This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa File: fb972b12-802e-3973-880e-d35ad80cf075.roa (raw, json) Hash identifier: xufsVbNpq2xxxmc3Z6QnytDAwf3oTrwW91YL+jeRbJo= Subject key identifier: C2:9F:F0:66:7B:48:0F:D3:83:D4:77:9E:63:E1:E6:80:F4:DD:D9:28 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584C285629763A0758595B804380 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 137922 IP address blocks: 138.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:29:76:3a:07:58:59:5b:80:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=04243932-2f14-4b62-b62e-95d7472e6d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:ff:b7:1e:6a:07:91:6e:fd:15:fc:13:6e: 9d:12:84:b4:b0:9d:ae:f0:b1:cb:cc:bc:d8:ea:70: 89:8d:67:df:09:73:3e:da:89:95:9c:ad:8b:05:6b: 6d:12:55:6c:29:97:a3:be:0a:12:1c:99:48:a7:0c: 88:ef:d3:9a:36:d0:dd:d5:54:e4:24:95:ed:01:2e: 57:dc:d0:4b:e7:ba:7a:1b:c0:d7:65:65:96:98:7d: cc:c9:da:5a:44:b2:87:8f:cb:d9:db:1c:1d:dd:a5: ef:1e:03:0a:b5:7a:2b:52:72:db:97:d7:73:58:95: a7:2c:b5:0f:36:6f:d4:4c:02:a2:01:6b:5c:f7:02: b0:39:13:20:6d:15:c9:13:6d:83:5e:67:de:cc:06: ea:9c:f9:09:1d:1d:45:bd:fb:76:20:8c:8b:65:e9: f6:cd:34:78:b5:a7:3c:66:83:52:b3:25:31:8b:51: 14:78:ea:f1:4e:7b:9d:5b:dd:35:5f:b1:a4:18:f5: 39:1b:7a:ca:17:4c:3b:1d:7b:e2:82:26:94:98:e8: 8d:21:b1:cf:01:7e:4b:88:b1:b7:58:82:d3:bb:d8: 2b:98:2a:35:df:d6:33:98:20:24:da:4e:8e:74:87: 81:f8:0b:53:a3:67:d1:27:ed:b6:71:6c:5f:7f:f2: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9F:F0:66:7B:48:0F:D3:83:D4:77:9E:63:E1:E6:80:F4:DD:D9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:01:bc:a9:bd:b7:91:31:cd:b8:22:e7:42:8b:cc:c3:86:2a: 27:f3:7b:c4:da:cd:93:60:d0:ec:4a:b1:0a:e6:81:3d:9a:87: 33:67:39:ee:b8:fc:ce:10:6b:68:24:64:13:5d:15:c8:21:33: fe:05:bc:13:47:9a:67:22:1e:f1:ce:de:63:c0:1a:5e:35:6a: 12:62:b0:4d:bf:c9:6e:10:fe:87:03:f7:4f:2f:ff:c9:89:78: 17:ee:f6:b7:b6:e8:e7:6c:22:21:10:42:c5:09:78:28:0e:26: 94:03:53:d2:47:37:26:83:ac:f5:83:af:ce:7e:b6:df:5e:1e: 14:cc:d3:4a:f7:13:f2:2f:3c:c4:a4:0b:12:d5:8c:15:54:43: a7:43:f6:d5:b7:a2:8a:1b:0f:fa:82:65:ca:e0:46:56:2b:40: 9d:85:4d:6d:42:e4:ee:4a:0a:73:54:b4:5a:b1:69:4b:16:22: 3d:8e:c4:b1:72:79:64:7f:76:89:db:56:f0:5f:bf:9f:55:dc: 72:41:eb:06:6e:6e:0a:27:ca:38:34:ab:90:4f:d9:3e:ee:57: 84:69:81:50:57:f1:51:d3:dc:5e:b3:b7:a4:89:3a:db:e4:63: 5d:1b:65:6e:3e:80:71:5b:56:dd:98:97:48:35:46:77:50:17: dc:91:87:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVil2OgdYWVuAQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk MDQyNDM5MzItMmYxNC00YjYyLWI2MmUtOTVkNzQ3MmU2ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmv/tx5qB5Fu/RX8E26dEoS0sJ2u8LHLzLzY 6nCJjWffCXM+2omVnK2LBWttElVsKZejvgoSHJlIpwyI79OaNtDd1VTkJJXtAS5X 3NBL57p6G8DXZWWWmH3MydpaRLKHj8vZ2xwd3aXvHgMKtXorUnLbl9dzWJWnLLUP Nm/UTAKiAWtc9wKwORMgbRXJE22DXmfezAbqnPkJHR1Fvft2IIyLZen2zTR4tac8 ZoNSsyUxi1EUeOrxTnudW901X7GkGPU5G3rKF0w7HXvigiaUmOiNIbHPAX5LiLG3 WILTu9grmCo139YzmCAk2k6OdIeB+AtTo2fRJ+22cWxff/I7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKf8GZ7SA/Tg9R3nmPh5oD03dkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZmI5NzJiMTItODAyZS0z OTczLTg4MGUtZDM1YWQ4MGNmMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4BvKm9t5Exzbgi50KLzMOGKifze8TazZNg0OxKsQrmgT2ahzNnOe64 /M4Qa2gkZBNdFcghM/4FvBNHmmciHvHO3mPAGl41ahJisE2/yW4Q/ocD908v/8mJ eBfu9re26OdsIiEQQsUJeCgOJpQDU9JHNyaDrPWDr85+tt9eHhTM00r3E/IvPMSk CxLVjBVUQ6dD9tW3ooobD/qCZcrgRlYrQJ2FTW1C5O5KCnNUtFqxaUsWIj2OxLFy eWR/donbVvBfv59V3HJB6wZubgonyjg0q5BP2T7uV4RpgVBX8VHT3F6zt6SJOtvk Y10bZW4+gHFbVt2Yl0g1RndQF9yRh+s= -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:06 2025 by rpki-client