This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae21c917-3b11-3e13-bdd1-5689eed1766d.roa File: ae21c917-3b11-3e13-bdd1-5689eed1766d.roa (raw, json) Hash identifier: GAE2ce57azbbDH9WzatzyrCiCdVCtbV/Dyzbstwu238= Subject key identifier: AC:20:6A:BC:E3:FD:53:E7:24:75:9B:D0:87:C5:3E:9D:62:BD:0E:9C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BD400FDA4818166E38BE2CF00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae21c917-3b11-3e13-bdd1-5689eed1766d.roa Signing time: Mon 27 Oct 2025 13:47:39 +0000 ROA not before: Mon 27 Oct 2025 13:47:39 +0000 ROA not after: Sun 25 Jan 2026 14:47:39 +0000 asID: 138998 IP address blocks: 38.66.108.0/22 maxlen: 22 38.88.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d4:00:fd:a4:81:81:66:e3:8b:e2:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 27 13:47:39 2025 GMT Not After : Jan 25 14:47:39 2026 GMT Subject: CN=e08eb827-6f3a-4050-9e28-58e18e1792ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:18:63:06:17:a1:df:43:86:f1:7b:78:70: 84:08:f3:2d:3b:73:d2:8a:93:13:c6:ba:4d:ed:51: ab:fe:16:f2:2d:c1:48:a8:7c:27:59:c2:e3:9f:02: 62:50:51:61:6d:55:fc:6f:2f:f1:ad:8e:77:37:c2: ec:f9:60:cb:86:08:6f:90:96:b4:25:35:75:b4:e9: 24:84:36:08:20:dd:89:52:55:11:a4:9b:83:4d:7e: fc:df:84:f0:fb:a5:95:02:59:bf:cf:f6:1b:42:d5: d9:d9:a0:f3:05:54:e0:f3:2c:97:11:89:c8:72:ff: 80:0f:c9:62:5c:14:22:58:b3:f8:82:75:7b:ff:eb: 44:78:19:70:cc:9c:94:20:48:e1:37:dd:6b:59:59: e7:67:3a:13:5e:0d:29:52:a1:75:e2:a0:d4:bc:93: 9b:11:95:4f:31:88:4d:c8:d7:da:d9:9d:3b:3b:46: 4b:3f:00:70:d4:e7:76:39:1c:a8:5e:19:22:f1:67: 27:e3:59:8e:00:23:3a:90:69:07:e3:b6:18:fd:70: 7d:48:c6:42:43:44:be:b8:40:e4:a8:ce:e1:c3:ae: 46:dc:48:0a:9e:3d:a5:97:d1:dd:b2:92:e2:24:f6: 03:7e:0d:82:39:a0:40:4e:25:75:11:dd:af:83:f4: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:20:6A:BC:E3:FD:53:E7:24:75:9B:D0:87:C5:3E:9D:62:BD:0E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae21c917-3b11-3e13-bdd1-5689eed1766d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.66.108.0/22 38.88.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:0b:7b:b3:9c:3a:e6:13:9f:e6:29:6d:d4:68:3e:80:4b:1a: 55:a1:17:82:43:58:c8:59:1e:11:99:d3:50:f2:0b:d1:c9:e9: 7e:c0:53:68:2f:33:d5:c0:a0:68:52:07:21:cb:96:12:6d:0b: 15:6c:84:e3:df:ef:d3:1a:9e:44:45:40:2a:c5:bb:2c:51:58: a1:01:01:7f:ab:d4:f4:78:3c:c8:a3:55:06:14:85:9e:5e:13: 96:cb:c7:2f:cf:a5:cb:88:1d:5a:2f:aa:a2:84:ad:0f:aa:35: 00:0d:7d:5e:19:ce:69:c2:1c:3b:1a:07:f7:db:c8:be:5d:83: 43:97:75:b6:0d:88:39:f4:cf:67:c3:37:48:97:6c:c1:a5:99: 0a:e4:d9:c8:e4:e5:42:7e:39:24:00:db:3f:8e:87:5d:ce:2d: c9:7c:e5:48:6c:27:2f:2a:c0:6a:ef:b1:54:a7:4a:4e:20:77: 0f:8a:68:ca:61:1c:61:3a:90:12:a2:33:d3:79:06:25:93:b1: b9:f2:3f:a5:e6:de:e6:9e:f5:08:42:92:17:eb:6b:9f:d4:02: f7:fc:42:68:e1:d6:16:12:28:67:70:e4:4d:3b:ef:30:9b:9f: 93:2c:61:f3:cb:83:f6:15:93:ba:e0:3d:5e:1f:c1:0d:3d:ce: b0:34:70:99 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvUAP2kgYFm44vizwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyNzEzNDczOVoXDTI2MDEyNTE0NDczOVowLzEtMCsGA1UEAxMk ZTA4ZWI4MjctNmYzYS00MDUwLTllMjgtNThlMThlMTc5MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnioYYwYXod9DhvF7eHCECPMtO3PSipMTxrpN 7VGr/hbyLcFIqHwnWcLjnwJiUFFhbVX8by/xrY53N8Ls+WDLhghvkJa0JTV1tOkk hDYIIN2JUlURpJuDTX7834Tw+6WVAlm/z/YbQtXZ2aDzBVTg8yyXEYnIcv+AD8li XBQiWLP4gnV7/+tEeBlwzJyUIEjhN91rWVnnZzoTXg0pUqF14qDUvJObEZVPMYhN yNfa2Z07O0ZLPwBw1Od2ORyoXhki8Wcn41mOACM6kGkH47YY/XB9SMZCQ0S+uEDk qM7hw65G3EgKnj2ll9HdspLiJPYDfg2COaBATiV1Ed2vg/Qe/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKwgarzj/VPnJHWb0IfFPp1ivQ6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWUyMWM5MTctM2IxMS0z ZTEzLWJkZDEtNTY4OWVlZDE3NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJkJsAwQA JlhUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADkLe7OcOuYTn+YpbdRoPoBLGlWhF4JDWMhZHhGZ01DyC9HJ 6X7AU2gvM9XAoGhSByHLlhJtCxVshOPf79MankRFQCrFuyxRWKEBAX+r1PR4PMij VQYUhZ5eE5bLxy/PpcuIHVovqqKErQ+qNQANfV4ZzmnCHDsaB/fbyL5dg0OXdbYN iDn0z2fDN0iXbMGlmQrk2cjk5UJ+OSQA2z+Oh13OLcl85UhsJy8qwGrvsVSnSk4g dw+KaMphHGE6kBKiM9N5BiWTsbnyP6Xm3uae9QhCkhfra5/UAvf8Qmjh1hYSKGdw 5E077zCbn5MsYfPLg/YVk7rgPV4fwQ09zrA0cJk= -----END CERTIFICATE-----Generated at Tue Nov 25 15:44:03 2025 by rpki-client