This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa File: dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa (raw, json) Hash identifier: Ag8YojuZeawZAN1eOTw8hs9VJovwmz1jVa+cuO9i7Gc= Subject key identifier: FB:7A:36:89:D8:50:34:D9:92:42:51:16:2A:A8:DE:AE:79:43:48:62 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C65C13ACD6474A3617A2ADA00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa Signing time: Sat 03 Jan 2026 02:00:30 +0000 ROA not before: Sat 03 Jan 2026 02:00:30 +0000 ROA not after: Fri 03 Apr 2026 01:00:30 +0000 asID: 273263 IP address blocks: 38.58.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:65:c1:3a:cd:64:74:a3:61:7a:2a:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 3 02:00:30 2026 GMT Not After : Apr 3 01:00:30 2026 GMT Subject: CN=5530bc6e-2288-4298-8030-3766d84757ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:53:72:1a:35:96:09:d7:53:f0:d1:4b:3e: db:25:ed:28:70:54:ae:25:09:f7:78:0f:20:64:d4: f2:3f:12:d7:6a:d6:e1:d3:f0:79:a8:80:14:b4:c6: c1:11:8a:eb:50:4e:aa:16:d8:fc:9f:1c:64:c1:83: e3:38:65:78:bf:0f:36:32:69:ac:94:33:13:2e:67: 5b:1c:95:bb:57:d8:65:15:6f:ad:0d:f1:9e:5f:23: b1:77:d8:71:2c:4b:8d:fb:f4:60:1c:ce:22:2b:f0: 6c:bb:e0:95:ba:20:c0:73:81:d1:0a:c9:9c:d4:64: a9:57:79:e9:b7:ca:59:e9:83:b5:4d:ea:46:08:7b: 6b:48:2a:5c:e6:53:7f:cb:18:93:5a:cf:99:35:42: 7b:88:89:60:d2:ac:16:78:5a:f8:f2:e3:69:13:45: c1:87:89:7e:0f:b5:04:90:a4:13:88:cb:e3:44:0f: 44:5f:ba:61:55:57:96:c3:b0:20:c1:de:58:10:6b: 31:2f:cc:20:37:4d:1f:76:e6:f1:76:24:90:5f:a9: f3:90:18:41:b6:7e:89:a5:06:65:c4:4a:af:34:32: a2:2b:a2:0f:98:a2:e8:b2:46:2c:95:5f:71:c4:77: 46:00:c2:53:b3:dd:35:9f:5b:de:c9:55:53:55:b3: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7A:36:89:D8:50:34:D9:92:42:51:16:2A:A8:DE:AE:79:43:48:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c2:d0:ff:97:59:60:5b:70:67:b5:f4:ed:2c:cf:32:3b:62: b4:f5:77:37:93:46:65:b5:40:3d:ec:d9:e5:00:36:36:e4:bb: 3f:07:ff:72:82:27:80:d2:4b:c1:09:11:ed:e5:3d:78:51:2d: 10:22:ff:30:0a:63:0e:92:d7:b7:08:12:22:25:e5:86:45:30: ee:46:56:5c:c8:9c:6b:7f:18:82:bd:46:a3:e8:a2:fe:57:cc: 8d:c5:66:22:4a:cc:d6:35:8b:31:c2:b2:e8:10:02:d6:09:11: f2:ba:3c:33:db:ad:d6:94:d5:42:fc:7f:60:d6:8a:b3:40:4b: 48:47:ed:5b:af:79:c5:a0:7c:66:57:2e:48:1f:43:09:07:26: 69:2d:6d:37:ef:27:de:51:bb:d5:ad:74:a3:51:e7:f5:a6:77: b8:3e:c0:98:64:7c:f7:4c:19:a4:1c:b7:b2:12:19:09:6f:1c: 3c:87:4c:63:21:e0:12:6e:a0:b0:b4:53:05:2f:71:2b:a4:55: f3:07:66:35:31:32:e8:7c:04:bd:27:db:41:a0:e2:a2:77:2b: f2:b0:f4:44:d1:80:f9:91:b9:45:6d:3a:ed:5f:d1:d2:52:c7: d9:2e:f5:d2:b9:70:6d:04:66:94:98:65:fb:8e:fd:94:78:c6: f6:5a:aa:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExlwTrNZHSjYXoq2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEwMzAyMDAzMFoXDTI2MDQwMzAxMDAzMFowLzEtMCsGA1UEAxMk NTUzMGJjNmUtMjI4OC00Mjk4LTgwMzAtMzc2NmQ4NDc1N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJTcho1lgnXU/DRSz7bJe0ocFSuJQn3eA8g ZNTyPxLXatbh0/B5qIAUtMbBEYrrUE6qFtj8nxxkwYPjOGV4vw82MmmslDMTLmdb HJW7V9hlFW+tDfGeXyOxd9hxLEuN+/RgHM4iK/Bsu+CVuiDAc4HRCsmc1GSpV3np t8pZ6YO1TepGCHtrSCpc5lN/yxiTWs+ZNUJ7iIlg0qwWeFr48uNpE0XBh4l+D7UE kKQTiMvjRA9EX7phVVeWw7Agwd5YEGsxL8wgN00fdubxdiSQX6nzkBhBtn6JpQZl xEqvNDKiK6IPmKLoskYslV9xxHdGAMJTs901n1veyVVTVbOKnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt6NonYUDTZkkJRFiqo3q55Q0hiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGM3M2M5MGUtMjYzYS0z Yzk2LTk4YjktNjE4ZGQ5ZjRhYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXC0P+XWWBbcGe19O0szzI7YrT1dzeTRmW1QD3s2eUANjbkuz8H/3KC J4DSS8EJEe3lPXhRLRAi/zAKYw6S17cIEiIl5YZFMO5GVlzInGt/GIK9RqPoov5X zI3FZiJKzNY1izHCsugQAtYJEfK6PDPbrdaU1UL8f2DWirNAS0hH7VuvecWgfGZX LkgfQwkHJmktbTfvJ95Ru9WtdKNR5/Wmd7g+wJhkfPdMGaQct7ISGQlvHDyHTGMh 4BJuoLC0UwUvcSukVfMHZjUxMuh8BL0n20Gg4qJ3K/Kw9ETRgPmRuUVtOu1f0dJS x9ku9dK5cG0EZpSYZfuO/ZR4xvZaqkw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:29:05 2026 by rpki-client