This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa File: 429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa (raw, json) Hash identifier: JvvA+qOY6SPRW+espnS0NNrA8elW26Z6tijCP5XzTsA= Subject key identifier: D5:0F:BF:E9:2B:D6:F7:4D:F8:EF:6B:1D:73:19:C1:8F:FF:E0:6C:65 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BCF006C4BB5A36567832A3B00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 138.1.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6c:4b:b5:a3:65:67:83:2a:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=3c9437fa-e15e-4317-b733-d97c1b59295f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:76:8f:4f:be:fb:4c:47:13:13:e2:6a:18: 1f:74:56:48:ef:cd:b5:17:2b:5f:4e:e0:ab:6b:b7: f6:ff:5d:6a:e4:60:6d:9c:79:77:3e:a2:17:01:b1: 79:a9:02:1e:2c:39:5e:69:15:eb:d9:c2:9a:7b:63: cd:8f:44:73:0c:eb:25:34:09:98:ed:f2:ce:b5:98: d6:d0:7b:d3:65:57:36:59:98:ac:af:23:2b:56:cc: af:6b:db:1b:47:5f:b1:cf:91:b7:72:15:b1:ff:6e: 0a:1f:a3:c5:8d:60:1b:72:e3:33:0a:ea:b6:55:b7: cf:dd:bc:94:4b:60:0b:e6:bf:a0:46:ab:b8:e0:0a: 71:d0:01:25:84:f8:d9:a2:81:b3:fd:2b:60:df:04: 24:c4:7f:6a:8d:81:f5:b8:00:2b:f7:f1:23:05:91: 10:f0:af:4f:92:3e:07:16:3f:f1:bd:40:99:b9:f8: ff:f8:f8:e8:18:e9:23:6d:94:c9:f9:13:fb:bc:dd: 02:15:43:9b:22:7b:60:05:dd:20:6b:a6:b1:c6:bb: ad:34:43:8a:75:c5:37:c2:76:e0:42:de:56:02:4c: c4:7e:cb:89:5f:9f:6c:2f:89:75:9c:9f:a6:fb:9b: c7:5e:73:32:f3:5c:ce:44:a4:83:bd:d0:ac:1e:59: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:BF:E9:2B:D6:F7:4D:F8:EF:6B:1D:73:19:C1:8F:FF:E0:6C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:60:14:e5:58:03:92:e9:62:cc:c0:aa:05:5d:45:c9:fe:7b: 28:f3:28:b2:a0:61:85:16:8e:37:54:72:2d:0c:89:0d:8e:e2: 63:8d:34:a2:bd:87:d5:78:a3:c3:f5:11:b5:23:4a:d2:87:79: 35:1f:35:12:86:d6:23:ee:ce:4b:b5:da:b5:0b:41:a7:73:cf: b4:6c:2b:0a:26:bd:0f:c5:ab:b7:41:f8:30:e2:d3:5d:db:7d: be:c3:71:d1:44:5a:12:3f:77:a2:10:b8:84:51:9a:11:09:b9: 37:e2:7d:eb:43:75:34:68:73:08:c3:12:c8:84:58:94:b8:eb: a5:e7:a2:d6:a4:c1:a7:4a:f7:06:65:bf:0c:6b:e2:a3:6f:9b: af:f7:47:5b:98:40:0d:0e:99:f0:48:21:7e:40:27:7c:57:7e: 74:cf:73:e2:b3:64:b4:78:61:90:c1:75:76:28:7e:95:a7:f6: f0:73:f3:1a:58:20:23:19:41:f5:33:59:0c:2a:6c:78:0c:16: 12:f6:c0:65:30:b5:a4:b5:9d:5b:e4:03:c6:91:5f:da:04:2d: 80:9f:cc:6d:ac:eb:cc:ee:d5:42:d3:b5:6f:a4:db:d2:40:ce: ad:42:11:12:f2:a4:6a:ce:b9:52:db:46:b0:32:11:e8:da:07: 78:ed:6f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGxLtaNlZ4MqOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk M2M5NDM3ZmEtZTE1ZS00MzE3LWI3MzMtZDk3YzFiNTkyOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRp2j0+++0xHExPiahgfdFZI7821FytfTuCr a7f2/11q5GBtnHl3PqIXAbF5qQIeLDleaRXr2cKae2PNj0RzDOslNAmY7fLOtZjW 0HvTZVc2WZisryMrVsyva9sbR1+xz5G3chWx/24KH6PFjWAbcuMzCuq2VbfP3byU S2AL5r+gRqu44Apx0AElhPjZooGz/Stg3wQkxH9qjYH1uAAr9/EjBZEQ8K9Pkj4H Fj/xvUCZufj/+PjoGOkjbZTJ+RP7vN0CFUObIntgBd0ga6axxrutNEOKdcU3wnbg Qt5WAkzEfsuJX59sL4l1nJ+m+5vHXnMy81zORKSDvdCsHllFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUPv+kr1vdN+O9rHXMZwY//4GxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDI5ZjgwNmMtNWY3MS0z NTk1LWFjNWMtYzA0YzdlMjljMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1gFOVYA5LpYszAqgVdRcn+eyjzKLKgYYUWjjdUci0MiQ2O4mONNKK9 h9V4o8P1EbUjStKHeTUfNRKG1iPuzku12rULQadzz7RsKwomvQ/Fq7dB+DDi013b fb7DcdFEWhI/d6IQuIRRmhEJuTfifetDdTRocwjDEsiEWJS466XnotakwadK9wZl vwxr4qNvm6/3R1uYQA0OmfBIIX5AJ3xXfnTPc+KzZLR4YZDBdXYofpWn9vBz8xpY ICMZQfUzWQwqbHgMFhL2wGUwtaS1nVvkA8aRX9oELYCfzG2s68zu1ULTtW+k29JA zq1CERLypGrOuVLbRrAyEejaB3jtb5g= -----END CERTIFICATE-----Generated at Sat Nov 22 21:27:53 2025 by rpki-client