This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa File: 8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa (raw, json) Hash identifier: BD2/bi/9NMD7G4hFYCuy/ALOjl4b/Lje9Ik9nDZffXo= Subject key identifier: 33:B1:7E:26:F8:F7:AB:B7:AF:04:D6:D9:DA:9A:AD:A2:5C:38:E7:62 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C35080741FEE95BB903399740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa Signing time: Tue 16 Dec 2025 15:08:39 +0000 ROA not before: Tue 16 Dec 2025 15:08:39 +0000 ROA not after: Mon 16 Mar 2026 14:08:39 +0000 asID: 153523 IP address blocks: 38.86.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:35:08:07:41:fe:e9:5b:b9:03:39:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 16 15:08:39 2025 GMT Not After : Mar 16 14:08:39 2026 GMT Subject: CN=fa51aac7-6423-4635-bfe6-297b54e3fd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:7f:cf:87:60:dd:e7:e0:6b:e1:2c:c0:99: 35:e0:0d:1e:c4:7c:17:2e:6f:30:5a:9f:15:49:8e: fb:38:1f:64:a6:66:18:b8:57:c5:47:2b:a7:83:8f: 8f:fa:1f:4f:9c:fa:f7:87:a5:d6:dd:92:f8:33:9a: 75:9c:9f:e4:30:42:db:61:17:86:b9:a4:00:b6:c6: f3:e3:59:50:23:1b:8b:b3:6e:2b:5c:8a:f3:61:84: 98:99:3e:e7:90:46:e5:b1:dd:6b:ac:f9:f2:33:01: 2a:2d:da:fb:17:84:c2:f3:b1:d0:c1:09:84:96:08: 1a:91:9b:02:07:01:bc:da:c9:0b:a2:7a:90:27:42: 23:da:ba:d9:ab:2c:66:e8:18:c9:68:d0:e0:75:d8: f0:bd:fb:5a:d8:ed:75:28:4c:0e:2c:fa:8b:15:3c: f0:a2:67:72:04:74:80:39:b7:3f:ff:fb:c4:ba:7a: fa:4f:c0:2f:f3:cb:e8:c6:09:d6:a0:a5:1a:c1:22: 22:56:2a:f2:b3:e1:30:56:fe:93:77:c9:f9:ce:eb: 26:af:14:c5:f1:b7:1d:3f:23:87:7b:4a:6c:7b:42: 40:04:47:1a:bb:18:fd:66:63:41:2b:10:f9:96:c2: 17:cf:ee:81:70:ed:8d:a2:ab:dc:ed:35:f1:d7:09: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:7E:26:F8:F7:AB:B7:AF:04:D6:D9:DA:9A:AD:A2:5C:38:E7:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:68:b9:57:5f:c1:b6:bc:90:ce:6e:81:39:69:2a:33:54:95: d5:0c:1f:70:1f:5b:4c:27:13:83:90:af:b7:43:b2:73:ce:86: 2b:49:4a:90:90:3b:2b:3c:48:86:89:69:8b:1d:9d:71:cc:65: df:f0:e7:1b:b1:cc:4f:14:4c:d1:78:b9:99:b7:40:09:80:dc: f8:7b:61:11:6f:0c:db:08:66:b9:95:1c:db:77:5e:38:1b:11: 10:bc:df:88:1d:c8:ee:c5:cf:1b:80:6d:bf:6d:23:c2:ed:f0: cb:4a:c0:3a:a9:be:05:d1:49:21:d8:a1:cf:69:77:90:36:a2: 41:07:3d:8f:43:a8:68:a1:46:29:7f:0a:60:9b:5c:31:a6:4a: 97:7b:42:5f:fd:1f:2f:b0:06:dd:58:0a:d8:e6:2b:4b:fd:45: 32:ba:c3:4d:24:bd:34:ee:da:1d:55:27:f8:de:f2:60:97:0d: de:ab:2f:a5:8f:7f:a7:d5:18:6a:a5:ef:70:02:e4:0d:a6:ac: 1f:25:8c:9a:5c:78:84:10:7e:c7:ad:02:0f:99:ea:bc:23:b0: 34:d4:3d:8e:5f:94:79:5e:57:fa:bc:0c:b2:ee:05:88:84:5d: 2b:f0:ae:3f:16:31:45:ba:88:9d:c3:7c:f8:70:ac:d2:94:8f: 4e:d4:ba:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw1CAdB/ulbuQM5l0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxNjE1MDgzOVoXDTI2MDMxNjE0MDgzOVowLzEtMCsGA1UEAxMk ZmE1MWFhYzctNjQyMy00NjM1LWJmZTYtMjk3YjU0ZTNmZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO1/z4dg3efga+EswJk14A0exHwXLm8wWp8V SY77OB9kpmYYuFfFRyung4+P+h9PnPr3h6XW3ZL4M5p1nJ/kMELbYReGuaQAtsbz 41lQIxuLs24rXIrzYYSYmT7nkEblsd1rrPnyMwEqLdr7F4TC87HQwQmElggakZsC BwG82skLonqQJ0Ij2rrZqyxm6BjJaNDgddjwvfta2O11KEwOLPqLFTzwomdyBHSA Obc///vEunr6T8Av88voxgnWoKUawSIiVirys+EwVv6Td8n5zusmrxTF8bcdPyOH e0pse0JABEcauxj9ZmNBKxD5lsIXz+6BcO2Noqvc7TXx1wl7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOxfib496u3rwTW2dqaraJcOOdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGZjZTVmNzEtZTdkMy0z ZjE2LWJhNWUtOTU1OWI1ZGRiMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJlbmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNouVdfwba8kM5ugTlpKjNUldUMH3AfW0wnE4OQr7dDsnPOhitJSpCQ Oys8SIaJaYsdnXHMZd/w5xuxzE8UTNF4uZm3QAmA3Ph7YRFvDNsIZrmVHNt3Xjgb ERC834gdyO7FzxuAbb9tI8Lt8MtKwDqpvgXRSSHYoc9pd5A2okEHPY9DqGihRil/ CmCbXDGmSpd7Ql/9Hy+wBt1YCtjmK0v9RTK6w00kvTTu2h1VJ/je8mCXDd6rL6WP f6fVGGql73AC5A2mrB8ljJpceIQQfsetAg+Z6rwjsDTUPY5flHleV/q8DLLuBYiE XSvwrj8WMUW6iJ3DfPhwrNKUj07UulA= -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:51 2025 by rpki-client