This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa File: 27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa (raw, json) Hash identifier: l98YzRbYf5A2k4MH5cW2bfXnl/Oy8y3tf2hobV7lj+Y= Subject key identifier: C5:37:7D:75:B6:26:DE:97:A5:23:4F:4C:8D:C7:8F:96:1C:A3:B9:9D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C24263E2F243F25EC97CE2540 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.38.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:3e:2f:24:3f:25:ec:97:ce:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=8af2a271-b2cc-45cb-b743-9895a0b2dba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:e9:e9:c7:54:69:95:a1:04:a2:a3:c7:16: 5d:11:60:ce:0f:56:50:18:db:5f:16:ee:23:33:f7: df:25:74:03:f5:21:3c:c9:15:46:9e:a4:14:eb:85: 80:df:81:4b:ec:0b:71:d1:4f:ab:e4:53:66:0e:a3: c8:61:a5:37:16:e7:63:07:de:71:ed:41:6c:a1:c1: e1:32:f8:a8:2f:de:01:ac:1a:45:03:df:42:19:4e: 50:94:ff:20:3c:cf:fb:05:65:2d:0a:80:9a:26:53: 93:68:24:b3:2f:23:42:23:2c:a5:21:4a:39:0d:e9: 26:2e:c7:7e:b2:73:98:3d:76:76:10:a5:86:e6:e4: 30:a6:3d:6b:96:aa:f8:65:ef:bc:e2:55:1c:83:3d: 5b:70:52:b4:ae:3a:88:53:de:8f:d4:d1:46:5f:6f: c4:b3:a6:65:32:ee:a7:e2:25:44:c4:dc:a6:48:2a: c0:1b:05:e6:d8:97:d8:ce:63:7e:18:6b:5b:93:93: 06:df:17:ca:ca:da:70:fc:92:d8:70:21:b4:95:4e: 7a:22:fb:81:88:4b:46:90:83:05:24:f0:29:07:db: d4:bc:a0:5b:a2:ab:a3:94:46:b3:c9:ab:da:c6:f4: 09:13:dc:6a:4a:02:13:4e:51:d8:6b:05:d0:66:89: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:7D:75:B6:26:DE:97:A5:23:4F:4C:8D:C7:8F:96:1C:A3:B9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d2:49:3f:9a:0b:e1:83:6f:22:f9:0a:18:c4:ec:84:04:25: 2a:30:c7:3c:b7:f1:19:63:3a:1c:20:48:cf:5b:bb:03:b8:2e: 0c:51:bc:6f:3f:4f:a7:b6:b4:98:1f:3e:de:3f:ac:e0:78:57: af:04:54:22:18:d5:f1:80:d4:d0:69:b4:82:20:47:9b:1f:35: 1e:70:c6:74:f6:5b:37:e8:3c:09:d1:e1:0b:b6:47:cf:d0:e5: 69:14:e2:67:26:90:7d:a3:38:ed:84:62:0a:ee:9f:f1:35:ea: fc:3a:46:71:55:e1:71:d8:fa:b9:2b:a1:df:d6:11:b7:78:3f: 3a:0a:f2:d4:86:0a:f4:33:e0:b6:b5:d6:20:ec:38:0f:1c:03: cb:0a:3c:d2:c3:f1:9a:d1:0e:b0:4e:0d:a1:44:56:b6:d7:17: 1f:cb:1a:af:fd:34:e2:d3:92:02:45:0d:c5:af:b9:d4:00:c1: 1e:d9:3e:9c:da:cd:ca:6d:98:45:1e:21:53:63:ba:74:6e:f4: 48:ba:fc:75:30:93:3f:ce:f8:22:f6:7c:18:48:67:f5:56:c4: 4d:6f:d9:21:c9:eb:f0:76:8c:93:6a:d3:44:23:86:e6:e4:ff: 05:23:ac:45:d1:80:b8:f0:12:0f:c0:6a:cb:60:bd:4e:69:f7: da:d2:42:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJj4vJD8l7JfOJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk OGFmMmEyNzEtYjJjYy00NWNiLWI3NDMtOTg5NWEwYjJkYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizp6cdUaZWhBKKjxxZdEWDOD1ZQGNtfFu4j M/ffJXQD9SE8yRVGnqQU64WA34FL7Atx0U+r5FNmDqPIYaU3FudjB95x7UFsocHh MvioL94BrBpFA99CGU5QlP8gPM/7BWUtCoCaJlOTaCSzLyNCIyylIUo5DekmLsd+ snOYPXZ2EKWG5uQwpj1rlqr4Ze+84lUcgz1bcFK0rjqIU96P1NFGX2/Es6ZlMu6n 4iVExNymSCrAGwXm2JfYzmN+GGtbk5MG3xfKytpw/JLYcCG0lU56IvuBiEtGkIMF JPApB9vUvKBboqujlEazyavaxvQJE9xqSgITTlHYawXQZolT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU3fXW2Jt6XpSNPTI3Hj5Yco7mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjdmZjUzMTEtYTkxNS0z ZTA5LWE5YWUtODNiOGE1MzliYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3SST+aC+GDbyL5ChjE7IQEJSowxzy38RljOhwgSM9buwO4LgxRvG8/ T6e2tJgfPt4/rOB4V68EVCIY1fGA1NBptIIgR5sfNR5wxnT2WzfoPAnR4Qu2R8/Q 5WkU4mcmkH2jOO2EYgrun/E16vw6RnFV4XHY+rkrod/WEbd4PzoK8tSGCvQz4La1 1iDsOA8cA8sKPNLD8ZrRDrBODaFEVrbXFx/LGq/9NOLTkgJFDcWvudQAwR7ZPpza zcptmEUeIVNjunRu9Ei6/HUwkz/O+CL2fBhIZ/VWxE1v2SHJ6/B2jJNq00Qjhubk /wUjrEXRgLjwEg/AastgvU5p99rSQmE= -----END CERTIFICATE-----Generated at Sun Dec 14 11:31:45 2025 by rpki-client