This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa File: 2f363cbd-03ad-377e-b713-886834f50a2c.roa (raw, json) Hash identifier: pMx5SZzsWjMjPusAu3LoEiym+FfHHsSU8+tnLFszih8= Subject key identifier: 13:54:90:95:BE:22:08:B5:7D:C8:BB:63:57:BB:3E:AA:F0:90:89:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C57CBC80AF32D090E4D60ED80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa Signing time: Mon 29 Dec 2025 02:00:30 +0000 ROA not before: Mon 29 Dec 2025 02:00:30 +0000 ROA not after: Sun 29 Mar 2026 01:00:30 +0000 asID: 208972 IP address blocks: 38.10.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:57:cb:c8:0a:f3:2d:09:0e:4d:60:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 29 02:00:30 2025 GMT Not After : Mar 29 01:00:30 2026 GMT Subject: CN=03a0a352-554c-48a6-bdad-727c15367664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:6c:f5:94:f9:f8:99:20:f5:e7:2f:32:37: d4:5c:95:ff:ac:b7:f4:0a:c8:5d:78:f6:7c:dc:00: 7b:21:74:dd:db:67:9e:fa:bd:5f:3b:b4:ac:15:75: cc:81:4e:94:8d:87:4e:ab:72:ad:1a:90:2e:89:26: dc:90:15:b0:41:6a:c2:83:cc:2d:0e:c6:71:57:da: 0d:6c:eb:e1:2e:bc:3b:07:27:0b:24:eb:f5:95:68: f6:ae:84:55:e9:f6:cd:a6:2b:6e:57:67:61:72:cb: 42:97:98:58:d2:91:30:7c:11:22:2b:02:a8:79:fa: 85:67:66:e6:a9:f5:6c:94:41:80:dd:e4:05:fc:dc: 4f:bc:4e:98:15:9e:33:81:a4:6b:a0:cc:40:44:b0: c6:dc:f3:73:bf:6f:e4:05:b7:b2:56:8b:c6:7a:27: 81:ed:78:40:90:65:a0:00:74:ee:ab:fd:29:fe:70: 41:01:94:04:0f:1c:43:4b:9d:c8:21:28:86:2f:e3: e4:1f:56:4e:36:f2:92:e7:8d:78:7e:d8:7a:08:09: fc:be:6c:b8:af:1e:e5:bf:1c:38:9f:00:46:6d:7d: 2b:70:57:54:4b:fd:b8:85:e0:04:f4:b0:ed:0b:69: 48:48:d1:33:d2:5d:45:56:25:f8:2c:15:cd:74:60: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:54:90:95:BE:22:08:B5:7D:C8:BB:63:57:BB:3E:AA:F0:90:89:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d3:d0:20:b4:77:d2:92:d6:a8:fa:30:6b:53:27:31:47:b1: fe:1d:b9:54:14:b4:90:57:49:43:06:71:8d:bd:33:61:b0:de: 5d:de:48:54:8f:08:c2:d3:63:ae:b1:c0:06:a4:c6:b9:3c:84: 0c:b5:d4:4d:fb:f8:e8:c1:eb:73:9d:27:f3:38:07:cc:35:89: e6:8a:93:a8:f3:5f:50:8e:b1:10:31:f1:28:1b:5d:b9:e2:cb: 0f:43:c8:c3:d9:86:64:0f:74:a1:1e:bf:68:1e:f1:ac:dd:6b: a9:da:9b:e5:b6:0b:29:dd:1c:cb:13:04:6c:e6:cc:46:ca:06: 44:f8:17:1d:eb:13:b9:08:f0:cb:fc:89:d8:ac:33:f4:2e:8e: 4a:40:75:54:06:c9:89:92:71:f2:fd:3b:21:5c:cc:0f:3e:bd: ff:97:85:e6:7e:d4:c9:9a:39:60:2b:c6:b9:a0:49:98:21:d4: 9e:67:88:f5:bf:82:9c:6e:5d:96:9e:20:32:9f:e0:bc:4a:fe: 15:c7:81:c9:98:82:51:09:f4:ab:03:1f:ea:9c:c2:e9:c1:18: ff:6e:1b:12:6d:42:00:39:6b:b3:99:e8:e9:f4:59:86:cd:5f: 89:37:8d:a3:48:84:5e:81:59:85:83:23:a0:a5:f6:7c:81:82: 9d:19:c3:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExXy8gK8y0JDk1g7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyOTAyMDAzMFoXDTI2MDMyOTAxMDAzMFowLzEtMCsGA1UEAxMk MDNhMGEzNTItNTU0Yy00OGE2LWJkYWQtNzI3YzE1MzY3NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmohs9ZT5+Jkg9ecvMjfUXJX/rLf0CshdePZ8 3AB7IXTd22ee+r1fO7SsFXXMgU6UjYdOq3KtGpAuiSbckBWwQWrCg8wtDsZxV9oN bOvhLrw7BycLJOv1lWj2roRV6fbNpituV2dhcstCl5hY0pEwfBEiKwKoefqFZ2bm qfVslEGA3eQF/NxPvE6YFZ4zgaRroMxARLDG3PNzv2/kBbeyVovGeieB7XhAkGWg AHTuq/0p/nBBAZQEDxxDS53IISiGL+PkH1ZONvKS5414fth6CAn8vmy4rx7lvxw4 nwBGbX0rcFdUS/24heAE9LDtC2lISNEz0l1FViX4LBXNdGAtyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNUkJW+Igi1fci7Y1e7PqrwkInzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmYzNjNjYmQtMDNhZC0z NzdlLWI3MTMtODg2ODM0ZjUwYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrT0CC0d9KS1qj6MGtTJzFHsf4duVQUtJBXSUMGcY29M2Gw3l3eSFSP CMLTY66xwAakxrk8hAy11E37+OjB63OdJ/M4B8w1ieaKk6jzX1COsRAx8SgbXbni yw9DyMPZhmQPdKEev2ge8azda6nam+W2CyndHMsTBGzmzEbKBkT4Fx3rE7kI8Mv8 idisM/QujkpAdVQGyYmScfL9OyFczA8+vf+XheZ+1MmaOWArxrmgSZgh1J5niPW/ gpxuXZaeIDKf4LxK/hXHgcmYglEJ9KsDH+qcwunBGP9uGxJtQgA5a7OZ6On0WYbN X4k3jaNIhF6BWYWDI6Cl9nyBgp0Zw1Q= -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:33 2026 by rpki-client