This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa File: 00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa (raw, json) Hash identifier: 5KTOfjb+roeJJ/68ePaClf0iMVWQ/nZdcjPlOb7Y0cA= Subject key identifier: 15:43:11:3F:E3:62:76:99:63:94:DD:C3:93:AF:C6:2C:56:18:DF:B8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BD065B93C8904C2B5B46DE5C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 138.1.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b9:3c:89:04:c2:b5:b4:6d:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=e6fd7771-df6c-43f5-a00c-8e30cea26e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:f3:6a:2c:11:77:48:88:c8:90:81:85:de: 20:e9:ae:45:52:72:c9:7a:b0:21:7e:e8:f5:8a:d6: 27:cc:f2:64:1b:02:e3:86:01:25:90:08:38:19:13: 3e:d5:fb:5d:f0:cb:49:4a:fb:5d:95:63:45:5e:dd: dd:68:b8:54:43:f7:22:21:93:5a:1d:6a:19:b8:19: 8e:69:76:d8:1a:81:3a:c3:1b:2e:a1:bb:36:a8:ab: 13:c0:fe:ae:de:c9:66:70:f6:43:2a:16:53:ce:0b: 4d:d1:67:81:b6:33:18:6d:1a:96:fb:4b:ca:5d:6c: a3:bf:52:f5:28:b7:e5:2c:30:13:86:36:b8:8e:eb: f3:ca:40:f0:49:cb:ea:22:5d:6e:e3:bf:f1:aa:59: 3d:24:83:6a:97:16:74:ea:a6:72:42:0e:c7:81:59: 0f:50:b1:97:ce:67:ee:57:3e:34:53:46:5b:e2:6f: 6a:a0:e0:32:67:c2:04:9a:76:85:1d:a5:07:1f:8e: 4b:d7:42:07:c4:48:87:d9:92:0f:6c:9c:c6:79:fd: ca:d1:b0:14:ff:80:71:eb:c3:2e:79:c3:f9:d8:70: 3b:17:a6:1f:6b:03:f9:6d:2b:ac:53:90:7c:7d:a8: ec:3e:01:ad:04:c1:c7:50:6c:31:d6:29:c9:33:f6: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:43:11:3F:E3:62:76:99:63:94:DD:C3:93:AF:C6:2C:56:18:DF:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1a:75:02:9a:ef:cb:7c:ec:af:66:56:91:4f:fd:90:cc:ae: 72:da:3a:42:5c:26:a3:7a:72:b1:eb:17:6c:e1:95:c7:4d:1c: ac:dc:e2:f4:83:a3:38:da:fc:a9:bb:29:b9:11:c5:a7:d5:7b: 51:2c:17:06:36:44:b3:52:ee:78:af:6c:30:f0:79:b4:4e:db: 71:f9:a1:44:e9:6b:24:8f:9b:0d:e5:54:33:8f:f1:fe:f4:03: d7:60:50:5e:58:82:9d:dc:33:62:48:c9:7d:30:d7:da:a7:23: d3:e1:b5:a9:19:49:e4:03:ff:86:38:7a:fc:ba:e0:f6:7b:9e: e3:70:44:0f:12:55:62:41:3f:c7:91:ca:47:a0:88:f9:75:45: 29:cd:a5:30:ab:a4:61:78:14:af:a2:df:d9:61:11:91:78:35: 6d:e5:91:86:bd:a0:e5:11:c2:9d:49:cc:8e:98:3f:b8:6d:d2: 47:1d:80:99:41:59:44:1f:6a:23:5f:00:a0:eb:88:08:9d:7e: 53:26:56:b5:7c:24:48:0b:23:15:fd:05:74:c1:f2:be:c9:e9: 35:e5:4a:af:57:8d:1a:3f:59:3c:4e:4b:62:99:ca:b4:e4:9d: 95:32:ce:c4:82:a2:aa:2c:0c:3e:63:10:c3:57:16:9a:7b:f0: 1a:20:48:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbk8iQTCtbRt5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk ZTZmZDc3NzEtZGY2Yy00M2Y1LWEwMGMtOGUzMGNlYTI2ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/zaiwRd0iIyJCBhd4g6a5FUnLJerAhfuj1 itYnzPJkGwLjhgElkAg4GRM+1ftd8MtJSvtdlWNFXt3daLhUQ/ciIZNaHWoZuBmO aXbYGoE6wxsuobs2qKsTwP6u3slmcPZDKhZTzgtN0WeBtjMYbRqW+0vKXWyjv1L1 KLflLDAThja4juvzykDwScvqIl1u47/xqlk9JINqlxZ06qZyQg7HgVkPULGXzmfu Vz40U0Zb4m9qoOAyZ8IEmnaFHaUHH45L10IHxEiH2ZIPbJzGef3K0bAU/4Bx68Mu ecP52HA7F6YfawP5bSusU5B8fajsPgGtBMHHUGwx1inJM/aC+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVDET/jYnaZY5Tdw5OvxixWGN+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDBkMGI2YTItMmI4Ny0z MWY5LWEzMzctM2EzZGM1NjQ3ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYadQKa78t87K9mVpFP/ZDMrnLaOkJcJqN6crHrF2zhlcdNHKzc4vSD ozja/Km7KbkRxafVe1EsFwY2RLNS7nivbDDwebRO23H5oUTpaySPmw3lVDOP8f70 A9dgUF5Ygp3cM2JIyX0w19qnI9PhtakZSeQD/4Y4evy64PZ7nuNwRA8SVWJBP8eR ykegiPl1RSnNpTCrpGF4FK+i39lhEZF4NW3lkYa9oOURwp1JzI6YP7ht0kcdgJlB WUQfaiNfAKDriAidflMmVrV8JEgLIxX9BXTB8r7J6TXlSq9XjRo/WTxOS2KZyrTk nZUyzsSCoqosDD5jEMNXFpp78BogSNs= -----END CERTIFICATE-----Generated at Sat Nov 22 21:26:52 2025 by rpki-client