This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa
File: 7ca7702c-391d-3c4e-82cd-c716810f6752.roa (raw, json)
Hash identifier: QAxW4uTRe7bne1wvcPFOVvOwfllSUhrpPvmnn+GjlUU=
Subject key identifier: 5F:09:93:DD:03:8A:10:98:04:C1:33:F0:BB:DF:C6:85:6C:4F:F9:F7
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C2DEBB658ED9488BA35CE7FC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa
Signing time: Sun 14 Dec 2025 02:00:31 +0000
ROA not before: Sun 14 Dec 2025 02:00:31 +0000
ROA not after: Sat 14 Mar 2026 01:00:31 +0000
asID: 270075
IP address blocks: 38.19.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2d:eb:b6:58:ed:94:88:ba:35:ce:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 14 02:00:31 2025 GMT
Not After : Mar 14 01:00:31 2026 GMT
Subject: CN=0cb9f2f8-ec07-438f-afb2-0a77c2d873cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:b9:58:9e:ae:bd:7d:c6:1e:8e:4f:ad:c8:
f7:14:8a:de:c4:51:c8:40:43:5c:13:34:e9:48:25:
e3:41:32:7f:ff:c1:99:28:e9:52:cc:2b:67:6d:8a:
9d:fe:a6:84:6d:eb:4f:40:82:fd:3a:ea:f7:4d:d7:
72:e9:2b:1a:fc:5c:5f:f4:cf:5e:f9:eb:6e:2b:5e:
6b:21:29:c4:d7:72:5f:8d:d2:e5:5e:08:78:48:08:
21:9d:4c:2f:a8:a5:02:15:e4:dd:6d:6f:d1:7f:ea:
94:51:02:ee:1b:f4:56:d0:a3:24:25:0f:46:12:8f:
5a:80:88:a5:5f:7b:fd:5b:b1:89:f7:f7:2c:40:93:
a7:07:4b:7f:28:39:78:79:d3:6d:45:d2:06:ad:1f:
79:34:52:ad:4e:03:a7:db:1a:04:86:c7:af:cb:9c:
89:19:46:4c:61:65:e6:ca:7e:16:69:1f:49:dc:89:
99:b8:1c:ca:35:81:9e:f7:55:d3:b4:23:ed:7c:86:
c3:15:a7:95:f3:21:55:3c:00:8e:7f:6a:6b:1d:4e:
40:ed:01:76:98:1f:81:40:03:9d:62:cb:8f:43:1c:
74:41:4b:37:cd:07:91:ff:91:74:e8:b6:3e:f3:5b:
e3:d1:71:24:bf:96:ba:6c:30:c5:af:f9:6e:3b:e0:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:93:DD:03:8A:10:98:04:C1:33:F0:BB:DF:C6:85:6C:4F:F9:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.19.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:85:ca:94:2d:a5:a0:42:3e:e0:59:7a:2c:c9:6a:d3:a5:d1:
76:57:54:2c:2e:a5:d6:d9:e4:ae:dc:19:9c:d0:b5:cb:2c:a3:
09:63:4f:d1:0c:ed:81:a9:7c:64:42:57:88:70:e0:fb:04:87:
4d:45:01:1e:4b:0e:01:55:86:65:b4:f3:91:0d:bd:b6:1d:86:
6a:c7:f2:5a:85:75:3a:db:f8:4d:da:5f:36:99:70:15:20:fd:
f5:db:b4:14:2b:39:3a:ff:b0:d1:94:07:b2:c6:e4:1f:9d:b3:
72:7e:15:58:f9:ed:bc:78:f0:ba:77:7d:77:44:cf:89:2c:ab:
24:19:fe:4d:42:3f:6f:92:11:15:82:00:6d:d7:80:1c:3e:4e:
b6:9f:dd:7e:ac:4a:25:9e:d3:56:1e:b0:b9:8e:87:fc:b6:84:
71:f5:22:0f:85:bc:84:cd:2c:9a:04:e8:e1:a2:cf:07:a4:a7:
57:70:b9:c4:49:4f:37:eb:a5:ac:15:d4:77:4d:da:17:69:6b:
c9:6b:0d:e8:81:d7:46:69:d0:d0:41:50:5a:8e:2b:11:14:87:
b5:06:2e:6d:c8:7d:ad:53:22:07:bc:71:5c:48:d3:5f:e9:7a:
cc:64:10:13:d0:91:69:03:18:8c:d4:69:39:2e:a3:92:d0:31:
b1:49:f7:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt67ZY7ZSIujXOf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk
MGNiOWYyZjgtZWMwNy00MzhmLWFmYjItMGE3N2MyZDg3M2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj++5WJ6uvX3GHo5Prcj3FIrexFHIQENcEzTp
SCXjQTJ//8GZKOlSzCtnbYqd/qaEbetPQIL9Our3Tddy6Ssa/Fxf9M9e+etuK15r
ISnE13JfjdLlXgh4SAghnUwvqKUCFeTdbW/Rf+qUUQLuG/RW0KMkJQ9GEo9agIil
X3v9W7GJ9/csQJOnB0t/KDl4edNtRdIGrR95NFKtTgOn2xoEhsevy5yJGUZMYWXm
yn4WaR9J3ImZuBzKNYGe91XTtCPtfIbDFaeV8yFVPACOf2prHU5A7QF2mB+BQAOd
YsuPQxx0QUs3zQeR/5F06LY+81vj0XEkv5a6bDDFr/luO+Ct9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8Jk90DihCYBMEz8LvfxoVsT/n3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2NhNzcwMmMtMzkxZC0z
YzRlLTgyY2QtYzcxNjgxMGY2NzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiFypQtpaBCPuBZeizJatOl0XZXVCwupdbZ5K7cGZzQtcssowljT9EM
7YGpfGRCV4hw4PsEh01FAR5LDgFVhmW085ENvbYdhmrH8lqFdTrb+E3aXzaZcBUg
/fXbtBQrOTr/sNGUB7LG5B+ds3J+FVj57bx48Lp3fXdEz4ksqyQZ/k1CP2+SERWC
AG3XgBw+Traf3X6sSiWe01YesLmOh/y2hHH1Ig+FvITNLJoE6OGizwekp1dwucRJ
TzfrpawV1HdN2hdpa8lrDeiB10Zp0NBBUFqOKxEUh7UGLm3Ifa1TIge8cVxI01/p
esxkEBPQkWkDGIzUaTkuo5LQMbFJ94Q=
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:24:32 2025 by rpki-client