This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa File: 8f4fd58a-3135-3fa4-8496-60e3143a2363.roa (raw, json) Hash identifier: 79QFDXs8KcMkTEUmR9c7lGEh9SRQRxGMVKPIRmXTkPU= Subject key identifier: 46:E5:E8:7F:B4:81:8D:49:BB:19:3C:CD:78:25:C1:17:9D:EF:CE:20 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BCF007491B497C7BFCC27F1C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 138.1.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:74:91:b4:97:c7:bf:cc:27:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=c15d2001-6a73-4c23-bd94-62292bc04bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:fc:ac:a4:f0:a4:0e:85:b3:20:6d:6c:a6: fd:ec:e3:a3:f4:a9:bf:b9:b5:0c:eb:46:f2:b9:ae: f4:32:43:dc:f1:14:0f:3f:73:11:50:72:e1:fd:16: fd:b1:a9:8c:65:6f:90:51:d1:bd:17:b3:9e:b1:e7: ed:52:19:76:bc:8a:99:bb:c7:2e:95:40:0e:b4:1a: ae:f8:f2:86:ce:b2:88:41:1d:00:e9:55:f6:af:1b: bd:80:9b:1b:3f:f6:14:5d:54:e3:b6:86:2e:4c:63: d2:ea:59:3c:ba:b3:4d:dd:f2:9f:9a:bc:e9:7b:5c: e0:a2:6d:68:9f:11:64:dc:94:cf:66:ea:3a:c7:01: 60:51:70:cd:f5:f2:31:69:db:99:bb:c4:8b:d2:0e: f7:c3:e0:36:29:4e:36:92:c4:7a:c6:86:3e:31:07: 56:39:41:90:bc:ce:95:02:53:6d:4f:c1:50:ea:c3: 9e:53:23:ed:c0:1a:4d:9d:b1:89:86:e9:7e:97:75: 3a:51:6a:7c:ef:25:91:f3:76:0c:8f:b8:f6:58:15: f7:d2:0a:b2:8b:63:26:f2:b6:c1:3d:be:0a:2b:c3: be:30:1b:cd:80:9e:ed:82:39:94:15:6a:3b:2c:7e: 66:b6:91:8b:d3:b7:dc:97:e2:e7:f4:46:20:cc:ca: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:E8:7F:B4:81:8D:49:BB:19:3C:CD:78:25:C1:17:9D:EF:CE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:db:45:68:ae:7c:cb:03:e3:e8:7c:ad:e7:da:f9:19:dc:ac: 8d:fa:f1:5d:2d:e6:01:98:9b:03:aa:e3:91:8f:04:dd:80:e2: e4:ae:29:7d:63:49:07:ba:22:57:b5:52:ae:25:82:30:09:b2: 81:4c:1d:60:ad:42:29:b9:bd:43:9b:6a:3e:ce:fc:0a:d2:a8: e1:89:6b:3e:42:15:3f:38:49:26:9d:11:73:8a:e0:4e:e3:4e: f9:97:56:ee:28:d0:5f:ec:04:57:4b:42:43:13:bb:b9:b1:96: 78:92:af:6f:ae:27:fc:f8:d6:cb:91:97:10:a9:f4:f3:a7:31: 9f:51:69:3c:2f:ba:2d:81:5e:82:f5:f6:d1:ab:e2:e2:cc:ab: 61:82:34:b2:b1:97:a0:10:25:f9:c4:37:ed:81:fe:ee:03:9e: 05:1b:bc:d7:4e:ea:19:70:a6:31:97:a6:89:44:b1:d8:be:b6: 36:de:74:36:e3:cb:42:d2:ad:f1:f0:da:66:c5:aa:f7:36:ed: 7d:06:a0:38:21:55:77:b4:f3:2e:6b:d6:18:2c:0a:23:4a:fb: da:31:6f:a0:47:ab:00:9a:4e:e7:d9:58:f3:5a:50:5b:0e:4a: b3:f9:c0:9f:24:1a:50:11:27:ff:9b:92:84:6c:d9:25:18:b2: c7:a9:4d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHSRtJfHv8wn8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YzE1ZDIwMDEtNmE3My00YzIzLWJkOTQtNjIyOTJiYzA0YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSD8rKTwpA6FsyBtbKb97OOj9Km/ubUM60by ua70MkPc8RQPP3MRUHLh/Rb9samMZW+QUdG9F7OeseftUhl2vIqZu8culUAOtBqu +PKGzrKIQR0A6VX2rxu9gJsbP/YUXVTjtoYuTGPS6lk8urNN3fKfmrzpe1zgom1o nxFk3JTPZuo6xwFgUXDN9fIxaduZu8SL0g73w+A2KU42ksR6xoY+MQdWOUGQvM6V AlNtT8FQ6sOeUyPtwBpNnbGJhul+l3U6UWp87yWR83YMj7j2WBX30gqyi2Mm8rbB Pb4KK8O+MBvNgJ7tgjmUFWo7LH5mtpGL07fcl+Ln9EYgzMoE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbl6H+0gY1Juxk8zXglwRed784gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGY0ZmQ1OGEtMzEzNS0z ZmE0LTg0OTYtNjBlMzE0M2EyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbbRWiufMsD4+h8refa+RncrI368V0t5gGYmwOq45GPBN2A4uSuKX1j SQe6Ile1Uq4lgjAJsoFMHWCtQim5vUObaj7O/ArSqOGJaz5CFT84SSadEXOK4E7j TvmXVu4o0F/sBFdLQkMTu7mxlniSr2+uJ/z41suRlxCp9POnMZ9RaTwvui2BXoL1 9tGr4uLMq2GCNLKxl6AQJfnEN+2B/u4DngUbvNdO6hlwpjGXpolEsdi+tjbedDbj y0LSrfHw2mbFqvc27X0GoDghVXe08y5r1hgsCiNK+9oxb6BHqwCaTufZWPNaUFsO SrP5wJ8kGlARJ/+bkoRs2SUYssepTak= -----END CERTIFICATE-----Generated at Sat Nov 22 21:28:20 2025 by rpki-client