This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa
File: 00af381d-53b3-3df0-bd99-b0069ee7ae99.roa (raw, json)
Hash identifier: mz8xWWq7dNOn6W2xYty7Fc/wjt83OORKbzce/t0RpLQ=
Subject key identifier: 1D:26:D7:DE:DD:1A:BD:35:CA:8A:BA:95:C6:5B:41:B1:B2:E3:76:C6
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C77F35CBC1B5909FA8C871B98
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa
Signing time: Fri 09 Jan 2026 14:26:11 +0000
ROA not before: Fri 09 Jan 2026 14:26:11 +0000
ROA not after: Thu 09 Apr 2026 13:26:11 +0000
asID: 51722
IP address blocks: 38.107.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:77:f3:5c:bc:1b:59:09:fa:8c:87:1b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 9 14:26:11 2026 GMT
Not After : Apr 9 13:26:11 2026 GMT
Subject: CN=1168156d-b084-442c-9c4f-778b2986c62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:f1:23:9a:15:91:6d:08:4a:86:b1:52:09:
5c:c2:c5:06:11:69:17:2c:12:84:dd:b6:38:3e:cd:
9c:4a:de:d6:93:6f:30:8d:13:00:aa:d9:c3:12:04:
d6:34:21:16:c2:68:51:fa:32:3e:9d:63:dd:c6:de:
47:75:51:1d:f7:7d:75:b9:e1:1d:ea:c3:54:fe:5d:
4b:ee:1c:b0:43:4e:fd:db:d4:c0:19:4e:79:a0:bd:
12:8d:6b:10:b1:3e:e5:a0:6a:d7:ab:b4:a9:b0:0e:
a3:ca:a2:55:ac:78:0b:17:8a:07:63:3c:e4:6e:11:
17:0e:3b:7b:2b:b4:38:f2:f8:6f:87:c6:7f:a2:9f:
16:8f:4b:5b:ac:1c:3a:a0:38:14:df:4d:f1:c8:a6:
6a:69:2d:65:4d:a5:56:d6:07:da:8a:05:3b:f4:a4:
69:a6:bc:2b:e7:02:03:1d:fb:fb:e4:8d:35:fc:65:
de:31:2f:39:2d:37:3d:64:18:d5:39:c0:56:88:4a:
94:b0:6b:af:b8:30:82:1f:db:f2:41:49:e4:b8:99:
df:94:23:44:f1:a3:d7:1a:11:41:30:30:57:10:ae:
44:63:62:cc:bd:fa:72:eb:95:e1:36:a9:36:e8:5d:
52:47:83:0c:7c:ef:1f:36:b3:b6:aa:96:00:3d:25:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:D7:DE:DD:1A:BD:35:CA:8A:BA:95:C6:5B:41:B1:B2:E3:76:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.107.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:6c:d6:6d:79:56:19:9b:37:86:36:8d:35:80:dd:5d:f5:23:
d3:c9:da:34:cf:0d:1a:45:74:48:2d:da:6e:ed:cd:33:ed:e6:
d3:e4:4d:da:96:ff:df:af:53:ab:c2:7e:6d:99:fa:89:00:3c:
f9:ee:c2:6c:e5:ec:b3:67:5e:59:89:0c:fa:be:6d:63:87:d3:
28:e4:99:4a:bc:67:46:cf:b8:e3:d5:d0:f4:4b:53:60:af:e1:
28:60:a4:c9:90:de:26:52:25:4e:3e:a6:0c:d7:f8:77:55:3f:
0c:da:81:f0:38:d4:92:f9:bd:7b:33:e2:4c:22:fd:2f:d0:0d:
a4:4b:75:c6:66:db:d2:36:d7:9d:58:6c:b9:98:d8:a5:e5:6d:
13:24:bc:24:c9:19:2b:d7:e1:10:fb:24:b4:0e:8a:9d:34:c0:
68:bc:55:95:80:84:78:1e:ed:6e:c8:85:3e:f3:37:0c:b4:b8:
36:f4:c4:38:94:5b:30:53:69:0e:28:3d:46:a1:bd:2f:e4:ba:
f9:8f:db:da:64:f1:4a:52:b5:44:d5:bf:c7:05:1c:27:31:de:
0b:54:7a:66:79:16:c4:f6:dc:7b:c5:56:c6:18:11:cb:02:2e:
75:40:c6:9c:96:e7:b1:2b:41:c1:47:a0:78:7f:29:85:0b:75:
37:ad:99:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx381y8G1kJ+oyHG5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDEwOTE0MjYxMVoXDTI2MDQwOTEzMjYxMVowLzEtMCsGA1UEAxMk
MTE2ODE1NmQtYjA4NC00NDJjLTljNGYtNzc4YjI5ODZjNjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrxI5oVkW0ISoaxUglcwsUGEWkXLBKE3bY4
Ps2cSt7Wk28wjRMAqtnDEgTWNCEWwmhR+jI+nWPdxt5HdVEd9311ueEd6sNU/l1L
7hywQ07929TAGU55oL0SjWsQsT7loGrXq7SpsA6jyqJVrHgLF4oHYzzkbhEXDjt7
K7Q48vhvh8Z/op8Wj0tbrBw6oDgU303xyKZqaS1lTaVW1gfaigU79KRpprwr5wID
Hfv75I01/GXeMS85LTc9ZBjVOcBWiEqUsGuvuDCCH9vyQUnkuJnflCNE8aPXGhFB
MDBXEK5EY2LMvfpy65XhNqk26F1SR4MMfO8fNrO2qpYAPSVobwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0m197dGr01yoq6lcZbQbGy43bGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDBhZjM4MWQtNTNiMy0z
ZGYwLWJkOTktYjAwNjllZTdhZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJmt4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRs1m15VhmbN4Y2jTWA3V31I9PJ2jTPDRpFdEgt2m7tzTPt5tPkTdqW
/9+vU6vCfm2Z+okAPPnuwmzl7LNnXlmJDPq+bWOH0yjkmUq8Z0bPuOPV0PRLU2Cv
4ShgpMmQ3iZSJU4+pgzX+HdVPwzagfA41JL5vXsz4kwi/S/QDaRLdcZm29I2151Y
bLmY2KXlbRMkvCTJGSvX4RD7JLQOip00wGi8VZWAhHge7W7IhT7zNwy0uDb0xDiU
WzBTaQ4oPUahvS/kuvmP29pk8UpStUTVv8cFHCcx3gtUemZ5FsT23HvFVsYYEcsC
LnVAxpyW57ErQcFHoHh/KYULdTetmeE=
-----END CERTIFICATE-----
Generated at Wed Jan 21 11:15:51 2026 by rpki-client