This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa
File: 4a3b0229-670e-3f6f-a899-75755de3e6aa.roa (raw, json)
Hash identifier: RzhQiiBKioxiT6u9a/hF71YwWMsRlNSoCFzqVvN0lvY=
Subject key identifier: 0A:3A:52:08:C1:C6:3D:66:82:F7:74:3C:2A:3E:EA:91:35:9E:C6:D4
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C62F68783937DC60930E0F3C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa
Signing time: Fri 02 Jan 2026 02:00:30 +0000
ROA not before: Fri 02 Jan 2026 02:00:30 +0000
ROA not after: Thu 02 Apr 2026 01:00:30 +0000
asID: 13335
IP address blocks: 38.147.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:62:f6:87:83:93:7d:c6:09:30:e0:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 2 02:00:30 2026 GMT
Not After : Apr 2 01:00:30 2026 GMT
Subject: CN=531c801a-d3dd-4b65-b201-51c276e0d81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:63:83:98:13:9e:b0:ad:ae:f0:26:2d:59:
93:f8:c1:5e:5e:60:8d:bf:3c:69:50:c7:4a:d2:74:
49:48:1b:d8:55:95:11:a0:21:94:cf:81:c4:97:de:
a3:62:6c:d2:63:7b:4f:6d:2b:e9:52:3b:1d:16:11:
99:b0:1a:0b:73:61:c0:2b:1e:bb:3c:a5:d0:87:ce:
bb:1b:a4:c6:d8:eb:b3:c4:c1:61:61:e4:96:38:5f:
92:44:d3:49:17:00:e2:27:f9:46:97:be:4c:4e:39:
bd:5d:0c:f6:13:a3:d2:b0:82:18:a1:7e:c1:c5:7a:
1e:2c:46:54:c4:93:10:09:fb:7a:5b:5a:50:67:54:
23:21:ee:46:da:e8:3c:aa:dd:38:24:61:13:f8:95:
a4:9c:c0:7e:03:37:c8:e5:2e:57:f5:9d:5a:91:70:
2b:af:6c:e1:f0:5f:f3:45:c7:96:7b:5e:6e:5a:b4:
a0:1e:ff:1f:ac:67:b3:01:e1:9e:8c:58:ec:85:5a:
e3:b1:fe:0b:9e:31:7d:7d:f6:e9:18:d0:2a:98:bf:
a6:5d:c0:6e:75:c6:82:aa:95:3f:06:b2:6c:47:05:
00:aa:8a:3f:81:9d:79:56:77:8f:39:0b:da:46:9a:
0d:8f:6d:9b:f2:d3:b7:e3:49:06:40:2d:26:64:9c:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:52:08:C1:C6:3D:66:82:F7:74:3C:2A:3E:EA:91:35:9E:C6:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.147.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a7:99:6b:be:f1:3a:54:6d:be:5e:62:31:ed:79:9c:59:bb:
e6:11:f3:cd:65:2a:13:d4:8a:03:aa:32:fa:8d:88:1d:63:f8:
f5:78:99:aa:6e:86:9a:0b:33:f6:65:32:b6:9a:bc:0b:76:36:
4d:ba:9c:36:af:73:61:89:5a:10:e2:72:92:99:0b:f9:f9:c0:
bc:e0:7e:2e:d4:f1:97:9c:eb:27:d3:ca:09:e2:80:39:a2:93:
41:69:c9:b8:f5:25:46:89:f3:05:1d:06:0a:81:31:b0:33:5b:
44:cb:e5:e5:b3:1c:af:0e:95:16:0c:21:fb:ad:fd:f2:8a:ad:
41:1e:8c:64:de:74:36:9b:3e:02:7e:8b:f8:7e:32:8b:c3:95:
7d:a8:16:32:1a:cc:59:7a:3e:7e:0c:c3:55:5f:c2:bf:20:7f:
43:70:44:b0:6b:cc:a2:cd:af:8b:e2:b2:ff:93:58:3d:94:e3:
99:ff:53:53:f6:33:cf:ec:20:4d:b8:de:7c:fc:4b:28:59:fd:
4c:a3:16:c1:d9:bd:8c:db:a9:ad:74:81:f7:29:70:d0:7b:ce:
6c:63:d8:d5:76:cc:d6:e8:6c:10:3b:b6:1f:59:c9:f1:1e:19:
cc:ae:34:b0:96:e9:aa:7e:a7:a4:18:f4:e2:74:01:d6:42:b4:
14:11:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:06:07 2026 by rpki-client