This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: V5HQQEu+tAoOHjt8xdQRSGnGVU1wJjFWyUEwU40EVIs= Subject key identifier: 3B:D7:47:4E:3B:16:8A:28:FB:E9:4E:6A:BC:01:E3:63:BB:A6:B6:66 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584C215B99D6EE42A18EE99DC79C Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:99:d6:ee:42:a1:8e:e9:9d:c7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=83fcee44-6013-4596-b426-fb3662cf5f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ae:3a:27:bc:9e:49:e5:62:15:7f:63:aa:62: 15:9f:3f:f5:76:74:f3:54:95:23:88:d2:c9:3d:f9: 9a:41:26:b6:76:d3:e4:c2:87:50:cb:9f:97:e1:e0: 87:a4:c9:f8:f7:b2:d1:8e:ea:0c:2f:d3:2b:af:fd: cb:6e:34:00:63:1d:ae:52:70:74:4d:cb:3f:c1:14: 67:44:2b:3f:7b:49:cc:a2:b9:52:48:4e:b1:1c:c7: 9a:34:7e:a9:aa:73:28:30:c8:0b:94:03:8a:83:40: 33:d9:f6:80:5f:5c:ea:ab:6e:f8:f7:9c:ba:49:09: e0:98:ae:fe:b1:b7:f4:c8:dd:65:a7:60:02:bc:8a: fb:38:63:be:b3:e1:de:d1:a9:8d:3e:43:5f:80:30: 1f:94:b3:c1:53:7a:66:3c:fd:65:53:f4:59:53:88: 98:b9:a5:d9:e2:63:bf:07:22:f1:f7:01:0e:70:16: f9:6a:3f:84:de:3c:3f:6e:74:f8:f9:d2:36:42:9f: 8d:b1:d4:9f:7e:ec:eb:b0:8f:c8:97:e4:ee:84:9f: d4:fe:14:7c:00:d6:a3:12:6a:0b:c0:cb:6c:2b:d9: 82:ae:9b:f3:f7:7b:d2:fc:fc:a0:8f:1d:2d:d5:9e: f0:6e:27:0c:e8:8b:95:d4:e3:b8:ed:98:49:fe:e8: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:47:4E:3B:16:8A:28:FB:E9:4E:6A:BC:01:E3:63:BB:A6:B6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f2:02:fd:77:fe:57:6f:8f:9a:b9:51:5d:c8:fa:52:9e:44: b0:b0:28:ed:d6:b1:47:92:5a:e8:fa:c9:80:9f:34:fb:d0:a7: 82:63:19:44:41:b8:c9:e3:e4:ab:ec:81:02:a4:75:48:7a:4b: 27:38:fb:53:de:a6:28:b0:d9:63:51:61:5b:ea:b4:fa:9c:6c: 30:45:ff:ed:2c:3c:da:92:ee:11:38:ab:72:8b:59:7a:6b:97: e7:74:74:36:f7:ca:e5:a4:87:ab:0d:89:94:a3:39:eb:f1:2e: 1a:51:90:ea:76:56:e7:5e:a0:c9:92:99:dc:f7:41:3e:7d:b3: 86:d0:ee:5c:b5:fc:cb:0b:4b:9f:27:18:48:81:b4:42:6d:c8: 46:65:34:b0:c4:0a:9d:33:90:a1:24:e9:bb:01:11:06:ba:9c: d1:4b:ff:37:94:3e:bb:a3:74:d8:2c:2f:e3:43:82:fa:7b:44: 1c:21:31:8f:5a:87:3c:d1:01:4b:ea:aa:cd:fa:73:a7:53:8e: a2:d3:13:45:17:8b:99:d4:49:0f:8f:93:1a:6c:0d:19:d6:3a: 23:e7:d7:8f:8a:80:01:b5:13:ca:e0:a2:c7:6b:a5:22:72:2d: b1:f9:68:5c:d9:ac:3e:d4:e7:56:20:2e:1a:af:cf:92:bf:23: 6e:27:45:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5nW7kKhjumdx5wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk ODNmY2VlNDQtNjAxMy00NTk2LWI0MjYtZmIzNjYyY2Y1ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq46J7yeSeViFX9jqmIVnz/1dnTzVJUjiNLJ PfmaQSa2dtPkwodQy5+X4eCHpMn497LRjuoML9Mrr/3LbjQAYx2uUnB0Tcs/wRRn RCs/e0nMorlSSE6xHMeaNH6pqnMoMMgLlAOKg0Az2faAX1zqq27495y6SQngmK7+ sbf0yN1lp2ACvIr7OGO+s+He0amNPkNfgDAflLPBU3pmPP1lU/RZU4iYuaXZ4mO/ ByLx9wEOcBb5aj+E3jw/bnT4+dI2Qp+NsdSffuzrsI/Il+TuhJ/U/hR8ANajEmoL wMtsK9mCrpvz93vS/Pygjx0t1Z7wbicM6IuV1OO47ZhJ/ugoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvXR047Fooo++lOarwB42O7prZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXyAv13/ldvj5q5UV3I+lKeRLCwKO3WsUeSWuj6yYCfNPvQp4JjGURB uMnj5KvsgQKkdUh6Syc4+1Pepiiw2WNRYVvqtPqcbDBF/+0sPNqS7hE4q3KLWXpr l+d0dDb3yuWkh6sNiZSjOevxLhpRkOp2VudeoMmSmdz3QT59s4bQ7ly1/MsLS58n GEiBtEJtyEZlNLDECp0zkKEk6bsBEQa6nNFL/zeUPrujdNgsL+NDgvp7RBwhMY9a hzzRAUvqqs36c6dTjqLTE0UXi5nUSQ+PkxpsDRnWOiPn14+KgAG1E8rgosdrpSJy LbH5aFzZrD7U51YgLhqvz5K/I24nRWU= -----END CERTIFICATE-----Generated at Thu Dec 11 05:00:19 2025 by rpki-client