This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa File: 1547736e-3c24-37d0-88de-b5cdfe869e96.roa (raw, json) Hash identifier: Xp7GrERWErJO6X/UB3TNu8a0W4bb6esMvCga3C1ud/E= Subject key identifier: B8:02:F5:17:C2:2C:3B:86:85:BD:D7:D1:59:7B:35:EC:9E:29:76:3C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BD065B90AA944E31E70432340 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 138.1.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b9:0a:a9:44:e3:1e:70:43:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=f5880504-6373-40b3-938b-1ed37df940ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:ed:a9:fa:2b:ff:66:fb:c0:6e:2d:c9:53: 51:6d:c3:78:7b:c5:c6:97:a8:9e:de:20:85:15:74: 87:1f:84:07:70:d5:af:a6:02:ec:7c:ec:b2:6a:d9: 03:1a:e0:25:76:b9:94:01:a7:f7:c4:da:03:7e:42: 1a:34:00:6c:ce:7c:87:d9:a0:1d:f4:4b:31:d8:c8: 8c:e1:38:dd:26:02:35:7c:52:d7:12:5a:b3:f6:31: b9:32:80:4f:19:03:ad:76:1d:b2:ee:79:9e:4c:d8: 79:a2:9c:8c:45:66:1b:51:13:e1:d0:dd:f7:5d:f0: 65:9c:ce:2f:78:05:f8:65:e1:79:b1:2b:bd:6e:f1: 56:4a:e8:d4:43:db:c1:02:e4:34:45:23:fd:88:1e: 10:56:e3:47:80:1e:9b:db:06:33:0f:5d:b8:05:f5: 15:60:9b:55:40:35:8a:37:c7:81:c7:ab:8c:28:d6: fe:3b:da:8f:c8:55:fe:d9:1f:95:6a:8e:39:ce:3a: 3b:92:03:8f:46:da:fd:5e:16:18:dc:b2:83:99:a9: da:82:c1:99:43:e0:74:ac:8d:db:5c:4e:69:11:88: ff:32:13:15:89:ae:ce:b6:cf:c6:d8:f6:a3:e6:1f: c5:e3:fe:73:cb:49:bc:2e:b1:e4:95:f0:b9:f9:af: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:02:F5:17:C2:2C:3B:86:85:BD:D7:D1:59:7B:35:EC:9E:29:76:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c7:c2:f3:b6:74:cb:3b:9b:91:b0:bc:86:8f:a5:06:66:16: 8f:ab:64:20:72:a4:56:21:45:99:4c:4e:0e:33:f6:5e:8f:0d: 0a:04:37:13:e1:72:33:59:68:29:60:5e:35:bf:23:e7:35:44: b9:ab:0b:20:8b:34:0c:f5:b2:6a:00:d6:82:de:14:f4:b7:83: 71:89:21:5d:10:eb:e0:c2:3a:16:3a:01:df:c4:2f:ad:94:e5: 9b:33:84:7c:7f:b1:44:63:6f:48:34:be:11:8c:1f:09:99:02: c7:63:ab:63:a6:55:aa:d3:06:d7:b6:85:e0:b1:29:31:71:53: 46:1a:ef:67:4e:98:7a:68:52:08:a5:8f:a6:19:d4:57:c5:d7: 76:3c:c4:45:e6:d5:c1:a5:ff:a4:80:3a:fc:19:72:fe:67:bf: ca:dc:bd:8e:df:74:49:7e:af:e1:54:6d:e9:73:d7:9b:25:ac: 33:3e:8d:89:13:3b:10:80:bf:07:7d:5f:1c:6f:1c:c6:bc:15: e1:f5:89:ea:fd:fd:1c:49:86:75:ed:cc:d4:e2:69:5b:d1:10: 77:84:06:9b:23:eb:d2:5b:99:0d:a9:17:d5:37:c2:55:6b:81: be:d7:af:ed:61:b2:48:db:9d:3e:3b:6a:ce:01:6b:9e:3e:ad: 5d:b0:2a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbkKqUTjHnBDI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk ZjU4ODA1MDQtNjM3My00MGIzLTkzOGItMWVkMzdkZjk0MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPftqfor/2b7wG4tyVNRbcN4e8XGl6ie3iCF FXSHH4QHcNWvpgLsfOyyatkDGuAldrmUAaf3xNoDfkIaNABsznyH2aAd9Esx2MiM 4TjdJgI1fFLXElqz9jG5MoBPGQOtdh2y7nmeTNh5opyMRWYbURPh0N33XfBlnM4v eAX4ZeF5sSu9bvFWSujUQ9vBAuQ0RSP9iB4QVuNHgB6b2wYzD124BfUVYJtVQDWK N8eBx6uMKNb+O9qPyFX+2R+Vao45zjo7kgOPRtr9XhYY3LKDmanagsGZQ+B0rI3b XE5pEYj/MhMVia7Ots/G2Paj5h/F4/5zy0m8LrHklfC5+a/t7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgC9RfCLDuGhb3X0Vl7NeyeKXY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTU0NzczNmUtM2MyNC0z N2QwLTg4ZGUtYjVjZGZlODY5ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPHwvO2dMs7m5GwvIaPpQZmFo+rZCBypFYhRZlMTg4z9l6PDQoENxPh cjNZaClgXjW/I+c1RLmrCyCLNAz1smoA1oLeFPS3g3GJIV0Q6+DCOhY6Ad/EL62U 5ZszhHx/sURjb0g0vhGMHwmZAsdjq2OmVarTBte2heCxKTFxU0Ya72dOmHpoUgil j6YZ1FfF13Y8xEXm1cGl/6SAOvwZcv5nv8rcvY7fdEl+r+FUbelz15slrDM+jYkT OxCAvwd9XxxvHMa8FeH1ier9/RxJhnXtzNTiaVvREHeEBpsj69JbmQ2pF9U3wlVr gb7Xr+1hskjbnT47as4Ba54+rV2wKkA= -----END CERTIFICATE-----Generated at Sat Nov 22 21:27:58 2025 by rpki-client