This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa File: df0b34e2-e449-34cd-8b4f-82098402cffa.roa (raw, json) Hash identifier: R4TKZzvHivYc6mbsFdWyv1dtDDl6l9kFU7C3126yMAU= Subject key identifier: D1:EE:1B:E9:C0:3E:59:0C:20:0F:16:33:C5:FE:63:B1:A2:D9:DA:9D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BC59254130F611CC5DCA11A78 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa Signing time: Thu 06 Nov 2025 16:56:47 +0000 ROA not before: Thu 06 Nov 2025 16:56:47 +0000 ROA not after: Wed 04 Feb 2026 16:56:47 +0000 asID: 393436 IP address blocks: 38.20.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:92:54:13:0f:61:1c:c5:dc:a1:1a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 6 16:56:47 2025 GMT Not After : Feb 4 16:56:47 2026 GMT Subject: CN=10a14add-29e3-48c0-8ffb-bab154a35e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:31:17:ea:dd:dd:b1:f0:c5:91:ec:07:0a: e2:4b:c6:97:c5:21:ef:fa:09:32:ed:d4:12:09:cf: 23:53:be:67:13:79:b5:fb:42:13:39:aa:35:fa:68: b4:c1:41:05:34:8e:4f:a7:ba:8a:6d:c9:05:c0:c9: 5d:91:b9:39:5a:5c:d9:7f:21:ad:27:d7:f5:27:b8: 57:42:e7:07:46:d8:6f:fb:a2:25:10:da:1b:81:04: 0e:ec:81:35:a1:92:ed:ef:fc:dc:ba:92:4f:01:72: fd:28:5e:9e:0f:1d:ef:0c:5d:0d:20:47:ba:34:1c: 09:e7:5f:07:55:3b:fc:3d:db:d3:cd:c3:03:ec:57: 88:4b:3a:23:00:25:b6:d8:7e:03:0b:50:a8:55:38: 68:a5:bb:07:d7:1b:a1:33:c6:b6:de:f2:83:2e:d0: 56:81:16:81:be:20:86:01:46:0d:68:c2:28:a6:d5: 20:90:36:f0:ca:3c:28:b1:0a:a3:88:76:6b:bc:4e: 89:9f:fb:c6:b6:40:ad:a1:b4:3c:c8:b3:9c:73:f2: 76:e7:02:31:5b:a2:2e:b4:a3:24:65:5b:7a:3a:2d: 37:ed:ad:75:b6:5b:9f:63:cd:c1:d3:24:8c:24:4d: 3c:0c:18:8e:64:47:cc:25:9b:43:45:9e:e7:44:cf: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EE:1B:E9:C0:3E:59:0C:20:0F:16:33:C5:FE:63:B1:A2:D9:DA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:da:d9:bf:4c:42:93:fa:40:61:d6:d7:46:04:31:32:d7:35: cc:28:71:fa:53:2f:b5:6f:ad:aa:0a:cf:ce:93:57:07:75:20: 7d:b7:aa:55:24:fd:fa:d2:75:c7:ca:9c:70:67:05:7f:3c:7c: 17:8e:63:c3:1c:5b:2b:61:1b:e1:16:24:2f:c2:c3:c1:ff:0f: d8:4e:a1:28:34:f0:ae:e4:e5:46:8a:e6:ad:e7:5c:1b:6a:b6: 2a:6f:aa:81:bd:93:47:cf:8a:65:2b:37:58:95:4e:db:98:16: d5:6c:e6:87:0b:2a:66:cc:8b:c6:b8:0f:3f:4b:17:d3:e8:31: dd:e8:a0:b5:e7:69:ba:34:30:3c:69:5b:d9:9c:63:8a:ef:06: 8c:6b:89:f5:73:c1:de:58:98:39:a2:27:d1:fb:8b:1e:c0:1f: ed:78:f3:3b:29:5b:83:d2:5b:17:7c:d6:34:6c:33:a0:c1:c1: f1:bf:f8:eb:80:0c:a7:8b:0f:3e:87:19:48:30:54:bd:e4:ec: cf:61:e9:ec:69:52:6e:a8:01:1c:f0:40:30:65:08:3d:52:75: 71:44:02:bd:16:ab:70:4c:e7:d4:32:8a:4c:5b:b7:fd:b7:8e: f9:c7:57:16:0c:52:3f:b9:d8:0b:0c:bb:f4:05:8d:a3:15:7c: dc:30:cc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFklQTD2EcxdyhGngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwNjE2NTY0N1oXDTI2MDIwNDE2NTY0N1owLzEtMCsGA1UEAxMk MTBhMTRhZGQtMjllMy00OGMwLThmZmItYmFiMTU0YTM1ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7ExF+rd3bHwxZHsBwriS8aXxSHv+gky7dQS Cc8jU75nE3m1+0ITOao1+mi0wUEFNI5Pp7qKbckFwMldkbk5WlzZfyGtJ9f1J7hX QucHRthv+6IlENobgQQO7IE1oZLt7/zcupJPAXL9KF6eDx3vDF0NIEe6NBwJ518H VTv8PdvTzcMD7FeISzojACW22H4DC1CoVThopbsH1xuhM8a23vKDLtBWgRaBviCG AUYNaMIoptUgkDbwyjwosQqjiHZrvE6Jn/vGtkCtobQ8yLOcc/J25wIxW6IutKMk ZVt6Oi037a11tlufY83B0ySMJE08DBiOZEfMJZtDRZ7nRM/WMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHuG+nAPlkMIA8WM8X+Y7Gi2dqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGYwYjM0ZTItZTQ0OS0z NGNkLThiNGYtODIwOTg0MDJjZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITa2b9MQpP6QGHW10YEMTLXNcwocfpTL7VvraoKz86TVwd1IH23qlUk /frSdcfKnHBnBX88fBeOY8McWythG+EWJC/Cw8H/D9hOoSg08K7k5UaK5q3nXBtq tipvqoG9k0fPimUrN1iVTtuYFtVs5ocLKmbMi8a4Dz9LF9PoMd3ooLXnabo0MDxp W9mcY4rvBoxrifVzwd5YmDmiJ9H7ix7AH+148zspW4PSWxd81jRsM6DBwfG/+OuA DKeLDz6HGUgwVL3k7M9h6expUm6oARzwQDBlCD1SdXFEAr0Wq3BM59Qyikxbt/23 jvnHVxYMUj+52AsMu/QFjaMVfNwwzKo= -----END CERTIFICATE-----Generated at Tue Nov 25 12:55:27 2025 by rpki-client