This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
File: b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa (raw, json)
Hash identifier: Z+67Rk9RpK1QiHIfwBa6AzxyEiIsv5Wd92kK6LxT/Rg=
Subject key identifier: AE:35:FE:D3:9F:97:A1:82:55:FE:96:DC:72:30:EE:DC:00:4C:76:36
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C839621E8C02620EB90B5AD80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
Signing time: Thu 08 Jan 2026 17:06:41 +0000
ROA not before: Thu 08 Jan 2026 17:06:41 +0000
ROA not after: Wed 08 Apr 2026 16:06:41 +0000
asID: 6461
IP address blocks: 38.107.152.0/22 maxlen: 24
38.148.144.0/20 maxlen: 24
38.240.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:83:96:21:e8:c0:26:20:eb:90:b5:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 8 17:06:41 2026 GMT
Not After : Apr 8 16:06:41 2026 GMT
Subject: CN=cafc1293-791d-4a0d-aa3c-1fad7308b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:48:f9:9f:b6:98:27:ef:b3:5b:c5:63:dd:
f8:0d:d2:23:d8:ed:ea:3a:1d:49:cf:6c:01:dd:8c:
a3:6c:50:67:63:45:f8:de:36:49:ab:86:2e:2b:24:
5c:38:e7:85:09:c4:a2:d0:e1:ca:1e:4d:e1:bd:ca:
2a:7f:ce:3b:df:e7:bd:e4:09:85:fa:d7:b7:6e:3c:
81:4a:49:81:8f:ae:fe:a8:72:fd:fa:20:96:ba:29:
fe:09:c7:f8:62:74:27:83:93:b6:e4:44:0e:ca:85:
0d:56:91:6c:75:98:b1:de:82:f7:5e:fb:39:ea:1c:
bc:17:72:0a:71:60:15:81:8a:0f:9b:60:fd:56:dc:
f1:7b:a9:b1:ea:4e:99:6d:c1:6d:a2:b4:47:c8:8b:
08:c0:ec:fe:2c:1d:d9:2e:39:6f:df:03:01:65:20:
9b:32:1a:c3:94:9a:64:1b:1c:2c:f7:8f:45:f2:8a:
c1:fa:10:36:6f:f0:53:77:59:88:73:a0:2d:dc:9b:
1f:f3:a2:40:cf:21:b6:8f:49:8f:4a:4f:55:74:82:
45:39:6f:3c:54:70:e2:5b:c8:80:d1:e8:c9:c8:9e:
52:d5:fa:90:2e:36:1d:87:9f:09:ac:e0:d5:65:44:
3b:cb:3a:38:6a:1b:b4:80:f6:0c:23:12:fb:37:7d:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:FE:D3:9F:97:A1:82:55:FE:96:DC:72:30:EE:DC:00:4C:76:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.107.152.0/22
38.148.144.0/20
38.240.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:2d:e8:1d:b6:eb:5c:e4:c9:01:1c:47:c0:fa:6c:d7:88:77:
87:56:34:fc:d4:58:3a:af:5b:b2:c9:bc:af:b8:2b:10:ef:9f:
03:67:b8:45:b5:ad:bc:45:20:ac:43:eb:29:48:67:6e:14:a1:
61:28:cf:2e:ca:e5:2b:70:3e:cf:d7:8a:a0:31:e3:0e:e1:5b:
ef:23:5d:69:b1:03:24:40:08:d2:95:0b:c5:5e:9e:52:bc:b5:
bc:77:04:75:d8:a9:4f:dd:2b:c2:3e:b1:1d:68:64:a9:e9:d0:
1c:5e:ea:6f:a9:ee:a8:0a:f9:c9:f4:e6:d7:be:eb:32:fa:86:
5b:4a:fa:d8:b2:88:c7:89:1d:53:d4:7f:13:a1:a8:83:ee:d4:
d9:0e:36:cf:89:9b:47:ea:f4:09:a6:9c:53:cc:de:3b:f8:dc:
41:64:b9:0e:26:d7:9d:4f:ca:9a:72:97:00:25:20:20:20:05:
a1:c4:c3:f0:0d:b1:d5:12:ce:87:48:16:44:2b:45:ab:26:9c:
4c:b5:6f:e7:aa:91:36:7c:7b:08:37:08:b2:25:bf:23:9e:17:
75:ed:01:0a:ee:1f:4b:e8:6e:0e:2f:dc:1e:58:e3:e3:4e:c4:
27:15:10:fb:22:3e:da:85:dd:6f:18:61:b2:c2:da:25:60:df:
0b:02:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:05 2026 by rpki-client