This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd968af1-4313-364a-99b6-ee6489a5c74d.roa
File: fd968af1-4313-364a-99b6-ee6489a5c74d.roa (raw, json)
Hash identifier: YcLWsTFftEwSsmKogscTteJE0LPZu/1s7YBX6JLYFd0=
Subject key identifier: 56:14:EE:C4:34:A2:F8:50:31:1D:B4:2F:67:11:3E:DC:77:3A:D9:A9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C75EE9147BD3F68E909420880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd968af1-4313-364a-99b6-ee6489a5c74d.roa
Signing time: Thu 08 Jan 2026 21:04:54 +0000
ROA not before: Thu 08 Jan 2026 21:04:54 +0000
ROA not after: Wed 08 Apr 2026 20:04:54 +0000
asID: 43019
IP address blocks: 38.133.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:ee:91:47:bd:3f:68:e9:09:42:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 8 21:04:54 2026 GMT
Not After : Apr 8 20:04:54 2026 GMT
Subject: CN=11c9f9a4-f601-4d42-b75a-73774c5668c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:9f:4d:47:05:ba:79:ef:bb:77:4d:16:bc:
0e:c7:14:84:8c:5a:5a:64:f3:e5:5d:cc:0d:4e:1e:
dc:f8:4b:ef:b1:0a:97:9e:b3:5f:a4:4c:ca:81:16:
95:a7:eb:ee:aa:a9:03:3d:8d:1c:b6:cd:bb:77:9e:
45:95:24:27:2f:de:4d:a9:94:86:cc:d5:29:88:f2:
08:21:1d:c9:50:86:b7:66:27:82:ef:66:2b:c3:6d:
a6:d8:ae:85:14:bd:40:52:b5:b9:5f:16:b9:a1:43:
e0:47:6c:eb:59:1c:4c:4d:e2:89:68:ab:6a:54:f3:
b0:b4:a6:c8:f5:e4:69:06:ea:43:6b:f9:db:9f:38:
50:39:b1:12:fc:46:b8:c2:97:a5:74:32:e8:5f:8f:
e1:40:5e:19:db:1d:ad:a3:fb:d1:04:da:fe:62:58:
8f:84:21:b4:8e:42:94:80:cf:dc:02:32:92:ee:39:
ef:9e:ef:2d:67:46:06:1e:f6:cc:4c:f8:b5:f9:ee:
71:d7:fc:47:5d:74:64:a8:0d:9a:47:3f:8a:71:f9:
4c:cc:b2:42:fb:db:16:5a:8e:51:5b:7e:30:fe:64:
5f:98:06:95:93:f0:c2:21:8e:6b:32:aa:72:9b:c3:
ba:35:da:10:95:cd:7f:df:45:2a:89:07:a1:05:36:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:EE:C4:34:A2:F8:50:31:1D:B4:2F:67:11:3E:DC:77:3A:D9:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd968af1-4313-364a-99b6-ee6489a5c74d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.133.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ed:18:67:56:96:3b:a8:a5:f9:e6:1b:4d:75:16:0b:83:05:
fb:fa:98:e6:a2:01:8c:3c:a3:66:4d:dc:86:ef:17:b5:35:55:
b9:16:e3:fe:28:72:35:e0:6c:47:20:87:84:34:62:9d:90:e5:
da:ce:16:83:d2:0e:ee:e4:53:73:02:e9:65:47:fc:da:1d:c6:
e7:78:77:62:ce:6e:c9:8c:63:a4:7e:9b:b0:20:80:68:d3:b7:
c8:2b:1d:44:00:9f:bf:b8:86:13:40:5a:9c:62:50:5b:fd:9b:
ef:bd:d3:f1:ee:10:74:0c:78:f4:03:c2:4f:b0:5b:b2:83:1a:
bc:8a:95:76:a7:90:fe:c1:58:c0:3e:4f:a9:a6:df:74:70:d6:
d7:f4:ee:c0:5a:2e:e1:d9:29:ca:28:36:f5:8f:65:ad:5b:78:
93:e7:b7:81:eb:95:b5:44:57:cd:77:ef:28:64:67:3d:3e:45:
61:72:72:dc:e1:ec:60:75:28:75:fc:0a:15:82:54:e4:db:fa:
50:7b:3c:13:16:21:5a:2b:07:a8:6a:0e:c3:37:26:d4:e9:7d:
4a:4d:3e:36:ae:a7:c3:a6:50:a2:41:a9:76:bc:a8:0f:77:bc:
28:94:3d:cc:5b:04:36:eb:e0:47:23:32:cd:d2:ce:c0:c5:36:
b3:c7:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:35:13 2026 by rpki-client