This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa File: 24b3e43b-3b83-3437-be0d-021a80ce94df.roa (raw, json) Hash identifier: UlRAVb2fWG718FG4FrB7EfYRHvPfT64F1ZuHO6ltbfw= Subject key identifier: 98:2A:AC:EC:D7:8C:D3:51:B9:B4:DE:6A:E5:7D:E6:52:0F:BF:66:CD Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584BD3306885C14C8A96899DF380 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8075 IP address blocks: 138.32.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:68:85:c1:4c:8a:96:89:9d:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=1f3f324f-6ab9-4d03-aac1-efeae6e1ecb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:1c:36:40:74:ca:52:35:81:c1:cb:2c:2e: 29:bc:62:1a:43:7f:2a:fa:34:3d:00:e8:aa:a7:36: f1:74:0b:82:3b:64:8e:56:3f:31:fb:82:10:63:26: 65:af:52:8c:9a:e1:ff:46:fd:2b:73:90:e7:25:66: a0:6a:ea:96:8a:bc:80:7d:b8:f6:98:95:29:44:8d: b3:eb:d5:2d:55:bb:b8:85:c2:f4:2b:ef:4c:fd:52: 97:83:92:69:ec:5c:6a:d1:96:4c:05:3d:43:da:65: df:8c:09:a6:96:dd:f9:ca:c3:c1:51:ab:f9:29:e0: 8f:3f:e8:17:a0:65:f2:93:d9:df:c5:11:51:78:60: 81:05:1c:c2:6c:2b:98:7b:16:12:a9:25:f6:78:7e: f3:5c:5d:89:c5:92:b9:9d:98:5c:00:ed:0e:f0:4c: e6:9b:66:72:75:b2:58:5b:76:1e:03:ae:cc:05:86: 84:2e:c2:54:42:98:0a:cb:44:56:92:2d:f6:de:cf: cf:fc:ba:1d:99:f1:73:c3:a6:82:1b:34:07:b2:14: 29:d5:b6:c5:15:c7:b1:1d:0f:c4:f6:76:44:2f:85: b2:89:02:d0:a0:c0:30:8f:e4:4a:6f:6e:77:70:5f: e0:3d:57:6b:6e:4d:f4:f0:84:73:6f:55:27:c9:dd: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2A:AC:EC:D7:8C:D3:51:B9:B4:DE:6A:E5:7D:E6:52:0F:BF:66:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cf:44:6e:ff:0c:f4:85:51:ae:75:bd:e2:b0:fe:90:82:89: d3:8a:04:b6:22:54:37:ee:86:43:3e:0d:ec:fa:a1:01:d9:48: dd:61:da:b6:e3:c1:2f:99:cf:9a:fb:0a:f7:9c:a5:e2:91:83: a8:9c:33:fe:eb:53:f9:ce:6f:c3:75:77:58:89:03:bf:c1:90: 5e:0d:d4:56:55:c3:0c:ff:21:98:92:93:92:cf:36:ed:0d:14: a9:b5:95:08:50:b9:09:8d:00:bd:18:bf:eb:50:2f:28:a2:74: b5:8f:d5:3f:1c:db:08:00:e4:33:4c:8b:09:a6:48:df:ca:a1: bd:4c:f8:a5:e2:9c:84:8b:82:5f:55:70:4a:60:cd:80:5d:05: 50:13:a1:4d:28:2f:11:cc:8c:40:d8:9b:09:8a:5b:24:66:c6: 5b:ad:35:45:4a:e1:22:eb:71:57:92:b1:4a:a9:37:0b:f0:d7: 03:21:d7:7a:85:1e:15:6f:3f:f9:c7:4f:e7:55:5c:f6:0b:17: fb:0f:6f:e0:46:1a:15:15:a9:0f:52:3a:16:a6:88:dd:58:97: f4:e2:f9:54:1d:e7:69:dc:37:d0:56:3b:82:f1:11:91:35:b1: 54:42:64:8f:98:27:32:e4:fa:6e:8d:82:e4:dc:e0:6e:45:08: 66:ea:d1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGiFwUyKlomd84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MWYzZjMyNGYtNmFiOS00ZDAzLWFhYzEtZWZlYWU2ZTFlY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxQcNkB0ylI1gcHLLC4pvGIaQ38q+jQ9AOiq pzbxdAuCO2SOVj8x+4IQYyZlr1KMmuH/Rv0rc5DnJWagauqWiryAfbj2mJUpRI2z 69UtVbu4hcL0K+9M/VKXg5Jp7Fxq0ZZMBT1D2mXfjAmmlt35ysPBUav5KeCPP+gX oGXyk9nfxRFReGCBBRzCbCuYexYSqSX2eH7zXF2JxZK5nZhcAO0O8Ezmm2ZydbJY W3YeA67MBYaELsJUQpgKy0RWki323s/P/LodmfFzw6aCGzQHshQp1bbFFcexHQ/E 9nZEL4WyiQLQoMAwj+RKb253cF/gPVdrbk308IRzb1Unyd0pMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgqrOzXjNNRubTeauV95lIPv2bNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjRiM2U0M2ItM2I4My0z NDM3LWJlMGQtMDIxYTgwY2U5NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXPRG7/DPSFUa51veKw/pCCidOKBLYiVDfuhkM+Dez6oQHZSN1h2rbj wS+Zz5r7CvecpeKRg6icM/7rU/nOb8N1d1iJA7/BkF4N1FZVwwz/IZiSk5LPNu0N FKm1lQhQuQmNAL0Yv+tQLyiidLWP1T8c2wgA5DNMiwmmSN/Kob1M+KXinISLgl9V cEpgzYBdBVAToU0oLxHMjEDYmwmKWyRmxlutNUVK4SLrcVeSsUqpNwvw1wMh13qF HhVvP/nHT+dVXPYLF/sPb+BGGhUVqQ9SOhamiN1Yl/Ti+VQd52ncN9BWO4LxEZE1 sVRCZI+YJzLk+m6NguTc4G5FCGbq0aA= -----END CERTIFICATE-----Generated at Thu Dec 4 10:28:29 2025 by rpki-client