This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: TkZbUT28Ty92mz5EM00OwrzAnJB1ALy53OHWT9dGtJk= Subject key identifier: 7A:84:55:23:01:DD:9F:98:6C:B5:DB:C1:DE:06:37:FC:DD:10:C1:8E Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584C5236799E07B4D8B5904D9980 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:79:9e:07:b4:d8:b5:90:4d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=9e8a1d56-8a6d-41c7-9827-ead3d8b628f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:97:b6:f0:6f:6e:83:5a:22:a0:38:b0:4c: e5:e3:fc:39:fd:29:e8:5e:98:3c:f0:72:14:df:48: f0:e9:6d:cc:f6:49:76:e9:17:01:07:5e:80:7d:51: 50:a6:87:a8:a6:d0:14:41:50:08:ee:be:be:83:25: bc:49:bf:d5:cc:4f:e9:f6:ca:e1:c1:67:80:e6:fe: 12:6a:6f:3f:2b:a8:c6:ee:32:2e:76:34:5e:cc:a0: 58:e4:06:22:88:92:fe:49:fa:67:f2:b3:6b:fb:b9: 73:f8:76:a9:c4:50:8b:1d:75:ae:2b:24:b6:f5:09: ea:fa:aa:a4:1d:c6:08:1a:8e:0d:b4:ec:39:cc:2c: 49:0e:79:32:62:3e:73:a6:04:a2:60:61:08:fa:7c: cc:b2:d5:bd:84:fe:3d:53:da:09:69:55:cd:75:ff: dd:2e:64:84:ec:b5:67:56:dc:91:ee:ac:99:07:59: 49:a9:f7:df:90:cc:b9:86:c6:5b:ea:8d:83:79:7c: 7d:19:4c:e9:d4:1d:2a:c7:79:77:1d:00:a6:29:9a: 7d:bf:6e:da:2f:9a:21:f4:9c:eb:ce:44:f2:2d:63: 06:7f:70:45:05:76:6f:46:8c:66:5c:4c:83:4a:8c: cd:a3:0a:e5:67:bf:cd:6c:ec:50:25:97:25:c8:41: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:55:23:01:DD:9F:98:6C:B5:DB:C1:DE:06:37:FC:DD:10:C1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e7:6a:1c:01:8a:18:01:dd:94:04:6b:c4:99:5a:c4:3f:ad: ec:29:5a:cb:cb:f1:76:10:8d:af:a0:3c:0a:a9:bd:13:c2:d8: da:e5:e4:22:8d:c3:b8:32:24:87:2b:7a:2f:60:1c:f6:d5:e8: 0f:90:d5:3e:93:53:dc:dd:47:42:6b:3b:c9:41:f9:51:f4:42: 42:a7:02:6d:0f:0b:67:58:ff:74:a6:1c:da:4b:2f:51:61:68: 20:e3:93:e7:c1:a1:46:b0:91:d0:d6:07:63:64:d5:8e:72:42: c0:13:3d:7b:98:c1:e3:f7:a0:9e:65:68:cf:a4:1f:9a:16:a7: f5:37:cb:60:e2:68:f6:30:66:79:b4:03:77:b2:16:8b:21:85: f2:c9:c3:8b:39:19:77:42:9e:bd:96:c2:67:7a:1d:f1:f8:cc: 67:00:1b:1f:36:98:5c:5d:5e:95:34:b9:00:84:a8:06:d2:93: 91:63:69:37:4b:cf:55:ec:9a:6f:95:8e:bb:c6:c0:7b:73:e9: 9a:76:76:71:26:61:74:42:df:b4:df:9a:40:99:55:36:98:2a: 01:cc:57:f7:9a:7e:bc:53:c7:f0:69:c7:9e:78:75:16:0b:ca: f4:c6:d3:c3:82:0c:84:0b:cf:7f:e7:41:da:f0:5a:2b:75:c0: e3:e8:3d:5c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWExSNnmeB7TYtZBNmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk OWU4YTFkNTYtOGE2ZC00MWM3LTk4MjctZWFkM2Q4YjYyOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloWXtvBvboNaIqA4sEzl4/w5/SnoXpg88HIU 30jw6W3M9kl26RcBB16AfVFQpoeoptAUQVAI7r6+gyW8Sb/VzE/p9srhwWeA5v4S am8/K6jG7jIudjRezKBY5AYiiJL+Sfpn8rNr+7lz+HapxFCLHXWuKyS29Qnq+qqk HcYIGo4NtOw5zCxJDnkyYj5zpgSiYGEI+nzMstW9hP49U9oJaVXNdf/dLmSE7LVn VtyR7qyZB1lJqfffkMy5hsZb6o2DeXx9GUzp1B0qx3l3HQCmKZp9v27aL5oh9Jzr zkTyLWMGf3BFBXZvRoxmXEyDSozNowrlZ7/NbOxQJZclyEEYTwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHqEVSMB3Z+YbLXbwd4GN/zdEMGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAfudqHAGKGAHdlARrxJlaxD+t7Clay8vxdhCNr6A8Cqm9 E8LY2uXkIo3DuDIkhyt6L2Ac9tXoD5DVPpNT3N1HQms7yUH5UfRCQqcCbQ8LZ1j/ dKYc2ksvUWFoIOOT58GhRrCR0NYHY2TVjnJCwBM9e5jB4/egnmVoz6Qfmhan9TfL YOJo9jBmebQDd7IWiyGF8snDizkZd0KevZbCZ3od8fjMZwAbHzaYXF1elTS5AISo BtKTkWNpN0vPVeyab5WOu8bAe3PpmnZ2cSZhdELftN+aQJlVNpgqAcxX95p+vFPH 8GnHnnh1FgvK9MbTw4IMhAvPf+dB2vBaK3XA4+g9XA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:53:04 2026 by rpki-client