This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20bd0944-9367-3ef5-a11b-cb8fc37e8560.roa
File: 20bd0944-9367-3ef5-a11b-cb8fc37e8560.roa (raw, json)
Hash identifier: MVd2cDGGYYL7nBMOhUlczTUBNgPHSzj7MD8XRFznUGA=
Subject key identifier: E4:97:EE:C9:AE:DF:9E:10:63:8E:C8:DB:3B:97:BD:45:7F:C6:C0:68
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C21A6044BF4BD45CF6C52A2E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20bd0944-9367-3ef5-a11b-cb8fc37e8560.roa
Signing time: Tue 09 Dec 2025 16:30:49 +0000
ROA not before: Tue 09 Dec 2025 16:30:49 +0000
ROA not after: Mon 09 Mar 2026 15:30:49 +0000
asID: 154346
IP address blocks: 38.22.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:a6:04:4b:f4:bd:45:cf:6c:52:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 9 16:30:49 2025 GMT
Not After : Mar 9 15:30:49 2026 GMT
Subject: CN=63ca4480-94e1-4336-890b-b3a1e0aa1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:7a:5e:a7:b6:33:32:36:92:51:2f:00:5b:
55:3c:cc:96:76:f7:0f:3b:4b:56:e8:f5:87:60:46:
7f:ad:a1:2c:58:f1:f0:d3:b0:47:38:95:95:c1:a3:
99:67:55:27:f3:ca:08:b1:33:68:e1:93:75:08:65:
39:0a:ac:8e:47:37:f0:5b:1f:bc:75:d5:3a:4e:6e:
07:3a:aa:e1:72:8d:64:97:bb:03:2d:43:a5:87:bc:
ec:b9:bf:7c:82:02:2e:00:55:b6:6e:f1:5b:cd:76:
34:4e:fb:68:5c:44:34:c0:cd:da:87:2a:63:6d:3a:
c9:d0:c7:82:4a:1d:59:17:10:57:82:73:c0:4c:2b:
07:9c:69:59:3c:64:20:fc:59:1b:8f:a5:e0:31:ef:
d7:75:08:93:cf:c2:78:5d:1d:fa:b6:b2:8f:f2:5d:
5e:2a:83:f1:d1:fe:fc:9d:51:62:9c:b3:fe:5a:65:
ff:bf:08:e4:7b:c0:56:93:bf:ef:c3:94:6a:32:03:
a3:cd:f6:b3:90:4e:64:18:ca:d0:34:1f:64:fa:45:
14:0f:a8:d9:61:fc:05:09:3e:af:91:1f:61:68:e8:
3e:ee:fd:10:f1:8d:fc:7d:7f:88:68:c0:32:03:46:
e6:e6:ef:e2:af:e7:54:94:36:d6:0a:ac:a3:ab:fb:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:EE:C9:AE:DF:9E:10:63:8E:C8:DB:3B:97:BD:45:7F:C6:C0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20bd0944-9367-3ef5-a11b-cb8fc37e8560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.22.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:60:ab:bf:94:d2:4c:d6:1d:5e:76:f8:42:54:a5:57:fc:bf:
63:b4:21:6c:2f:5e:97:a0:4e:49:2c:05:40:c3:7e:19:a4:7a:
bb:b3:21:ab:58:83:02:a7:e6:cc:1e:d1:82:1b:e6:84:a1:10:
ce:44:23:f9:bc:97:8e:27:67:04:dc:d1:21:af:2f:30:e1:4e:
da:09:ac:56:0d:a6:9a:9a:bf:d0:56:30:f4:71:14:21:3a:8d:
ba:91:a4:7d:5e:16:9f:11:14:83:11:e0:44:02:ff:47:9d:d9:
86:ee:27:38:74:31:a8:58:66:de:cc:c7:a1:88:8e:c9:c4:d3:
50:37:81:f1:03:ac:4e:40:b9:cf:a6:94:dc:93:53:b3:13:3c:
17:fc:08:f5:bc:e1:2e:f3:00:a8:f7:55:69:50:a4:98:dd:99:
72:20:1e:1b:b8:60:7a:01:a1:0a:f9:85:1a:50:f8:52:e5:9c:
46:3a:e4:58:3b:2a:ad:00:07:93:90:5a:cd:98:56:d3:61:98:
02:fe:48:ae:c9:ea:e8:72:82:da:3a:2c:cf:c0:dc:41:5c:20:
d4:90:b3:31:8d:bd:08:1c:ce:73:47:fb:67:67:15:fc:da:52:
87:5a:2c:a1:a8:0e:db:36:99:3c:7f:87:25:11:7d:2c:87:44:
ca:ff:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:03:04 2025 by rpki-client