This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa File: 3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa (raw, json) Hash identifier: 4qWFw7Imz9n4TZtVlIca3QjF00j8JUQHiafEG920pZ8= Subject key identifier: A7:C5:54:0C:58:E2:85:8E:FB:8B:7E:B5:93:DC:1C:73:E1:E3:9F:87 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BCF006D0C2223F5C6700F5497 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 138.1.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6d:0c:22:23:f5:c6:70:0f:54:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=dc572a70-0d5b-4ec4-bd84-54f5209975c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:0e:88:d1:79:b2:8c:3e:ee:85:d4:92:e1: 8e:6e:29:fc:69:11:5c:5e:84:94:a7:ca:f5:be:78: e8:0f:ff:5d:b1:a4:3a:f1:1a:72:e4:8e:9a:76:aa: bf:7d:22:1c:65:5f:69:c7:9a:a6:ba:df:9f:e8:6e: 04:ff:bf:b1:29:aa:46:21:6e:6a:76:92:04:73:dc: fc:40:3f:a6:6d:99:a7:cc:75:84:7e:f7:22:d4:28: b2:98:46:d6:ce:d6:fa:4a:36:25:b1:ef:81:34:07: 68:1b:8e:93:be:1e:a6:c5:06:37:33:94:e0:7a:3f: 38:78:f0:73:0f:32:b6:8a:42:c5:f2:ac:11:41:41: 6f:60:23:97:02:80:72:1a:b2:3a:5a:2a:6e:28:ce: e7:18:53:d8:36:16:4f:c6:22:b6:ab:62:0e:6f:01: b0:96:5c:2e:f0:9e:4f:a0:b5:fc:ef:d9:d7:a9:a7: 96:76:12:2d:06:69:8b:33:c0:ef:e2:bd:6c:b4:2c: e5:79:ee:e6:08:c9:bb:79:ab:4d:78:e5:dd:b0:0d: 6f:9e:36:f7:72:1f:e4:e5:98:e7:92:e4:51:8d:f1: 5f:f7:ea:d3:8a:b6:25:04:1c:0d:1b:15:49:30:8f: 4c:de:a8:96:85:45:6d:78:d8:89:ac:f5:8d:54:51: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C5:54:0C:58:E2:85:8E:FB:8B:7E:B5:93:DC:1C:73:E1:E3:9F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9c:73:26:b5:46:4d:b1:80:13:12:09:17:07:cf:29:44:f4: 4d:44:05:96:2d:1a:89:79:92:db:8c:53:d1:c1:2f:08:42:49: d6:45:57:4d:91:ee:98:c2:dd:3b:39:51:20:5f:e9:aa:b2:06: bf:69:6d:3d:cb:66:88:c5:45:a3:0d:48:1a:16:a4:26:c0:b2: 0a:bd:08:4b:c2:24:89:dd:34:1a:32:c4:83:d0:dd:a1:5f:61: fa:3f:53:ce:06:38:ac:f9:b4:09:45:a3:6b:0c:de:cd:bd:f0: 25:c3:3b:1d:9b:9c:a7:47:54:b6:7f:4e:94:7b:9d:eb:1c:26: 83:25:fc:d0:6d:0c:3b:77:cc:01:37:82:bd:3e:3a:e3:07:4b: 61:93:47:15:63:14:47:cd:f8:3a:e6:a4:f1:4e:4f:54:77:ee: b5:33:8a:19:e5:1a:2d:b4:94:2c:23:18:db:38:12:21:00:7a: 3e:02:90:dc:59:56:1c:d1:37:7e:98:1b:67:9b:ce:8f:2e:d1: 54:10:f5:78:35:d0:7f:31:d3:4d:4c:a7:1f:37:2d:fa:12:a9: d0:d8:12:24:8e:57:44:a3:a6:df:26:05:50:38:a6:59:17:6e: f3:f2:c0:3b:eb:a6:4d:3a:a8:ef:b8:d2:87:0e:7b:c7:b2:a4: a4:4e:b0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAG0MIiP1xnAPVJcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZGM1NzJhNzAtMGQ1Yi00ZWM0LWJkODQtNTRmNTIwOTk3NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAQOiNF5sow+7oXUkuGObin8aRFcXoSUp8r1 vnjoD/9dsaQ68Rpy5I6adqq/fSIcZV9px5qmut+f6G4E/7+xKapGIW5qdpIEc9z8 QD+mbZmnzHWEfvci1CiymEbWztb6SjYlse+BNAdoG46Tvh6mxQY3M5Tgej84ePBz DzK2ikLF8qwRQUFvYCOXAoByGrI6WipuKM7nGFPYNhZPxiK2q2IObwGwllwu8J5P oLX879nXqaeWdhItBmmLM8Dv4r1stCzlee7mCMm7eatNeOXdsA1vnjb3ch/k5Zjn kuRRjfFf9+rTirYlBBwNGxVJMI9M3qiWhUVteNiJrPWNVFFIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfFVAxY4oWO+4t+tZPcHHPh45+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2Q5OTRkMmUtOWQ1MS0z YjBiLTgwNjYtNzk4YWI0OWIyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeccya1Rk2xgBMSCRcHzylE9E1EBZYtGol5ktuMU9HBLwhCSdZFV02R 7pjC3Ts5USBf6aqyBr9pbT3LZojFRaMNSBoWpCbAsgq9CEvCJIndNBoyxIPQ3aFf Yfo/U84GOKz5tAlFo2sM3s298CXDOx2bnKdHVLZ/TpR7nescJoMl/NBtDDt3zAE3 gr0+OuMHS2GTRxVjFEfN+DrmpPFOT1R37rUzihnlGi20lCwjGNs4EiEAej4CkNxZ VhzRN36YG2ebzo8u0VQQ9Xg10H8x001Mpx83LfoSqdDYEiSOV0Sjpt8mBVA4plkX bvPywDvrpk06qO+40ocOe8eypKROsAs= -----END CERTIFICATE-----Generated at Sat Nov 22 21:27:56 2025 by rpki-client