:5f:31:98:
cd:e7:fe:d7:39:ad:8d:2e:29:0a:52:47:f8:c4:09:48:ae:d5:
45:8c:dc:d1:5b:b0:e9:87:3a:25:22:04:84:e1:12:17:e2:a8:
3b:e4:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:42:35 2026 by rpki-client