This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa File: 4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa (raw, json) Hash identifier: 40d7fRmKcLwxrr6gHAp5K8vYFWI9eWKdWHR4wdvMk00= Subject key identifier: 2D:5A:26:19:87:23:09:0C:4A:88:12:40:23:20:CC:F6:A7:F5:C7:05 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584C02A601ABFE2B61D8C2B251A0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 137922 IP address blocks: 136.228.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:01:ab:fe:2b:61:d8:c2:b2:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=00223e69-08a9-4781-a565-438d5576b2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:8d:67:6e:cc:32:5d:d5:20:cc:39:08:31: 53:ef:27:a5:47:33:09:22:71:4f:3e:80:c9:9e:f0: d0:36:89:48:f3:f3:3b:46:da:06:1f:dc:f6:e4:34: a0:9e:d2:ac:c5:c1:52:cb:bd:31:67:e8:0c:22:89: cb:a3:4c:25:4d:6a:f8:f4:44:0a:e4:c5:bb:d1:e5: e9:f4:98:77:8c:60:4f:2e:06:aa:b0:85:70:ee:70: f4:2f:13:4f:a8:53:a2:0b:9d:63:a8:54:b6:68:ff: 1c:f2:f6:d2:9e:fc:0b:0c:1a:da:0f:11:4f:25:76: 0e:8d:70:61:da:b7:29:19:7b:d8:cb:3c:fa:5c:84: 17:20:28:42:c0:e7:71:4f:d1:ea:c1:e5:c2:5c:01: 5a:b5:5a:dd:c0:60:46:c8:cb:fa:14:e0:95:eb:2a: 32:53:81:20:a0:4f:c1:53:72:b8:e9:04:5b:b1:84: a4:15:68:7b:9f:bd:90:f5:86:e8:db:d4:59:a0:4e: 87:df:c4:70:97:d6:e1:3a:09:22:62:af:05:b6:5c: 90:4e:63:78:a8:c2:bb:a3:27:e6:30:8f:99:e2:a4: 74:bb:ab:6a:98:ae:ff:35:e8:25:d6:3e:9c:09:1e: f4:d9:7a:d0:a8:c9:65:97:c4:06:e9:b0:19:7e:25: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:26:19:87:23:09:0C:4A:88:12:40:23:20:CC:F6:A7:F5:C7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:82:c2:3e:d6:fe:d0:83:17:1f:80:36:9f:2e:96:16:de:41: 5d:95:a9:cc:8d:75:d3:88:a6:b2:8e:c2:8b:54:bf:f4:aa:78: 8e:78:f6:58:85:24:ea:18:3c:49:4f:f8:13:04:f7:c0:85:41: a8:81:9f:e3:b2:5b:31:3d:7b:a9:38:e3:24:f7:bb:eb:58:55: 9a:00:98:d2:ab:cf:4d:04:47:e1:fe:19:9b:79:c4:0a:aa:c6: 0f:59:98:0b:6d:7b:96:18:45:4d:c0:5d:25:c8:ba:b3:84:a6: ab:77:41:71:cd:05:aa:93:9c:0e:d8:ef:70:ef:21:79:89:90: 69:ab:39:51:e8:01:4a:c7:70:f3:1c:df:81:1d:f4:dd:1d:4a: 06:3d:66:76:8f:ba:0f:a2:9b:4e:c0:31:e6:e6:e2:f9:b5:8a: 39:ab:bf:00:0a:a1:74:56:b0:93:69:6e:58:bf:5a:a0:0b:7b: 78:b3:f0:57:ac:c0:e2:4f:2f:60:ba:8d:29:3d:a1:11:22:9c: d1:a2:fd:1f:42:8e:a8:53:03:e9:64:02:b9:64:cb:d6:9c:3a: f8:e5:ec:89:60:ec:84:8c:f6:bc:1c:20:a4:db:95:2f:73:d0: c6:83:20:a7:93:b9:48:6e:79:16:a8:1f:43:ba:d1:b2:6a:13: b4:38:08:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCpgGr/ith2MKyUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk MDAyMjNlNjktMDhhOS00NzgxLWE1NjUtNDM4ZDU1NzZiMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96NZ27MMl3VIMw5CDFT7yelRzMJInFPPoDJ nvDQNolI8/M7RtoGH9z25DSgntKsxcFSy70xZ+gMIonLo0wlTWr49EQK5MW70eXp 9Jh3jGBPLgaqsIVw7nD0LxNPqFOiC51jqFS2aP8c8vbSnvwLDBraDxFPJXYOjXBh 2rcpGXvYyzz6XIQXIChCwOdxT9HqweXCXAFatVrdwGBGyMv6FOCV6yoyU4EgoE/B U3K46QRbsYSkFWh7n72Q9Ybo29RZoE6H38Rwl9bhOgkiYq8FtlyQTmN4qMK7oyfm MI+Z4qR0u6tqmK7/Negl1j6cCR702XrQqMlll8QG6bAZfiXGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1aJhmHIwkMSogSQCMgzPan9ccFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNGE5ZjVmZjAtMDI4Ny0z MjFhLWFiMjAtNTUyOGZkYzFiNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaCwj7W/tCDFx+ANp8ulhbeQV2VqcyNddOIprKOwotUv/SqeI549liF JOoYPElP+BME98CFQaiBn+OyWzE9e6k44yT3u+tYVZoAmNKrz00ER+H+GZt5xAqq xg9ZmAtte5YYRU3AXSXIurOEpqt3QXHNBaqTnA7Y73DvIXmJkGmrOVHoAUrHcPMc 34Ed9N0dSgY9ZnaPug+im07AMebm4vm1ijmrvwAKoXRWsJNpbli/WqALe3iz8Fes wOJPL2C6jSk9oREinNGi/R9CjqhTA+lkArlky9acOvjl7Ilg7ISM9rwcIKTblS9z 0MaDIKeTuUhueRaoH0O60bJqE7Q4CJg= -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:32 2025 by rpki-client