This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa File: 064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa (raw, json) Hash identifier: cQ6VchwLg+jlBCUjFX9lVxLjTaBaHttvnqJEmPZKpfI= Subject key identifier: 2E:0D:33:FD:70:DB:2C:95:24:76:FF:9C:B3:45:DC:90:F2:DC:74:41 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BCF0061D5BA9E07E6E47A5280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 138.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:61:d5:ba:9e:07:e6:e4:7a:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=51d9214f-edf7-49ed-9f82-1deb375955e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:0b:94:bb:43:b4:c0:fa:52:33:54:92:db: 23:52:35:48:48:e3:67:61:d2:52:7d:cc:6c:4d:e8: 1f:f5:ee:01:40:1c:ad:0c:bf:10:39:9d:e9:66:ae: 1a:ee:ff:3c:66:2d:6b:d7:e0:16:8a:9f:14:3d:d4: ee:62:ac:42:07:d5:a1:b9:fa:b9:07:1d:2f:57:95: ad:f2:df:95:e0:76:85:8b:bd:eb:20:0e:ce:53:95: f1:b9:dd:cf:cb:ff:a9:eb:9e:95:6e:ab:7e:b0:0c: 72:72:5c:da:2e:43:21:67:4e:73:c0:4e:34:45:22: 77:a0:62:5a:6b:e7:1d:08:93:ce:2f:39:8b:96:d6: b1:e3:97:95:1a:04:b8:ac:cc:8b:0e:4d:5f:ec:ed: dc:ba:90:63:44:a6:d6:1f:62:05:8d:c4:a8:a3:cb: 83:bc:dd:b7:64:ad:09:1f:d8:c2:f5:cd:db:b6:2a: bb:a2:1c:27:02:cb:b8:37:77:2f:ce:e8:f7:24:3f: e8:d4:c4:f5:db:28:09:27:5e:b9:af:35:31:df:d4: c1:5a:eb:72:b5:c6:7e:27:67:0f:9d:49:34:5e:6f: ac:c6:01:71:e1:d4:43:96:3c:80:ed:ea:57:a6:67: b1:77:9f:fc:11:1b:77:2c:71:7f:70:87:d5:8f:41: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0D:33:FD:70:DB:2C:95:24:76:FF:9C:B3:45:DC:90:F2:DC:74:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:27:e7:8c:6d:eb:fe:02:77:82:58:7c:12:f7:b8:cd:06:66: be:3e:04:1c:d3:f7:64:5e:b4:d1:4d:dd:ba:e0:d9:2e:86:9e: 10:17:12:cf:fb:9e:5f:3c:85:0e:df:80:4e:a7:73:a0:95:e2: d3:68:6a:c0:4a:45:83:97:95:93:81:29:98:70:c2:84:04:61: 26:13:b7:94:40:76:f1:8d:95:b3:92:0f:bc:ef:74:40:62:3a: 74:c4:ba:6a:96:f1:a6:90:0f:6b:92:be:21:1a:ac:25:8b:4e: 94:08:48:36:38:93:25:72:f5:42:57:4e:79:a5:c4:c4:38:20: 80:ca:d6:c9:80:c4:2f:88:55:af:03:68:22:60:df:fd:12:5e: 2d:07:1e:8a:34:46:39:ed:a8:45:84:a6:24:28:a9:6c:dd:0f: 7e:e9:78:5b:b3:22:22:8a:46:36:ca:ee:70:68:aa:cb:ea:60: 5d:d7:bc:f9:1a:d9:d8:69:b1:e9:a5:e0:14:5a:54:ed:bb:77: 3c:4d:9b:c5:92:75:87:ac:d2:92:4e:1d:32:53:57:84:5e:d7: 9b:e3:50:1f:8a:75:97:c3:44:11:af:ed:06:7d:77:a3:7a:17: 76:ea:7c:35:57:dc:2e:3b:db:ba:6f:3f:fd:e4:4d:73:aa:e4: 52:6c:00:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGHVup4H5uR6UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk NTFkOTIxNGYtZWRmNy00OWVkLTlmODItMWRlYjM3NTk1NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxoLlLtDtMD6UjNUktsjUjVISONnYdJSfcxs Tegf9e4BQBytDL8QOZ3pZq4a7v88Zi1r1+AWip8UPdTuYqxCB9Whufq5Bx0vV5Wt 8t+V4HaFi73rIA7OU5Xxud3Py/+p656Vbqt+sAxyclzaLkMhZ05zwE40RSJ3oGJa a+cdCJPOLzmLltax45eVGgS4rMyLDk1f7O3cupBjRKbWH2IFjcSoo8uDvN23ZK0J H9jC9c3btiq7ohwnAsu4N3cvzuj3JD/o1MT12ygJJ165rzUx39TBWutytcZ+J2cP nUk0Xm+sxgFx4dRDljyA7epXpmexd5/8ERt3LHF/cIfVj0FHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4NM/1w2yyVJHb/nLNF3JDy3HRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDY0ZjMxY2ItYjhlZC0z NzYxLTk2NmUtZDEzMDZmN2EzYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQn54xt6/4Cd4JYfBL3uM0GZr4+BBzT92RetNFN3brg2S6GnhAXEs/7 nl88hQ7fgE6nc6CV4tNoasBKRYOXlZOBKZhwwoQEYSYTt5RAdvGNlbOSD7zvdEBi OnTEumqW8aaQD2uSviEarCWLTpQISDY4kyVy9UJXTnmlxMQ4IIDK1smAxC+IVa8D aCJg3/0SXi0HHoo0RjntqEWEpiQoqWzdD37peFuzIiKKRjbK7nBoqsvqYF3XvPka 2dhpseml4BRaVO27dzxNm8WSdYes0pJOHTJTV4Re15vjUB+KdZfDRBGv7QZ9d6N6 F3bqfDVX3C4727pvP/3kTXOq5FJsAJ8= -----END CERTIFICATE-----Generated at Sat Nov 22 21:28:01 2025 by rpki-client