This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa File: 3689bc33-1247-3591-afb5-2336487c7f3b.roa (raw, json) Hash identifier: BIHSJ8I9oJaZGwGBlDOzyynm2RAqGsr/eQ2mefFjnEo= Subject key identifier: 77:B0:3D:0F:CD:C3:AE:40:B9:64:1B:10:FD:C2:41:0D:E8:7C:80:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CAA53D7877CBD7A662C686FE0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa Signing time: Tue 27 Jan 2026 15:30:59 +0000 ROA not before: Tue 27 Jan 2026 15:30:59 +0000 ROA not after: Mon 27 Apr 2026 14:30:59 +0000 asID: 136841 IP address blocks: 38.86.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:53:d7:87:7c:bd:7a:66:2c:68:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 27 15:30:59 2026 GMT Not After : Apr 27 14:30:59 2026 GMT Subject: CN=8fc2537b-e0b0-43ee-ad48-751bfbffa3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:50:fc:0c:b1:48:fb:35:05:e8:0d:95:0e: 34:e0:0e:14:ee:43:91:cd:ce:e3:7c:e7:1a:d3:cb: c0:ab:01:61:8d:f5:7e:4b:c0:b0:51:40:74:8d:85: dc:a5:44:74:19:03:f8:27:ec:5c:16:a3:7d:77:43: 24:a1:0f:19:dc:61:b5:cc:e2:87:b5:56:86:61:5a: 60:9a:57:80:3f:35:82:32:c9:82:57:12:c0:6d:01: 8a:d6:f6:61:f2:de:af:86:11:0e:08:f5:aa:fb:d6: 21:9b:80:57:d7:6a:77:72:56:64:0f:0a:9d:61:9b: 73:11:ec:50:be:c9:b7:61:98:2d:1b:98:b7:22:ef: 4f:a5:c6:fa:90:a1:94:d8:11:b6:45:8f:76:8a:f2: 1f:8e:5f:cf:06:c3:b8:4f:0c:d1:5a:f8:dd:7e:5f: f7:2d:96:4b:25:cc:6c:5f:93:14:85:74:54:c6:e4: 0e:78:4d:b1:48:10:49:30:22:2f:16:79:f7:68:d4: 6f:3f:59:e9:eb:e3:2f:52:16:ce:cf:ba:b6:e3:e2: c9:ba:94:10:62:08:52:1c:a2:80:1c:ef:cb:b5:ee: ac:c1:82:23:e3:cc:48:35:a0:ce:d4:e7:23:19:6d: 5e:8e:44:a3:67:34:4d:9e:23:c2:0a:cb:4d:7b:b0: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:3D:0F:CD:C3:AE:40:B9:64:1B:10:FD:C2:41:0D:E8:7C:80:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:53:75:62:8e:3d:1c:52:83:15:42:56:d5:32:92:c2:a5:8b: e4:56:78:9a:54:4d:a4:35:1e:eb:8e:6d:f8:10:6e:ab:de:d8: 28:1c:a9:1f:1c:91:91:c5:67:9b:bb:5e:03:13:8f:57:82:4f: 7e:28:98:f7:0f:28:80:4d:7c:aa:e2:0a:36:4d:f3:2c:a5:42: f9:6b:0a:9f:bf:a2:b5:7b:31:af:b6:10:e5:44:d1:7f:af:f8: 11:9c:d6:da:78:2f:e3:81:ed:07:cb:4b:ae:d8:38:8e:a1:1b: 03:3b:b2:0a:50:d8:28:ed:d9:9c:23:3a:1e:c3:ee:bb:e9:5c: d7:d6:43:d0:66:b9:b4:8a:a4:92:99:01:18:50:1d:e3:1c:64: eb:e5:f3:0c:ac:84:18:bf:ec:39:16:0b:26:92:bf:34:f5:45: 75:ef:21:a6:61:7a:d4:48:a8:32:e7:e3:cb:70:b0:ce:33:98: e6:69:1f:5e:00:1c:fc:2d:61:95:8d:c9:90:b1:a4:85:be:a0: aa:52:96:ae:8d:3a:8b:7d:78:1c:d3:b5:3b:ae:e4:6c:85:c9: 34:15:29:e1:83:79:40:8d:7c:9f:a7:05:8e:4e:83:6c:e5:0c: c3:36:39:04:a7:99:ac:db:4d:34:15:21:0f:ce:5b:81:a0:d9: 47:6a:d2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqU9eHfL16Zixob+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEyNzE1MzA1OVoXDTI2MDQyNzE0MzA1OVowLzEtMCsGA1UEAxMk OGZjMjUzN2ItZTBiMC00M2VlLWFkNDgtNzUxYmZiZmZhM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiNQ/AyxSPs1BegNlQ404A4U7kORzc7jfOca 08vAqwFhjfV+S8CwUUB0jYXcpUR0GQP4J+xcFqN9d0MkoQ8Z3GG1zOKHtVaGYVpg mleAPzWCMsmCVxLAbQGK1vZh8t6vhhEOCPWq+9Yhm4BX12p3clZkDwqdYZtzEexQ vsm3YZgtG5i3Iu9Ppcb6kKGU2BG2RY92ivIfjl/PBsO4TwzRWvjdfl/3LZZLJcxs X5MUhXRUxuQOeE2xSBBJMCIvFnn3aNRvP1np6+MvUhbOz7q24+LJupQQYghSHKKA HO/Lte6swYIj48xINaDO1OcjGW1ejkSjZzRNniPCCstNe7DwgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHewPQ/Nw65AuWQbEP3CQQ3ofIBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzY4OWJjMzMtMTI0Ny0z NTkxLWFmYjUtMjMzNjQ4N2M3ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBTdWKOPRxSgxVCVtUyksKli+RWeJpUTaQ1HuuObfgQbqve2CgcqR8c kZHFZ5u7XgMTj1eCT34omPcPKIBNfKriCjZN8yylQvlrCp+/orV7Ma+2EOVE0X+v +BGc1tp4L+OB7QfLS67YOI6hGwM7sgpQ2Cjt2ZwjOh7D7rvpXNfWQ9BmubSKpJKZ ARhQHeMcZOvl8wyshBi/7DkWCyaSvzT1RXXvIaZhetRIqDLn48twsM4zmOZpH14A HPwtYZWNyZCxpIW+oKpSlq6NOot9eBzTtTuu5GyFyTQVKeGDeUCNfJ+nBY5Og2zl DMM2OQSnmazbTTQVIQ/OW4Gg2Udq0kQ= -----END CERTIFICATE-----Generated at Wed Jan 28 14:08:14 2026 by rpki-client