This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa File: 1271aa39-6b6a-39a9-9818-a7a497734b16.roa (raw, json) Hash identifier: IGrQ/lLwXUIOS+XLwmLCe/XSrxbUkZS8AHVEg/c5Akg= Subject key identifier: E8:71:07:3F:2E:48:37:4C:F1:7C:54:CD:BB:47:54:36:53:21:DB:6E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C3EABD8E62E1D41AB4E0A0F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 0 IP address blocks: 38.95.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:d8:e6:2e:1d:41:ab:4e:0a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=fcd1b92a-0350-4ea0-a6bc-ca17f8816735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:8c:84:7e:be:ad:0a:6e:c6:f2:44:d2:27: 78:b3:91:3d:29:23:17:29:73:1a:c4:da:13:0d:d7: a2:7b:30:f3:3d:89:02:a6:a9:5b:e0:e6:54:3c:8b: 45:a1:be:9e:49:3d:96:e8:6e:79:49:67:9a:a4:95: e6:e5:8f:47:04:43:4b:f6:24:0c:78:9f:32:8b:fa: 06:8b:b9:93:52:50:5a:07:b7:d4:d4:d1:75:cd:ac: 0f:96:fe:51:37:64:d4:99:1b:ea:5c:19:8f:b2:6f: 39:d3:ca:8e:06:60:75:0c:e7:93:6f:85:b9:72:3b: 40:0d:5b:95:b8:08:de:a1:30:0d:16:c7:86:b5:39: a7:3e:89:b9:c5:b7:1f:5d:b5:9f:52:d7:a1:c6:5b: 85:92:90:5c:a9:bd:61:c0:85:6f:2c:4e:74:0e:83: af:5e:ba:3d:d0:26:5a:b6:b6:1e:b6:1b:bc:cc:91: a7:6a:31:67:90:4b:1f:dd:4a:cd:b5:d6:09:36:3f: a4:3b:c1:42:b3:86:d7:c2:42:c4:d2:3a:c2:32:d6: ba:bc:7c:19:eb:f7:96:23:ba:1a:0f:e9:26:5d:74: 19:57:e2:57:bf:bf:ca:59:c6:da:03:e5:0f:72:70: 83:8a:28:30:71:db:1e:69:ed:12:e7:6b:da:67:25: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:71:07:3F:2E:48:37:4C:F1:7C:54:CD:BB:47:54:36:53:21:DB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.95.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f5:de:67:2c:4c:9d:c3:aa:b3:4a:93:f9:e7:51:10:e5:6a: e4:9f:50:b9:72:be:29:37:0f:7e:4f:6d:0f:bf:4d:b3:e9:08: c0:e1:d8:75:58:7b:87:6d:7f:18:77:7b:64:c6:e0:2a:71:ca: 94:70:a6:01:b7:3b:9d:b2:07:d7:5f:2d:01:db:b1:d8:24:87: 20:68:7a:ee:f7:91:69:f6:d9:ef:c6:a4:89:05:43:fc:e3:e0: f5:42:39:15:60:80:5e:8f:ce:7d:50:37:4f:02:5b:20:30:f9: d8:78:d3:ca:cf:6c:00:b7:63:27:ea:be:73:24:c2:a7:e2:bd: 5a:f4:bd:21:e7:5e:ad:eb:0d:9d:4e:94:42:5b:00:ea:bd:5a: a6:66:50:d1:6b:c3:33:83:2c:13:af:68:3a:1a:8c:ec:47:52: 8a:e7:c8:00:ea:ce:66:38:0a:f9:7f:79:b8:4f:9b:cc:5e:ca: fc:dd:64:f4:99:33:50:54:a9:07:23:b0:7e:61:e9:93:84:f4: ca:e3:f2:41:d9:6a:41:23:4b:d4:e7:c4:d9:b2:08:9c:f9:a6: eb:c6:b6:1f:89:2a:90:92:ba:43:6a:bd:ed:42:e7:ff:99:23: 98:16:e1:5c:18:a5:a1:82:88:f0:cb:4f:37:1b:2b:a7:d5:7a: 54:07:0a:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q9jmLh1Bq04KDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk ZmNkMWI5MmEtMDM1MC00ZWEwLWE2YmMtY2ExN2Y4ODE2NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9eMhH6+rQpuxvJE0id4s5E9KSMXKXMaxNoT DdeiezDzPYkCpqlb4OZUPItFob6eST2W6G55SWeapJXm5Y9HBENL9iQMeJ8yi/oG i7mTUlBaB7fU1NF1zawPlv5RN2TUmRvqXBmPsm8508qOBmB1DOeTb4W5cjtADVuV uAjeoTANFseGtTmnPom5xbcfXbWfUtehxluFkpBcqb1hwIVvLE50DoOvXro90CZa trYethu8zJGnajFnkEsf3UrNtdYJNj+kO8FCs4bXwkLE0jrCMta6vHwZ6/eWI7oa D+kmXXQZV+JXv7/KWcbaA+UPcnCDiigwcdseae0S52vaZyWulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhxBz8uSDdM8XxUzbtHVDZTIdtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTI3MWFhMzktNmI2YS0z OWE5LTk4MTgtYTdhNDk3NzM0YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD713mcsTJ3DqrNKk/nnURDlauSfULlyvik3D35PbQ+/TbPpCMDh2HVY e4dtfxh3e2TG4CpxypRwpgG3O52yB9dfLQHbsdgkhyBoeu73kWn22e/GpIkFQ/zj 4PVCORVggF6Pzn1QN08CWyAw+dh408rPbAC3YyfqvnMkwqfivVr0vSHnXq3rDZ1O lEJbAOq9WqZmUNFrwzODLBOvaDoajOxHUornyADqzmY4Cvl/ebhPm8xeyvzdZPSZ M1BUqQcjsH5h6ZOE9Mrj8kHZakEjS9TnxNmyCJz5puvGth+JKpCSukNqve1C5/+Z I5gW4VwYpaGCiPDLTzcbK6fVelQHCuY= -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:58 2025 by rpki-client