This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json)
Hash identifier: SBK1QuxF+b7o2uv8GmdYtcbLoDqr/Jt+LkTttuT7QMQ=
Subject key identifier: 2B:80:36:32:FF:91:8F:5D:8B:BA:C9:DF:80:17:EF:B9:78:9A:BC:AE
Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial: 010D0C9F4328584C61914A480A0353024D02311B
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
Signing time: Thu 01 Jan 2026 14:00:38 +0000
ROA not before: Thu 01 Jan 2026 14:00:38 +0000
ROA not after: Wed 01 Apr 2026 13:00:38 +0000
asID: 395437
IP address blocks: 138.43.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:61:91:4a:48:0a:03:53:02:4d:02:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Validity
Not Before: Jan 1 14:00:38 2026 GMT
Not After : Apr 1 13:00:38 2026 GMT
Subject: CN=2912131d-9c69-43c1-bdaa-375f6e362b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:64:68:96:64:7f:fb:95:22:7d:6b:fe:68:
0f:45:7e:e0:44:78:eb:46:00:8f:1e:75:87:bc:32:
4e:c6:2c:28:6f:51:15:8c:28:fe:f3:b1:0b:59:7b:
4d:bb:c4:21:bf:08:4f:f9:b5:d9:4f:c4:e2:64:7a:
4e:c2:f2:fe:54:59:db:63:c4:46:37:10:c9:0d:3b:
f5:24:8f:12:ba:8c:7a:6d:9a:3e:e7:cd:03:7f:45:
43:9e:9c:2c:a9:6c:8f:d7:47:8f:54:33:52:16:fd:
89:97:e7:3d:e7:e1:60:19:38:07:3a:27:67:fc:9d:
b4:4d:b1:b7:bb:cc:68:7f:47:8b:03:17:c3:9f:f3:
89:92:15:93:fe:a4:56:05:78:3c:7a:e3:29:41:ec:
be:fd:fe:95:cc:76:6f:ff:d0:af:39:c9:97:d9:80:
f2:c2:29:91:14:16:cb:3d:45:1a:3b:6d:af:3f:f3:
ab:5d:b6:72:c7:6a:b0:3c:e5:7d:00:e9:1d:6b:dd:
9a:22:e1:dd:4f:55:9d:c2:6a:27:1f:87:05:73:e7:
4a:d2:86:d4:38:c5:79:af:f5:35:4e:5f:ec:8f:01:
14:26:87:a9:d6:93:a1:82:7e:00:93:23:bf:b3:8a:
ad:01:60:c0:c9:d7:e0:bf:68:65:07:41:ad:cd:cd:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:80:36:32:FF:91:8F:5D:8B:BA:C9:DF:80:17:EF:B9:78:9A:BC:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
X509v3 Authority Key Identifier:
keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:0a:48:b1:a0:b3:8f:ec:0b:b4:c0:90:4c:72:31:3e:47:b9:
59:b1:19:cd:16:56:59:57:6c:9c:26:8a:42:11:25:cc:fb:fd:
cc:5d:6a:e7:a1:12:01:ab:fa:22:1f:0c:bf:e9:03:65:0d:13:
6b:86:87:96:51:61:43:5f:72:a9:2a:87:e0:45:86:e5:7f:35:
ef:9a:26:06:2f:50:7d:33:4b:08:6e:bd:65:0e:ac:ad:c0:16:
69:ea:3a:ab:2a:56:77:ee:7e:22:51:84:ff:f2:67:8f:ab:fe:
81:4b:f5:d5:90:a2:ff:2d:14:6e:83:80:de:05:bd:97:d8:ee:
56:9c:df:35:c2:a8:e4:af:00:c9:12:b9:81:66:1f:8c:9d:0b:
a6:e6:77:ed:f1:00:b7:67:19:a6:84:05:57:9c:96:59:2c:91:
5c:9b:9a:e7:1e:d7:7a:98:b7:77:36:e3:99:a2:9b:be:40:d2:
03:b2:c1:a4:c7:21:60:da:bc:64:11:b6:95:df:fd:aa:be:bc:
ec:4f:00:8b:8f:b3:10:e0:23:1b:88:a4:8d:db:88:fa:de:dc:
b9:08:3c:33:c3:52:c2:bb:cf:f8:71:78:85:74:4d:3b:6b:46:
df:c6:e4:bc:a6:30:5c:68:30:e3:71:3e:22:c3:4a:97:21:22:
94:b3:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:03:07 2026 by rpki-client