This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa File: c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa (raw, json) Hash identifier: gdALkWM9NHzHQGiqf6QpUfVuP/80aVyb7F5uqNQtZ5E= Subject key identifier: 39:CB:4B:B7:ED:01:97:8F:D8:31:9B:80:1D:1C:B2:BB:75:F5:07:D2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C59C2619F4E87FF3E0522F280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa Signing time: Mon 29 Dec 2025 17:29:23 +0000 ROA not before: Mon 29 Dec 2025 17:29:23 +0000 ROA not after: Sun 29 Mar 2026 16:29:23 +0000 asID: 0 IP address blocks: 38.152.0.0/17 maxlen: 17 38.152.128.0/17 maxlen: 17 38.153.0.0/17 maxlen: 17 38.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:c2:61:9f:4e:87:ff:3e:05:22:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 29 17:29:23 2025 GMT Not After : Mar 29 16:29:23 2026 GMT Subject: CN=9a5a758d-bbe5-4758-ad8e-7956da92ba47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:25:35:2c:9c:d2:12:e3:d8:d6:63:9f:6e: 07:ec:62:a8:03:28:e1:d3:97:46:75:bb:c2:8c:56: 3e:de:ab:68:e6:ea:c4:b2:bd:ae:6c:65:9e:d7:f3: 42:fd:30:30:61:13:95:9e:8d:56:a2:41:1c:ad:b2: 03:0f:31:11:cd:21:49:cb:ff:08:79:11:8e:2e:a0: bc:dd:e1:80:3c:73:63:75:bf:87:c9:37:9a:46:46: 50:ad:87:f9:15:a7:37:b5:e3:db:82:4b:c2:51:a4: db:ec:81:06:90:22:2e:fc:66:1a:3d:bf:e3:15:a1: 43:97:2e:b7:d8:5b:cc:9d:bc:84:44:28:96:b9:fd: 06:65:41:92:70:b4:9d:0c:73:4e:a4:c0:1a:84:ed: 68:85:6f:e5:7f:5e:6d:a7:1f:db:fa:32:ca:d9:c1: 23:dc:40:4d:c4:6a:7f:e8:08:1c:0f:72:cd:3a:57: 14:8c:d1:59:1f:da:c9:1c:4b:2d:14:4a:9d:1b:d9: 72:41:76:0f:43:9d:57:9c:9c:f2:b9:9e:c6:eb:18: 5c:bf:6f:13:38:6f:7c:05:4f:11:13:15:dc:9c:45: 65:94:df:08:cb:5b:31:3f:ae:28:49:da:c2:d0:7e: 6d:16:d3:dc:6f:7a:08:75:14:f5:73:66:a4:f6:ae: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:4B:B7:ED:01:97:8F:D8:31:9B:80:1D:1C:B2:BB:75:F5:07:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.152.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9b:5c:96:c4:00:6a:5d:00:e7:1f:e6:0a:87:80:47:42:fe: 6c:80:2c:ba:07:be:d3:60:70:c1:24:fa:03:f7:9b:30:b7:ce: df:61:b1:ca:44:7a:be:e5:3b:97:55:32:ad:7c:c2:89:c0:ec: 11:79:e7:33:22:61:3d:54:f3:02:5e:d4:b6:bc:70:61:d8:b3: 22:9e:d1:ac:9a:ca:27:21:81:75:c3:18:be:44:83:4b:d7:45: 32:a3:39:41:99:bd:2a:09:21:5e:9d:e7:43:2d:2e:6f:b4:98: 5c:3f:c3:13:fc:93:05:9c:ae:cd:e3:b6:98:55:24:ef:47:6d: 11:2c:ac:83:0b:4c:52:93:55:bd:c2:05:3e:1d:21:38:ff:9d: ee:2c:77:57:c6:24:64:f5:eb:de:e5:ae:93:03:4c:2e:f0:8d: 07:97:e6:3d:fb:41:b7:66:c3:f4:26:3d:0e:5c:a4:67:99:8e: 93:27:da:e5:bb:91:92:1d:ce:74:c9:f6:14:f9:68:49:d8:86: d5:3b:bc:c1:40:d6:11:27:93:37:5b:ab:d9:a2:e5:c3:31:92: 47:e3:5a:23:19:b4:e7:01:c5:d8:26:a7:b1:39:83:e0:43:87: dd:e2:4a:52:8d:b8:39:8b:50:98:48:63:ee:de:32:bc:fc:f3: dc:d3:70:7f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExZwmGfTof/PgUi8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyOTE3MjkyM1oXDTI2MDMyOTE2MjkyM1owLzEtMCsGA1UEAxMk OWE1YTc1OGQtYmJlNS00NzU4LWFkOGUtNzk1NmRhOTJiYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu8lNSyc0hLj2NZjn24H7GKoAyjh05dGdbvC jFY+3qto5urEsr2ubGWe1/NC/TAwYROVno1WokEcrbIDDzERzSFJy/8IeRGOLqC8 3eGAPHNjdb+HyTeaRkZQrYf5Fac3tePbgkvCUaTb7IEGkCIu/GYaPb/jFaFDly63 2FvMnbyERCiWuf0GZUGScLSdDHNOpMAahO1ohW/lf15tpx/b+jLK2cEj3EBNxGp/ 6AgcD3LNOlcUjNFZH9rJHEstFEqdG9lyQXYPQ51XnJzyuZ7G6xhcv28TOG98BU8R ExXcnEVllN8Iy1sxP64oSdrC0H5tFtPcb3oIdRT1c2ak9q7yhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDnLS7ftAZeP2DGbgB0csrt19QfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzJmMzNiM2YtNGY3MS0z MGYxLTlmNWMtNjVmMTEzNzRiMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBJpgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeptclsQAal0A5x/mCoeAR0L+bIAsuge+02BwwST6A/ebMLfO32GxykR6 vuU7l1UyrXzCicDsEXnnMyJhPVTzAl7UtrxwYdizIp7RrJrKJyGBdcMYvkSDS9dF MqM5QZm9KgkhXp3nQy0ub7SYXD/DE/yTBZyuzeO2mFUk70dtESysgwtMUpNVvcIF Ph0hOP+d7ix3V8YkZPXr3uWukwNMLvCNB5fmPftBt2bD9CY9DlykZ5mOkyfa5buR kh3OdMn2FPloSdiG1Tu8wUDWESeTN1ur2aLlwzGSR+NaIxm05wHF2CansTmD4EOH 3eJKUo24OYtQmEhj7t4yvPzz3NNwfw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client