This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa File: af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa (raw, json) Hash identifier: z+7knUto4uoSOK1PiQ3a4TySipAkfKEf7Zk1VyI7b1A= Subject key identifier: F6:A2:EC:D0:90:46:05:E4:0F:3F:C3:F5:EF:03:B9:60:B0:23:0D:B5 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584BF4B097146F6BCA909A8BC540 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 202276 IP address blocks: 136.228.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:97:14:6f:6b:ca:90:9a:8b:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=7f329709-1b72-4fae-a4ac-e0904bc8a85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:6e:c9:61:95:c4:19:ad:11:b0:51:97:4a: 5d:d2:fb:9c:55:cc:87:d5:bd:04:3d:45:a4:2d:75: 18:da:8b:38:31:33:43:ef:ed:02:0a:30:6b:71:e8: 54:50:a9:59:b4:9a:0f:7b:0d:f1:09:50:2d:f4:a2: 27:94:a6:7a:08:bf:b7:90:a6:54:32:0d:dc:21:f7: e0:8d:1d:6f:99:ab:55:f1:30:dd:b7:0e:db:fc:6f: ad:1d:ef:46:77:73:6a:77:5a:f3:03:54:2d:02:ef: a4:71:c5:a7:41:a8:1e:1f:86:80:7b:d7:eb:a9:74: ea:fa:6d:c1:bf:2e:c3:b4:77:10:87:7e:76:9a:c6: 28:ba:3c:09:83:c3:bf:c1:7b:1b:84:03:05:86:61: 9c:a1:97:9c:bd:c1:7b:5f:4a:b2:9d:d8:c1:89:87: e0:79:8f:32:44:ee:da:64:59:bf:02:e7:28:b0:cb: dd:8a:fe:b0:e3:3f:2c:46:bc:ba:0c:61:1e:f7:f3: 68:6f:82:22:35:9f:9d:56:c9:f0:9c:ab:71:c5:6c: 98:a8:54:49:26:f8:50:ad:c4:f2:db:07:61:a5:a0: c6:17:5c:22:5c:25:f7:c1:d7:b0:d3:ca:c5:3b:bb: a2:fd:c0:6f:c7:68:e0:2b:7b:81:44:6b:84:39:a8: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A2:EC:D0:90:46:05:E4:0F:3F:C3:F5:EF:03:B9:60:B0:23:0D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fc:a9:94:1a:a5:5c:db:7d:6d:a7:db:8d:6c:0a:99:d5:bf: cb:46:1b:81:ae:ed:28:71:89:76:20:6f:05:8e:20:58:d7:87: 98:45:ac:e0:28:70:5e:ad:06:05:24:b4:be:9b:58:52:e2:7c: ab:d0:33:78:aa:c3:7e:ce:ea:24:dd:f8:7d:0b:3f:d2:bb:49: 3e:87:4e:5a:c6:2e:c0:b6:82:ee:3f:ca:db:59:95:10:2c:63: f2:06:17:a2:c0:d2:1b:8b:f2:e0:d6:a9:38:c5:bb:0d:c9:9d: 7b:be:07:42:1b:a1:b4:fe:9c:82:d9:01:39:ca:73:b9:15:46: 0c:3a:7b:2e:1e:42:d9:bb:c9:3a:df:2b:96:16:91:79:bf:22: 36:28:b1:5c:22:70:e2:67:5c:54:d7:44:e4:69:2d:20:a7:ec: a1:36:48:ec:2f:6a:4e:c4:12:90:18:e0:b9:df:b9:fb:b9:73: 57:d6:51:dc:fe:fb:cd:78:f5:a4:f4:a4:11:3c:af:d4:d8:ae: 2b:42:2d:96:8f:8e:e4:19:37:2a:3e:71:03:98:13:02:f3:1e: b1:cd:1b:a1:02:e4:fa:c3:87:dd:db:8b:91:39:1f:41:6d:10: 11:7d:db:da:09:ae:b6:88:ed:7a:c6:26:a1:04:73:c0:60:08: 2a:84:3e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJcUb2vKkJqLxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk N2YzMjk3MDktMWI3Mi00ZmFlLWE0YWMtZTA5MDRiYzhhODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPRuyWGVxBmtEbBRl0pd0vucVcyH1b0EPUWk LXUY2os4MTND7+0CCjBrcehUUKlZtJoPew3xCVAt9KInlKZ6CL+3kKZUMg3cIffg jR1vmatV8TDdtw7b/G+tHe9Gd3Nqd1rzA1QtAu+kccWnQageH4aAe9frqXTq+m3B vy7DtHcQh352msYoujwJg8O/wXsbhAMFhmGcoZecvcF7X0qyndjBiYfgeY8yRO7a ZFm/AucosMvdiv6w4z8sRry6DGEe9/Nob4IiNZ+dVsnwnKtxxWyYqFRJJvhQrcTy 2wdhpaDGF1wiXCX3wdew08rFO7ui/cBvx2jgK3uBRGuEOaiTQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPai7NCQRgXkDz/D9e8DuWCwIw21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWYwZjE3NjQtZjE2MS0z MmFlLWExMGMtY2Q0YmNiOTVkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH8qZQapVzbfW2n241sCpnVv8tGG4Gu7ShxiXYgbwWOIFjXh5hFrOAo cF6tBgUktL6bWFLifKvQM3iqw37O6iTd+H0LP9K7ST6HTlrGLsC2gu4/yttZlRAs Y/IGF6LA0huL8uDWqTjFuw3JnXu+B0IbobT+nILZATnKc7kVRgw6ey4eQtm7yTrf K5YWkXm/IjYosVwicOJnXFTXRORpLSCn7KE2SOwvak7EEpAY4Lnfufu5c1fWUdz+ +8149aT0pBE8r9TYritCLZaPjuQZNyo+cQOYEwLzHrHNG6EC5PrDh93bi5E5H0Ft EBF929oJrraI7XrGJqEEc8BgCCqEPkY= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:46 2025 by rpki-client