This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ee3d8f1-8cce-3b2d-b4d6-36321de8ab0d.roa File: 3ee3d8f1-8cce-3b2d-b4d6-36321de8ab0d.roa (raw, json) Hash identifier: gfOu+bpUIzpEMqp8I3WWvG6WMbUs61vyBlCGx5d2iTI= Subject key identifier: 31:5B:2A:29:0B:19:18:E8:B3:08:DD:B2:77:2A:7E:06:B5:07:2C:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C6B569051CCB87D960B9BF980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ee3d8f1-8cce-3b2d-b4d6-36321de8ab0d.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 401729 IP address blocks: 38.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:90:51:cc:b8:7d:96:0b:9b:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=8dac1bd1-7eab-4afb-a21a-4d19b03f677e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:eb:7d:20:c4:35:5f:9c:e0:54:0e:b7:ce: 87:da:22:0e:e0:bd:7c:b8:17:ac:d3:b2:60:fc:9c: 99:05:59:74:7d:89:13:78:a1:de:cb:98:ca:12:83: 93:00:c6:95:de:16:15:94:a2:58:99:3a:0b:87:16: 53:0d:c5:f8:31:f1:96:87:6f:11:11:f7:08:f8:47: 5f:25:51:74:40:a1:5f:d2:91:35:9b:2e:0c:a8:0f: ab:38:3c:fe:94:ae:8e:e8:67:3d:33:f7:11:f5:4c: 8e:4d:48:59:07:52:82:f0:de:f0:d5:c7:b9:79:7c: 0d:8f:96:7b:23:fb:da:22:1f:66:01:b2:5a:bf:86: 40:20:93:e3:af:8b:a6:28:ab:2f:2d:d1:f7:ee:46: a4:25:39:18:8c:65:6a:61:46:f9:b2:34:10:d9:cb: ef:9f:c9:91:bf:c7:11:f4:79:83:ee:11:a6:b8:a1: da:c0:4d:0c:78:4b:d9:49:fe:43:fc:5a:79:a9:9f: 7a:73:fb:42:64:dd:c3:78:07:5b:c6:e4:65:4d:36: 77:a3:24:e4:a2:8a:86:0c:e2:8c:d1:64:71:a6:5c: 16:f1:43:8f:57:b6:a9:56:c6:b9:24:b5:28:02:b5: ee:85:44:af:26:5e:cd:c7:2b:f6:45:bd:3e:42:8d: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:2A:29:0B:19:18:E8:B3:08:DD:B2:77:2A:7E:06:B5:07:2C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ee3d8f1-8cce-3b2d-b4d6-36321de8ab0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.109.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ce:68:61:f2:ca:ca:56:2e:99:d0:04:b4:d2:5e:bd:75:b7: d9:81:ab:58:b1:6a:37:5f:23:66:93:b2:c4:22:f3:8b:df:94: 27:c3:da:2f:81:44:2a:a7:b6:46:d7:50:6c:bb:58:0f:4f:75: ac:e4:0f:1d:9e:de:1c:e3:4f:06:34:6f:af:8a:6c:0e:dd:9f: c4:f3:90:eb:3c:1d:dc:44:3a:53:00:81:c0:7e:9f:0f:06:35: ee:22:6b:69:d2:03:de:0a:43:bd:98:f4:d8:44:1d:19:44:81: 9f:0a:09:fe:94:f7:bf:c9:d9:f5:34:11:63:4b:75:d3:91:68: 17:69:60:e2:47:a8:f2:cc:7f:d0:74:47:40:6b:90:11:cd:de: a1:09:bf:06:90:a9:54:7f:fc:4c:c1:e9:29:d8:17:c2:03:86: 43:e9:ba:e8:82:ac:a5:97:42:fe:ef:b9:e3:d7:7a:10:ab:b5: a4:92:6e:6f:57:42:db:f3:92:98:46:1c:d4:b1:5d:93:22:0c: 9e:79:de:df:15:2c:54:0f:78:af:67:b3:9c:7f:a8:0f:a2:29: f4:d1:4f:1d:a2:20:bd:be:f1:53:dc:e7:fe:b7:7a:db:9e:cc: be:72:fa:9d:5e:8f:bd:65:8e:0c:dd:58:cc:55:28:0a:bb:6f: 59:c5:1f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVpBRzLh9lgub+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk OGRhYzFiZDEtN2VhYi00YWZiLWEyMWEtNGQxOWIwM2Y2NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXrrfSDENV+c4FQOt86H2iIO4L18uBes07Jg /JyZBVl0fYkTeKHey5jKEoOTAMaV3hYVlKJYmToLhxZTDcX4MfGWh28REfcI+Edf JVF0QKFf0pE1my4MqA+rODz+lK6O6Gc9M/cR9UyOTUhZB1KC8N7w1ce5eXwNj5Z7 I/vaIh9mAbJav4ZAIJPjr4umKKsvLdH37kakJTkYjGVqYUb5sjQQ2cvvn8mRv8cR 9HmD7hGmuKHawE0MeEvZSf5D/Fp5qZ96c/tCZN3DeAdbxuRlTTZ3oyTkooqGDOKM 0WRxplwW8UOPV7apVsa5JLUoArXuhUSvJl7Nxyv2Rb0+Qo0clwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFbKikLGRjoswjdsncqfga1ByyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2VlM2Q4ZjEtOGNjZS0z YjJkLWI0ZDYtMzYzMjFkZThhYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm1jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDOaGHyyspWLpnQBLTSXr11t9mBq1ixajdfI2aTssQi84vflCfD2i+B RCqntkbXUGy7WA9PdazkDx2e3hzjTwY0b6+KbA7dn8TzkOs8HdxEOlMAgcB+nw8G Ne4ia2nSA94KQ72Y9NhEHRlEgZ8KCf6U97/J2fU0EWNLddORaBdpYOJHqPLMf9B0 R0BrkBHN3qEJvwaQqVR//EzB6SnYF8IDhkPpuuiCrKWXQv7vuePXehCrtaSSbm9X QtvzkphGHNSxXZMiDJ553t8VLFQPeK9ns5x/qA+iKfTRTx2iIL2+8VPc5/63etue zL5y+p1ej71ljgzdWMxVKAq7b1nFH7w= -----END CERTIFICATE-----Generated at Sun Jan 11 07:49:41 2026 by rpki-client