This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: ybamq3jqUyGr5bjW+NzDUArPds0nNvCRcdGXZlSKYho= Subject key identifier: 38:92:8B:DD:CF:C2:C8:BD:19:55:08:A1:4F:F5:48:59:45:7A:44:19 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584BF1E5E2C55BF34633663201C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e2:c5:5b:f3:46:33:66:32:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=a91e8427-26b0-45af-a527-366c44c9d1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:9b:03:7c:03:ff:13:ad:89:c3:16:cd:38: 06:c7:c7:e1:9b:11:ef:32:15:18:fe:74:cf:9a:72: e2:5f:e9:94:e0:16:8b:e0:42:e5:b5:a5:18:e3:7f: 5d:89:ef:25:83:fb:e2:04:29:7c:22:05:85:ba:9d: 28:1d:f5:6b:2b:02:27:39:d1:38:18:f7:d7:9a:65: 4d:ec:7d:e9:fa:b9:88:52:15:3c:80:bb:dd:19:a5: cc:c5:b3:bf:f8:03:07:e8:ae:a2:ad:a5:8f:8b:2b: 25:35:ad:86:63:78:b7:93:ad:fe:fa:11:0b:c2:3a: af:02:61:6b:30:ea:65:0b:05:f7:d7:7a:c4:3d:50: 47:34:18:df:23:33:6f:cb:23:39:41:ea:54:dd:8b: 99:fe:a4:99:b6:68:96:4a:10:69:31:57:08:aa:94: bf:db:71:6d:86:9c:7c:f9:bf:9d:84:10:06:8d:e4: 31:51:8f:4c:76:69:1c:af:f9:87:3f:6d:d0:7f:de: 1a:3d:1f:f2:81:0f:e7:cb:f0:d3:4e:c2:46:c8:22: 83:35:8f:91:37:cf:3f:11:21:6b:09:cb:b5:04:1a: da:d8:ba:5e:5b:52:84:f7:f9:d1:20:01:b9:2b:4b: 81:ca:30:71:3b:b2:5c:d7:82:3f:3f:ba:3e:a1:79: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:92:8B:DD:CF:C2:C8:BD:19:55:08:A1:4F:F5:48:59:45:7A:44:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:90:2e:b7:16:df:d7:8c:81:4f:e0:a3:63:4f:a6:27:7b: 5b:9d:2e:d6:35:32:34:9c:90:ea:26:74:65:c9:5a:b5:4c:c3: e8:56:f9:49:20:ac:90:b3:63:94:60:10:30:7a:ff:09:5d:da: 8e:ef:24:c2:08:ad:8e:60:eb:8b:14:18:32:ab:35:94:29:5c: 1d:08:ad:61:f9:1d:e7:dc:da:8c:98:f8:bf:8f:30:3c:5a:16: 85:93:ff:df:f7:4a:c0:1d:3f:e7:1d:fd:22:fe:a6:32:39:bd: 41:75:99:42:4e:ae:35:b1:76:d7:be:8b:12:f5:1f:15:66:df: 4f:dd:82:cc:92:a3:70:e6:ad:b3:f3:5f:ad:9a:e8:23:84:9c: 32:90:7a:23:bb:10:2e:db:5d:fb:f8:c3:b6:d9:db:46:b9:57: dd:cc:cb:6d:79:3c:91:90:09:7b:73:f5:08:6b:b5:e3:3e:d5: dd:ca:1c:b5:be:c6:6f:3f:cc:6a:8e:17:0c:61:52:dc:85:60: 1a:3c:ed:5d:6d:08:54:27:8a:13:dc:ca:2c:1a:e2:61:3c:d5: b0:aa:5f:53:19:b8:0f:28:4d:9f:a3:61:71:03:46:7f:21:9e: 9f:9e:05:b3:43:83:10:a5:a6:c0:c5:11:a8:e9:57:cc:7f:94: a4:af:de:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5eLFW/NGM2YyAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk YTkxZTg0MjctMjZiMC00NWFmLWE1MjctMzY2YzQ0YzlkMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuybA3wD/xOticMWzTgGx8fhmxHvMhUY/nTP mnLiX+mU4BaL4ELltaUY439die8lg/viBCl8IgWFup0oHfVrKwInOdE4GPfXmmVN 7H3p+rmIUhU8gLvdGaXMxbO/+AMH6K6iraWPiyslNa2GY3i3k63++hELwjqvAmFr MOplCwX313rEPVBHNBjfIzNvyyM5QepU3YuZ/qSZtmiWShBpMVcIqpS/23Fthpx8 +b+dhBAGjeQxUY9Mdmkcr/mHP23Qf94aPR/ygQ/ny/DTTsJGyCKDNY+RN88/ESFr Ccu1BBra2LpeW1KE9/nRIAG5K0uByjBxO7Jc14I/P7o+oXnuaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiSi93Pwsi9GVUIoU/1SFlFekQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEznkC63Ft/XjIFP4KNjT6Yne1udLtY1MjSckOomdGXJWrVMw+hW+Ukg rJCzY5RgEDB6/wld2o7vJMIIrY5g64sUGDKrNZQpXB0IrWH5Hefc2oyY+L+PMDxa FoWT/9/3SsAdP+cd/SL+pjI5vUF1mUJOrjWxdte+ixL1HxVm30/dgsySo3DmrbPz X62a6COEnDKQeiO7EC7bXfv4w7bZ20a5V93My215PJGQCXtz9QhrteM+1d3KHLW+ xm8/zGqOFwxhUtyFYBo87V1tCFQnihPcyiwa4mE81bCqX1MZuA8oTZ+jYXEDRn8h np+eBbNDgxClpsDFEajpV8x/lKSv3g4= -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:46 2025 by rpki-client