This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa File: c95fb5c3-2144-398e-85fe-c1526af5435d.roa (raw, json) Hash identifier: /FNpBxKc/JONn+j6UeyD+DRQCgZqkMScmfwFyBYqTc8= Subject key identifier: 27:80:D9:7E:75:E3:BA:40:02:4B:60:74:90:B8:45:DD:84:94:92:C0 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584BD8C5C917F86FC9944E187880 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 8075 IP address blocks: 138.32.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:c9:17:f8:6f:c9:94:4e:18:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=657f2368-9e5f-4e09-b10a-861dbd05092c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:aa:a4:3b:c5:cc:04:84:0c:51:74:2d:7a: 6e:22:f4:9a:b8:9c:d5:61:d7:1e:aa:b8:82:b8:5f: 89:15:f6:55:56:83:c1:89:2a:bd:57:a9:f4:25:2a: ab:98:2d:52:24:d6:8d:2e:75:31:ae:e8:90:da:81: 40:65:b8:a8:02:d9:f2:13:be:9c:06:c0:d4:bf:5c: ec:15:90:dc:d8:04:bf:80:08:0f:9b:a1:52:23:e7: 7c:fe:50:df:d5:4a:99:a2:c4:89:89:d2:db:99:32: 35:21:1c:6e:ef:54:a5:17:c6:0a:86:13:0c:70:48: d5:11:44:84:da:d9:4a:66:bc:d8:5d:df:5a:59:6c: 17:58:71:b8:8e:5e:e4:4c:36:1a:b2:3b:6a:81:a4: 32:e9:7c:aa:b7:dc:cb:d5:94:1c:86:e8:2a:0b:64: a0:57:af:d1:fa:da:00:b6:3f:d2:0b:f2:05:8a:f3: 76:20:73:28:25:c3:d4:72:7c:70:10:e7:de:e2:32: 06:7f:d7:ea:f0:e4:78:fc:5e:08:b6:7b:ea:86:89: 0a:84:60:74:57:54:9d:57:e1:3d:d7:cd:26:eb:52: 25:00:4d:ae:cf:89:ed:fe:8c:8c:c2:bb:83:fd:35: 2e:a2:3e:2d:02:bd:c6:bd:39:e5:d8:99:80:b9:3e: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:80:D9:7E:75:E3:BA:40:02:4B:60:74:90:B8:45:DD:84:94:92:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:3d:cc:d8:9f:c0:2c:39:58:70:09:3f:73:b8:15:ff:93:de: 2c:9b:52:82:0b:3a:30:fd:7b:2b:26:a3:ca:d3:78:a3:7e:ca: 14:cc:21:b6:53:3f:cb:86:d4:81:21:b6:da:bb:8f:ea:2b:ac: e1:0f:54:78:10:e1:5f:e7:1c:c6:68:98:1d:44:15:54:86:78: 7f:5f:0d:b8:ec:f7:6b:8c:58:e3:52:9a:3f:b3:14:01:09:a1: 12:0d:93:20:98:42:49:7b:92:bf:da:5f:7a:8a:51:ca:73:97: 83:ab:29:36:4b:a1:05:ab:89:78:66:e8:38:fc:2c:a3:b4:f8: 95:aa:31:ff:52:fa:93:19:94:96:e0:f5:58:52:5f:59:37:2a: 72:d6:e7:bd:cc:fc:06:a7:42:ff:d3:68:54:0c:b4:08:18:6c: f9:31:a5:b2:93:13:fe:ec:dc:f3:87:62:da:ab:05:05:f5:67: 75:39:37:5f:62:fb:df:38:7e:ba:18:49:ce:ae:d3:f9:a2:d8: dc:bf:95:fb:48:f9:d3:c9:6a:8a:08:1b:d3:00:7b:6f:a4:8e: 3b:96:bb:8a:a0:2f:38:a2:22:f8:49:21:f4:fc:3a:52:72:4f: bb:08:41:7a:22:a1:bc:7e:c7:c4:0f:3f:1e:3c:02:f0:4d:68: 43:a6:1d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxckX+G/JlE4YeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk NjU3ZjIzNjgtOWU1Zi00ZTA5LWIxMGEtODYxZGJkMDUwOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4iqpDvFzASEDFF0LXpuIvSauJzVYdceqriC uF+JFfZVVoPBiSq9V6n0JSqrmC1SJNaNLnUxruiQ2oFAZbioAtnyE76cBsDUv1zs FZDc2AS/gAgPm6FSI+d8/lDf1UqZosSJidLbmTI1IRxu71SlF8YKhhMMcEjVEUSE 2tlKZrzYXd9aWWwXWHG4jl7kTDYasjtqgaQy6Xyqt9zL1ZQchugqC2SgV6/R+toA tj/SC/IFivN2IHMoJcPUcnxwEOfe4jIGf9fq8OR4/F4ItnvqhokKhGB0V1SdV+E9 180m61IlAE2uz4nt/oyMwruD/TUuoj4tAr3GvTnl2JmAuT5bswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeA2X5147pAAktgdJC4Rd2ElJLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYzk1ZmI1YzMtMjE0NC0z OThlLTg1ZmUtYzE1MjZhZjU0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY9zNifwCw5WHAJP3O4Ff+T3iybUoILOjD9eysmo8rTeKN+yhTMIbZT P8uG1IEhttq7j+orrOEPVHgQ4V/nHMZomB1EFVSGeH9fDbjs92uMWONSmj+zFAEJ oRINkyCYQkl7kr/aX3qKUcpzl4OrKTZLoQWriXhm6Dj8LKO0+JWqMf9S+pMZlJbg 9VhSX1k3KnLW573M/AanQv/TaFQMtAgYbPkxpbKTE/7s3POHYtqrBQX1Z3U5N19i +984froYSc6u0/mi2Ny/lftI+dPJaooIG9MAe2+kjjuWu4qgLziiIvhJIfT8OlJy T7sIQXoiobx+x8QPPx48AvBNaEOmHZk= -----END CERTIFICATE-----Generated at Thu Dec 4 10:28:20 2025 by rpki-client