This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json) Hash identifier: HuC21ngdX//TvcSXOh5XhBs5/4ebH8uFUun7EAOy3b0= Subject key identifier: 69:09:8E:D0:F7:F2:13:A2:B0:27:B3:A6:4E:30:E3:70:D6:23:73:BB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C24264B8E87B65E11ED880C80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.38.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:4b:8e:87:b6:5e:11:ed:88:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=c5886c2e-103b-4a19-b8b1-7ab5b0a3282f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:13:76:ca:f4:26:a5:5e:1d:8a:56:5b:f9:db: 76:7b:a9:42:c2:17:e8:ed:1e:12:c9:d5:59:e9:80: b3:0b:7b:b3:ff:2c:b7:89:2f:60:ef:ca:2d:ce:db: 06:c1:15:52:5b:44:7f:5b:20:16:45:d5:06:bc:e0: 40:5e:ec:ff:3e:c2:cf:6d:7c:93:ae:67:26:6e:54: 78:b9:7d:67:b2:ce:d3:6c:1d:4c:ab:7e:31:3c:07: 5b:d1:cb:22:2e:18:37:a7:2a:f5:40:55:1e:72:54: be:20:ef:8a:36:90:7e:b1:14:8d:d7:90:4f:33:a1: 50:de:84:a7:bd:dc:d9:47:5d:f5:bb:e6:64:49:28: fc:fc:45:05:67:0d:f7:2b:c5:79:96:3e:05:27:d1: fe:d4:ef:10:7a:08:18:9e:61:04:30:92:36:f8:ec: fd:34:a8:23:ff:31:9f:64:9b:9c:4c:c7:f6:3c:a3: 29:26:d2:70:cf:dd:92:61:b8:31:22:d0:6f:1d:c8: 5c:9c:5f:4d:24:8e:a8:af:0d:99:a1:c1:b0:24:d6: 16:35:e5:69:77:85:5f:86:1c:09:52:c1:94:d0:16: f2:d8:eb:cd:84:f1:68:af:64:f6:ef:4f:5e:77:7e: e9:73:51:6c:f4:7d:a7:6d:f6:2c:9f:19:1a:54:7b: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:8E:D0:F7:F2:13:A2:B0:27:B3:A6:4E:30:E3:70:D6:23:73:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f0:81:4f:cc:5f:4a:b6:95:b9:ab:ca:71:4b:d3:6a:dd:e5: 4d:b9:bb:9a:2f:65:7c:35:42:8a:06:85:6d:8d:2f:64:04:50: 27:3f:7b:6a:12:c2:a4:c6:66:83:36:5e:23:93:78:12:2d:fe: b4:b1:83:91:6a:e9:b2:7a:4a:9e:98:cf:b2:e9:4b:1e:75:d9: b4:aa:41:80:28:c0:b6:d8:5d:84:32:67:d6:1d:b8:a5:06:1f: 0c:dc:20:d6:95:6e:37:9d:53:a2:eb:5e:a9:36:a8:f1:b6:93: 93:b8:b4:69:7d:69:60:10:8c:06:9d:e0:43:61:8a:52:56:36: b5:53:69:a7:75:0b:fe:ee:d3:33:b7:be:07:df:4f:c2:f1:2f: b3:ac:21:8c:1b:d8:5d:d1:f7:cf:3c:77:63:b1:a2:3b:86:ab: 48:22:44:29:f1:26:2f:e5:92:99:34:73:3e:49:ce:7d:c2:d1: 70:11:14:00:df:b8:51:b1:f8:d3:94:8a:cb:84:b6:87:df:53: a4:a6:76:0a:80:73:59:76:48:b0:c9:fe:01:4f:ae:22:6f:28: 7f:31:f7:2c:42:21:cb:d8:1b:15:1d:7a:64:ab:1e:c0:ae:9c: c5:b9:e1:ca:c7:ab:a6:c3:4a:66:ce:dd:d9:d7:97:ac:47:bf: 7d:a8:4d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJkuOh7ZeEe2IDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk YzU4ODZjMmUtMTAzYi00YTE5LWI4YjEtN2FiNWIwYTMyODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihN2yvQmpV4dilZb+dt2e6lCwhfo7R4SydVZ 6YCzC3uz/yy3iS9g78otztsGwRVSW0R/WyAWRdUGvOBAXuz/PsLPbXyTrmcmblR4 uX1nss7TbB1Mq34xPAdb0csiLhg3pyr1QFUeclS+IO+KNpB+sRSN15BPM6FQ3oSn vdzZR131u+ZkSSj8/EUFZw33K8V5lj4FJ9H+1O8QeggYnmEEMJI2+Oz9NKgj/zGf ZJucTMf2PKMpJtJwz92SYbgxItBvHchcnF9NJI6orw2ZocGwJNYWNeVpd4VfhhwJ UsGU0Bby2OvNhPFor2T2709ed37pc1Fs9H2nbfYsnxkaVHsDiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkJjtD38hOisCezpk4w43DWI3O7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/wgU/MX0q2lbmrynFL02rd5U25u5ovZXw1QooGhW2NL2QEUCc/e2oS wqTGZoM2XiOTeBIt/rSxg5Fq6bJ6Sp6Yz7LpSx512bSqQYAowLbYXYQyZ9YduKUG HwzcINaVbjedU6LrXqk2qPG2k5O4tGl9aWAQjAad4ENhilJWNrVTaad1C/7u0zO3 vgffT8LxL7OsIYwb2F3R9888d2OxojuGq0giRCnxJi/lkpk0cz5Jzn3C0XARFADf uFGx+NOUisuEtoffU6SmdgqAc1l2SLDJ/gFPriJvKH8x9yxCIcvYGxUdemSrHsCu nMW54crHq6bDSmbO3dnXl6xHv32oTWs= -----END CERTIFICATE-----Generated at Sun Dec 14 11:32:11 2025 by rpki-client