This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa File: 4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa (raw, json) Hash identifier: L3/TYr6DBiyvSKFx4H0sUisXYg80Z8au2WPAsjexa5o= Subject key identifier: C0:4E:F6:3D:89:CA:EE:D2:93:1A:9C:CC:CA:88:10:F0:17:36:24:D2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C72B9281C32EFE57985D70880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 32212 IP address blocks: 38.70.200.0/21 maxlen: 24 38.70.208.0/21 maxlen: 24 38.127.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:b9:28:1c:32:ef:e5:79:85:d7:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=7a4cd07b-a67b-4a36-abe3-b09417b1df16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:63:ec:e4:be:5a:2d:aa:cf:2c:2d:78:5c: 48:d2:9a:42:1b:44:67:31:38:35:8a:c9:03:f3:46: a8:f4:69:7b:a6:db:21:3e:c1:8a:45:4f:fe:1b:0f: e9:2d:eb:5d:52:9a:a1:a8:1d:95:3f:93:6b:f4:4e: 5b:b8:1c:de:d2:6b:cc:1d:81:d1:be:a0:eb:89:80: e4:d0:24:71:47:fc:97:31:e9:dd:4f:e2:03:07:fd: b3:6d:a9:82:67:04:f5:b4:bd:29:27:35:95:3d:f4: 42:41:d5:f1:87:a3:35:db:67:6c:09:da:00:03:8a: 4b:73:f9:30:85:22:5b:f7:e7:00:d0:3b:9d:25:ad: 02:75:96:c6:4f:d2:60:18:7b:2d:90:17:42:e3:0c: bb:3e:21:e6:20:65:d9:ef:95:9f:b2:2b:4b:64:03: 2a:46:48:d5:b1:eb:27:5e:9a:f7:c4:00:c7:73:e5: fd:02:7b:0e:78:1b:78:86:50:53:89:c8:a5:9c:84: 98:31:93:56:9c:fb:96:54:29:c5:b3:53:49:28:36: 00:6d:5d:3b:42:d6:18:38:e4:64:ce:a1:f8:11:50: 3c:c0:55:32:0f:77:77:18:a2:68:ed:de:a8:74:ab: 30:02:04:56:72:e0:df:42:97:49:ff:63:b1:09:ac: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:F6:3D:89:CA:EE:D2:93:1A:9C:CC:CA:88:10:F0:17:36:24:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.200.0-38.70.215.255 38.127.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:aa:c6:b6:af:81:24:6f:b5:b1:8c:d1:10:a1:18:5b:59:43: 16:84:cf:35:7b:15:d3:f9:b7:bc:98:d8:ad:f9:57:05:46:73: a6:84:85:9e:10:ef:10:72:3f:0c:9d:2d:dc:83:5e:1e:1c:fa: 0b:53:d6:cc:75:54:62:5a:d8:de:23:dd:c5:6f:3e:97:72:16: 00:2d:70:8e:7f:f9:4b:37:39:04:63:7e:39:c8:59:64:41:33: 5b:cf:ba:25:9d:7d:3f:68:3a:c1:2a:41:5c:02:b6:0f:8b:97: 2d:d3:2b:3d:23:9f:6f:e6:ee:4f:b8:ff:a6:36:a9:af:73:8e: 9c:9b:15:00:da:0f:b4:cc:71:89:4a:26:d0:77:c7:b0:a9:2f: ea:21:37:ea:e1:42:74:00:1d:bf:6e:35:86:b5:54:6e:8c:6c: 70:87:64:73:ee:41:dc:78:ba:21:24:50:4f:97:da:ba:8e:7a: 70:7e:51:58:33:e6:89:1c:dd:f0:0c:50:08:e4:16:88:60:aa: b0:08:7e:f3:f8:90:c4:b5:f5:8f:c3:8b:f1:6f:41:f8:50:e3: 21:69:54:97:61:d1:d6:87:1d:9f:81:dd:cc:51:34:4d:42:3a: b3:6e:aa:be:de:61:8d:60:68:59:13:c6:91:28:d1:c6:01:4f: a6:d6:7e:62 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWExyuSgcMu/leYXXCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk N2E0Y2QwN2ItYTY3Yi00YTM2LWFiZTMtYjA5NDE3YjFkZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dFj7OS+Wi2qzywteFxI0ppCG0RnMTg1iskD 80ao9Gl7ptshPsGKRU/+Gw/pLetdUpqhqB2VP5Nr9E5buBze0mvMHYHRvqDriYDk 0CRxR/yXMendT+IDB/2zbamCZwT1tL0pJzWVPfRCQdXxh6M122dsCdoAA4pLc/kw hSJb9+cA0DudJa0CdZbGT9JgGHstkBdC4wy7PiHmIGXZ75WfsitLZAMqRkjVsesn Xpr3xADHc+X9AnsOeBt4hlBTicilnISYMZNWnPuWVCnFs1NJKDYAbV07QtYYOORk zqH4EVA8wFUyD3d3GKJo7d6odKswAgRWcuDfQpdJ/2OxCayN9wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFMBO9j2Jyu7SkxqczMqIEPAXNiTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGE4MjA1YzctMDdiMi0z ZDkxLWE2ZDktZjQwYzU1OTJlMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAMmRsgD BAMmRtADBAMmf/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAqarGtq+BJG+1sYzREKEYW1lDFoTPNXsV0/m3 vJjYrflXBUZzpoSFnhDvEHI/DJ0t3INeHhz6C1PWzHVUYlrY3iPdxW8+l3IWAC1w jn/5Szc5BGN+OchZZEEzW8+6JZ19P2g6wSpBXAK2D4uXLdMrPSOfb+buT7j/pjap r3OOnJsVANoPtMxxiUom0HfHsKkv6iE36uFCdAAdv241hrVUboxscIdkc+5B3Hi6 ISRQT5fauo56cH5RWDPmiRzd8AxQCOQWiGCqsAh+8/iQxLX1j8OL8W9B+FDjIWlU l2HR1ocdn4HdzFE0TUI6s26qvt5hjWBoWRPGkSjRxgFPptZ+Yg== -----END CERTIFICATE-----Generated at Sun Jan 11 21:06:24 2026 by rpki-client