This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa File: a4111b8e-0a64-3b24-9389-e0763deb2b01.roa (raw, json) Hash identifier: EtrhaFkCoooVlO47Z2NN4boBWcsuV/8VgZbJBoM7i7A= Subject key identifier: F4:F6:DE:2A:69:15:E8:C9:DB:75:F1:13:78:CB:EE:E4:F1:A3:64:AA Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584C14CB601006E8B89BB8569070 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 202276 IP address blocks: 136.228.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:60:10:06:e8:b8:9b:b8:56:90:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=632f2871-bd47-402e-a070-809a5e52946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:75:26:03:3b:7a:1c:95:6d:ca:13:d0:c6: ee:e4:9f:a7:7d:78:04:4c:a4:bc:db:47:f6:5a:7b: 73:f7:40:ba:1d:71:d3:4d:17:ac:cf:21:ca:ec:35: 4b:1b:16:36:bb:6f:2c:af:67:8c:6c:4f:dd:71:38: 44:c7:6a:0c:09:e6:d7:48:f8:ac:85:e0:8e:82:9f: ee:dd:a0:67:ca:d4:51:3f:ea:91:bd:fd:88:c2:d4: 1b:2f:75:8c:ca:ac:9d:4c:8f:7a:a4:70:a5:54:f3: a8:13:7f:cf:88:2d:ad:d0:a7:a1:c7:15:1e:66:90: 20:88:3f:e4:c2:db:41:4c:fb:ca:36:77:ce:d3:84: 16:74:be:82:7a:be:59:ad:18:72:dd:1d:91:82:db: aa:90:93:f0:d5:f5:58:6f:8b:2a:62:12:71:a4:9f: 6c:5b:15:84:dd:04:36:0e:45:97:ca:5d:c0:0d:ff: c2:9c:62:ee:d8:43:87:3e:83:d1:f8:2c:5f:5e:95: 08:e6:b0:26:b0:b6:33:1b:5d:02:0c:55:7a:4c:ae: 81:5b:44:48:e5:b6:2f:15:5b:bf:a5:26:44:45:1a: f1:a4:b7:1c:a7:bf:db:39:e4:fe:fa:50:5f:d8:a1: 9a:e6:4b:a6:34:dc:45:a4:a8:b8:53:9a:79:6b:92: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:DE:2A:69:15:E8:C9:DB:75:F1:13:78:CB:EE:E4:F1:A3:64:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ac:e8:ae:38:aa:64:d9:c8:a4:b3:03:a0:f0:89:14:c7:b2: f3:59:c8:01:ca:29:2b:04:b2:4c:b4:6a:df:79:d8:ae:df:54: 84:e8:40:a1:ac:fb:bf:e3:41:95:11:2f:9b:64:79:e4:3c:8a: 2f:60:c2:30:d3:ec:09:ba:1b:de:76:02:6a:25:e1:66:e0:4f: 70:90:9c:12:b6:a0:b2:2e:3d:30:df:a2:00:87:4d:c5:a1:f8: ad:05:42:e4:b9:7f:9b:8e:33:05:3d:d9:92:0a:13:00:20:f7: 88:19:d9:ca:42:cd:c3:b7:de:c3:d3:5e:a9:f8:73:fe:70:94: 5b:05:3a:12:27:e6:e1:d2:a5:43:32:fa:a4:52:a0:9d:61:17: 4d:6f:01:a5:47:73:8e:b7:30:49:6b:ba:4f:e8:fd:53:d0:9d: e0:bc:4c:45:c0:58:bb:75:8d:b3:21:b9:40:0c:a2:b0:64:c2: a7:0c:99:1d:16:a8:8e:0d:ba:a0:79:2b:a1:ff:12:30:5a:da: 16:c0:25:04:b2:89:a0:bb:66:f0:33:51:ac:c2:36:86:62:18: a6:3e:ad:13:08:71:fc:78:2f:1f:52:b7:c1:0f:45:21:b6:e1: 26:5d:9d:21:4e:ff:c0:56:35:4e:fc:27:a4:d4:5a:21:c9:b3: b9:1c:2a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy2AQBui4m7hWkHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk NjMyZjI4NzEtYmQ0Ny00MDJlLWEwNzAtODA5YTVlNTI5NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2N1JgM7ehyVbcoT0Mbu5J+nfXgETKS820f2 Wntz90C6HXHTTReszyHK7DVLGxY2u28sr2eMbE/dcThEx2oMCebXSPisheCOgp/u 3aBnytRRP+qRvf2IwtQbL3WMyqydTI96pHClVPOoE3/PiC2t0KehxxUeZpAgiD/k wttBTPvKNnfO04QWdL6Cer5ZrRhy3R2RgtuqkJPw1fVYb4sqYhJxpJ9sWxWE3QQ2 DkWXyl3ADf/CnGLu2EOHPoPR+CxfXpUI5rAmsLYzG10CDFV6TK6BW0RI5bYvFVu/ pSZERRrxpLccp7/bOeT++lBf2KGa5kumNNxFpKi4U5p5a5L7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT23ippFejJ23XxE3jL7uTxo2SqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTQxMTFiOGUtMGE2NC0z YjI0LTkzODktZTA3NjNkZWIyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGs6K44qmTZyKSzA6DwiRTHsvNZyAHKKSsEsky0at952K7fVIToQKGs +7/jQZURL5tkeeQ8ii9gwjDT7Am6G952Amol4WbgT3CQnBK2oLIuPTDfogCHTcWh +K0FQuS5f5uOMwU92ZIKEwAg94gZ2cpCzcO33sPTXqn4c/5wlFsFOhIn5uHSpUMy +qRSoJ1hF01vAaVHc463MElruk/o/VPQneC8TEXAWLt1jbMhuUAMorBkwqcMmR0W qI4NuqB5K6H/EjBa2hbAJQSyiaC7ZvAzUazCNoZiGKY+rRMIcfx4Lx9St8EPRSG2 4SZdnSFO/8BWNU78J6TUWiHJs7kcKqQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:39 2025 by rpki-client