This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6aec358c-06ef-346a-a7c3-320d0e3b82df.roa File: 6aec358c-06ef-346a-a7c3-320d0e3b82df.roa (raw, json) Hash identifier: EF+g+2Y95nnL0gpSC+qTeCV/oeKm6mp6sPAFs2GgdFU= Subject key identifier: C6:21:1E:F9:A6:9D:70:2D:55:73:C1:D3:42:74:77:12:53:C3:14:19 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584BEF1B3376BE01FD35724F9D80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6aec358c-06ef-346a-a7c3-320d0e3b82df.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 396253 IP address blocks: 163.120.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:33:76:be:01:fd:35:72:4f:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=e2809f2a-104f-43dc-adb3-7fdc8f353cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:e5:22:e2:7e:67:49:6d:db:08:0d:44:19: ad:f3:0c:16:67:a2:b2:60:ea:b9:99:25:f6:ea:22: 18:44:38:00:69:ef:8f:eb:0c:6f:46:17:37:57:e2: 65:aa:7c:b9:c8:f5:63:7c:c7:ef:c9:b0:44:7b:02: bc:a1:17:b8:e0:cb:3a:eb:55:48:41:ee:0c:d0:9a: d4:84:ea:29:df:31:68:24:dd:5d:02:1d:72:3c:b6: 74:f2:5f:17:f5:5f:21:79:79:45:3a:4a:a7:c8:e2: db:58:4b:49:8e:73:66:3c:10:06:a4:2e:c7:79:9d: 36:df:6b:c9:10:3a:9b:b6:bf:29:cd:00:31:7b:a4: 8c:a4:81:ee:a6:33:87:c7:f6:49:5f:1a:18:90:7e: 72:ba:15:4d:d2:a2:a7:14:47:ee:8a:5d:f2:9d:30: a5:6d:a1:8e:48:6a:51:0d:f1:3d:67:02:5f:ac:76: 23:c2:4c:e3:e6:91:31:2d:8e:3c:3b:c3:e6:06:1e: 4d:58:9c:e1:c4:e4:87:01:38:35:c8:08:ee:66:02: 2f:04:e6:cd:ce:1b:b3:76:f6:5c:ac:bd:fd:d8:ee: 81:c7:e8:e2:e9:27:ef:b7:37:34:9c:c3:af:8e:b4: cf:65:0e:e7:2c:fb:02:59:36:5d:5e:dd:37:22:82: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:1E:F9:A6:9D:70:2D:55:73:C1:D3:42:74:77:12:53:C3:14:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6aec358c-06ef-346a-a7c3-320d0e3b82df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1c:47:67:03:a9:e7:b3:97:9a:67:99:16:7c:b1:f9:7c:95: e4:e6:c0:d1:98:c1:98:9a:aa:bd:cb:17:7d:a3:aa:59:44:77: e1:af:63:d4:79:50:c6:a1:28:8b:cd:8b:00:75:ea:f5:22:12: 79:c3:3e:59:8b:60:24:90:b9:d5:11:61:98:65:a4:a8:ed:d1: e0:b0:34:75:c5:e1:5a:a1:f8:0d:72:3f:98:8e:5c:c4:c4:1e: 8e:d4:fb:96:32:ed:2f:ad:09:8d:12:8a:40:24:b4:94:e3:46: af:0a:4b:f3:2a:24:d5:8f:07:5c:32:38:27:8e:d0:49:69:37: cd:57:a7:e8:b8:e2:3e:9f:e8:ba:9a:dc:c4:a7:1a:e4:9f:8d: 7f:07:12:f5:8b:bb:52:c1:1b:aa:b1:2a:88:29:97:b2:1a:90: a5:0c:f5:1a:92:c0:61:9d:d5:87:43:6c:0f:2e:81:1b:6e:e4: 3d:89:d5:ba:06:8b:64:d4:4c:0b:45:cf:42:fa:d7:0b:1c:35: 46:88:cb:8d:f2:e8:30:c4:9c:a7:8f:dd:a5:60:3a:23:1b:a4: 68:86:fc:0c:51:77:75:c9:f8:7b:1d:8f:75:38:dd:08:4d:8b: 6f:a0:94:fd:e1:54:c8:b3:b7:5b:16:4c:46:aa:c9:80:92:8c: e3:28:14:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzN2vgH9NXJPnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk ZTI4MDlmMmEtMTA0Zi00M2RjLWFkYjMtN2ZkYzhmMzUzY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyojlIuJ+Z0lt2wgNRBmt8wwWZ6KyYOq5mSX2 6iIYRDgAae+P6wxvRhc3V+Jlqny5yPVjfMfvybBEewK8oRe44Ms661VIQe4M0JrU hOop3zFoJN1dAh1yPLZ08l8X9V8heXlFOkqnyOLbWEtJjnNmPBAGpC7HeZ0232vJ EDqbtr8pzQAxe6SMpIHupjOHx/ZJXxoYkH5yuhVN0qKnFEfuil3ynTClbaGOSGpR DfE9ZwJfrHYjwkzj5pExLY48O8PmBh5NWJzhxOSHATg1yAjuZgIvBObNzhuzdvZc rL392O6Bx+ji6Sfvtzc0nMOvjrTPZQ7nLPsCWTZdXt03IoKSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYhHvmmnXAtVXPB00J0dxJTwxQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNmFlYzM1OGMtMDZlZi0z NDZhLWE3YzMtMzIwZDBlM2I4MmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEcR2cDqeezl5pnmRZ8sfl8leTmwNGYwZiaqr3LF32jqllEd+GvY9R5 UMahKIvNiwB16vUiEnnDPlmLYCSQudURYZhlpKjt0eCwNHXF4Vqh+A1yP5iOXMTE Ho7U+5Yy7S+tCY0SikAktJTjRq8KS/MqJNWPB1wyOCeO0ElpN81Xp+i44j6f6Lqa 3MSnGuSfjX8HEvWLu1LBG6qxKogpl7IakKUM9RqSwGGd1YdDbA8ugRtu5D2J1boG i2TUTAtFz0L61wscNUaIy43y6DDEnKeP3aVgOiMbpGiG/AxRd3XJ+Hsdj3U43QhN i2+glP3hVMizt1sWTEaqyYCSjOMoFCM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:53 2025 by rpki-client