This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa File: c5fc81ee-cef8-394c-aced-571403f6b317.roa (raw, json) Hash identifier: sRv8DqBJmDadPR7uEHljh6o+Tu8GzPINXvbZucNnL28= Subject key identifier: 1F:8F:AE:10:5B:1E:E2:48:F7:DE:21:62:65:D8:4D:96:F7:A4:33:A1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C326108DAD87FADCD9C276500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa Signing time: Mon 15 Dec 2025 16:20:34 +0000 ROA not before: Mon 15 Dec 2025 16:20:34 +0000 ROA not after: Sun 15 Mar 2026 15:20:34 +0000 asID: 132156 IP address blocks: 38.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:61:08:da:d8:7f:ad:cd:9c:27:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 15 16:20:34 2025 GMT Not After : Mar 15 15:20:34 2026 GMT Subject: CN=41042061-f206-4b99-bad2-4aad5cfa61de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:8a:5b:2b:16:0f:ee:20:fc:e6:9f:4f:1c: c9:4a:71:0a:95:3b:f2:f4:22:9d:aa:37:57:a1:2f: fa:93:d8:81:4a:4b:b7:55:42:eb:7f:1d:f8:c0:16: e3:55:a4:90:ca:79:75:09:cb:0c:a7:b0:10:05:f7: 79:0f:18:b6:a1:e9:0a:6e:b7:a4:b3:ed:d9:c5:ad: 0c:6f:07:7e:52:bf:ec:7b:98:1b:4a:dd:73:05:31: f0:5e:c3:0e:2f:bf:7f:9d:7c:e2:b6:32:d7:e3:35: 47:e3:c6:34:50:4f:5f:64:28:49:5d:c3:4a:da:9f: 19:5b:42:f0:56:36:46:b9:d4:f0:32:ab:66:e4:bd: d7:63:22:21:b7:e9:0b:fd:0a:ca:2a:68:b0:2b:1d: 2a:aa:c3:3e:44:c1:0a:87:ca:9f:45:f6:fd:39:3c: e3:d9:7f:ec:ea:5c:ce:73:f8:62:c5:2a:2d:7d:ba: 4c:d5:b3:78:76:61:44:ba:81:21:4a:d7:92:59:95: 4d:08:ca:ab:3f:46:d0:b9:62:43:0f:b3:38:ec:50: 3d:61:e1:4e:a3:09:65:ca:40:06:38:cc:41:73:64: 7d:31:8c:25:0a:d6:92:1e:d7:b5:20:0a:ad:26:6e: cb:dc:73:ee:f3:e7:ff:d0:9a:03:a9:89:06:6f:72: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:AE:10:5B:1E:E2:48:F7:DE:21:62:65:D8:4D:96:F7:A4:33:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0d:0c:9b:90:8d:19:19:51:f4:fe:e3:25:66:15:e3:c7:44: 15:cd:41:f5:32:07:40:36:53:07:4a:91:2c:cd:4e:17:e6:6f: 82:57:c4:31:25:80:98:84:f1:6f:b0:e7:66:a5:3a:c1:b0:46: af:83:f7:1f:54:05:e9:e5:69:9c:f5:30:17:9c:ed:48:87:44: 6e:81:e6:ef:79:64:3c:87:f3:15:91:2f:be:8e:c0:a8:40:84: cf:17:23:f3:f3:94:2b:de:c6:1d:28:a4:8a:6a:0f:e4:17:48: cf:1e:ea:19:ec:7b:32:b0:a8:3d:bb:d9:51:7b:4d:e3:9d:b5: 9d:ef:a1:d8:ec:ec:bd:55:44:3a:25:d3:fa:4f:83:d2:db:ab: 76:8a:8b:cb:94:aa:46:db:7e:43:fc:f4:53:f8:f6:dd:ca:21: 96:58:29:d2:49:3a:5b:cd:16:46:71:76:e7:f9:a1:66:89:b8: f2:e1:34:c1:4d:8b:5f:f1:64:f2:e6:97:ff:ff:85:83:b8:32: e6:34:63:5a:ea:0d:d2:26:26:a2:99:c5:b2:c5:c3:c7:53:c1: 7e:a6:ac:66:d9:ad:1c:7d:32:84:91:c3:c0:cc:11:f6:56:98: a3:ac:cd:66:46:8a:93:3a:52:18:eb:7c:0a:2c:1c:ce:d3:d1: d8:f6:33:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwyYQja2H+tzZwnZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxNTE2MjAzNFoXDTI2MDMxNTE1MjAzNFowLzEtMCsGA1UEAxMk NDEwNDIwNjEtZjIwNi00Yjk5LWJhZDItNGFhZDVjZmE2MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMGKWysWD+4g/OafTxzJSnEKlTvy9CKdqjdX oS/6k9iBSku3VULrfx34wBbjVaSQynl1CcsMp7AQBfd5Dxi2oekKbreks+3Zxa0M bwd+Ur/se5gbSt1zBTHwXsMOL79/nXzitjLX4zVH48Y0UE9fZChJXcNK2p8ZW0Lw VjZGudTwMqtm5L3XYyIht+kL/QrKKmiwKx0qqsM+RMEKh8qfRfb9OTzj2X/s6lzO c/hixSotfbpM1bN4dmFEuoEhSteSWZVNCMqrP0bQuWJDD7M47FA9YeFOowllykAG OMxBc2R9MYwlCtaSHte1IAqtJm7L3HPu8+f/0JoDqYkGb3IApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+PrhBbHuJI994hYmXYTZb3pDOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVmYzgxZWUtY2VmOC0z OTRjLWFjZWQtNTcxNDAzZjZiMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8NDJuQjRkZUfT+4yVmFePHRBXNQfUyB0A2UwdKkSzNThfmb4JXxDEl gJiE8W+w52alOsGwRq+D9x9UBenlaZz1MBec7UiHRG6B5u95ZDyH8xWRL76OwKhA hM8XI/PzlCvexh0opIpqD+QXSM8e6hnsezKwqD272VF7TeOdtZ3vodjs7L1VRDol 0/pPg9Lbq3aKi8uUqkbbfkP89FP49t3KIZZYKdJJOlvNFkZxduf5oWaJuPLhNMFN i1/xZPLml///hYO4MuY0Y1rqDdImJqKZxbLFw8dTwX6mrGbZrRx9MoSRw8DMEfZW mKOszWZGipM6UhjrfAosHM7T0dj2Mwg= -----END CERTIFICATE-----Generated at Tue Dec 16 07:24:59 2025 by rpki-client