This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa File: 2b3d568a-37d1-3dc9-8848-b06220f406d6.roa (raw, json) Hash identifier: U6F69AnFftsbnt56sLP92bvd6zyRkp83ShmWnm2vurk= Subject key identifier: 50:3C:8A:08:A8:D3:E8:57:0A:5F:26:26:EF:F5:28:D9:BA:8A:52:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C2193CB38FA04AD626DDBBF40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa Signing time: Tue 09 Dec 2025 15:54:06 +0000 ROA not before: Tue 09 Dec 2025 15:54:06 +0000 ROA not after: Mon 09 Mar 2026 14:54:06 +0000 asID: 273154 IP address blocks: 38.134.172.0/24 maxlen: 24 154.43.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:93:cb:38:fa:04:ad:62:6d:db:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 9 15:54:06 2025 GMT Not After : Mar 9 14:54:06 2026 GMT Subject: CN=682da431-7529-45b0-b28a-82a4618ecb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:62:8d:40:dc:a7:d0:82:c1:4a:14:7b:c7: 9e:a0:e1:5c:f9:4b:68:04:f0:e2:8f:bf:9d:f7:9a: 26:55:67:0e:a2:b7:3c:0c:21:d6:b3:9b:ac:ff:ea: 62:0a:6d:5c:5e:b8:c5:0a:f7:fd:77:19:b3:47:38: bb:00:73:90:33:ac:8e:77:05:7c:72:64:dd:f4:63: d4:4e:58:4f:c7:be:01:3c:61:cf:ec:31:03:a1:e3: a8:6b:d6:b3:3d:36:be:77:4c:c7:5c:73:71:9a:a9: fe:7d:39:a0:22:c5:0c:3d:20:ed:ef:e4:93:e0:41: 50:00:cd:6e:62:5b:ac:7f:f0:4f:ad:fa:c8:bb:2e: 9b:53:db:bd:d7:b6:58:f5:07:d6:66:cd:2e:24:73: e5:d7:38:78:82:0b:59:8a:09:49:21:f8:bb:24:17: 28:ce:06:bb:66:96:27:18:b9:ac:16:3b:70:b0:e6: 62:cb:1d:57:0a:59:d6:f3:68:29:40:62:b0:69:ce: 31:5d:ef:ee:b5:28:c5:06:3f:95:5e:3b:8e:fa:b1: 54:49:29:72:cd:f1:6e:95:61:12:ef:5d:de:c3:a2: 65:ad:3d:8d:e0:46:22:81:ef:db:6f:dd:15:40:71: 28:11:5c:53:68:2c:8b:1f:48:59:ab:f7:52:00:cb: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:8A:08:A8:D3:E8:57:0A:5F:26:26:EF:F5:28:D9:BA:8A:52:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.134.172.0/24 154.43.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8b:e4:03:7d:5c:3c:c4:ab:ef:97:7f:02:6d:0a:e4:46:a4: 47:b1:f7:a9:ce:aa:e6:d9:8b:e6:61:54:5d:91:d1:06:71:09: c3:c8:e8:18:90:5b:86:44:ed:82:b9:76:56:f1:36:2f:71:79: a7:04:d7:6e:ab:27:70:43:8d:be:77:b0:7a:80:4e:4c:f8:21: d4:45:5c:c0:79:f9:70:39:21:d9:95:58:0a:a0:9a:e8:08:f2: 1c:a3:a5:77:bf:aa:10:4f:78:08:ec:4a:85:84:ea:41:ce:fe: b6:97:4e:3f:78:5e:6d:d0:04:2c:06:3d:5c:d0:d7:ad:23:7c: b1:81:0b:a6:93:03:b3:22:c6:19:62:7a:8d:e8:4d:b4:80:22: 18:d4:82:18:9b:57:1d:1c:3e:80:65:80:f9:2a:52:0d:4a:d8: d4:fc:af:02:fc:25:22:61:fe:c1:3d:5b:a1:16:e2:4f:39:6d: 5d:cb:c5:69:d2:f0:a5:81:30:5f:8a:16:6d:7b:85:92:ef:84: cd:b1:c6:1e:1d:02:b7:91:2d:22:33:96:e9:5e:22:90:8f:5b: 5c:c8:1b:c7:f1:c1:e7:42:58:d3:b3:23:47:07:89:ab:47:20: 94:df:d0:5b:0d:d3:a6:f7:c2:99:b1:bf:dd:bb:2c:1a:68:3e: 65:7e:6b:6e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEwhk8s4+gStYm3bv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIwOTE1NTQwNloXDTI2MDMwOTE0NTQwNlowLzEtMCsGA1UEAxMk NjgyZGE0MzEtNzUyOS00NWIwLWIyOGEtODJhNDYxOGVjYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnNijUDcp9CCwUoUe8eeoOFc+UtoBPDij7+d 95omVWcOorc8DCHWs5us/+piCm1cXrjFCvf9dxmzRzi7AHOQM6yOdwV8cmTd9GPU TlhPx74BPGHP7DEDoeOoa9azPTa+d0zHXHNxmqn+fTmgIsUMPSDt7+ST4EFQAM1u Ylusf/BPrfrIuy6bU9u917ZY9QfWZs0uJHPl1zh4ggtZiglJIfi7JBcozga7ZpYn GLmsFjtwsOZiyx1XClnW82gpQGKwac4xXe/utSjFBj+VXjuO+rFUSSlyzfFulWES 713ew6JlrT2N4EYige/bb90VQHEoEVxTaCyLH0hZq/dSAMusSwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFA8igio0+hXCl8mJu/1KNm6ilLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmIzZDU2OGEtMzdkMS0z ZGM5LTg4NDgtYjA2MjIwZjQwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJoasAwQC misoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI+L5AN9XDzEq++XfwJtCuRGpEex96nOqubZi+ZhVF2R0QZx CcPI6BiQW4ZE7YK5dlbxNi9xeacE126rJ3BDjb53sHqATkz4IdRFXMB5+XA5IdmV WAqgmugI8hyjpXe/qhBPeAjsSoWE6kHO/raXTj94Xm3QBCwGPVzQ160jfLGBC6aT A7Mixhlieo3oTbSAIhjUghibVx0cPoBlgPkqUg1K2NT8rwL8JSJh/sE9W6EW4k85 bV3LxWnS8KWBMF+KFm17hZLvhM2xxh4dAreRLSIzluleIpCPW1zIG8fxwedCWNOz I0cHiatHIJTf0FsN06b3wpmxv927LBpoPmV+a24= -----END CERTIFICATE-----Generated at Sun Dec 14 14:03:03 2025 by rpki-client