This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa File: ea31493e-fb8b-3c77-a212-6b2e1708156a.roa (raw, json) Hash identifier: AsSBCZoMaZmcnUgqE2ew3uiLJtpCfCR64CfRd0e/mzY= Subject key identifier: E3:BB:12:45:8B:66:B9:22:31:C5:9B:FB:45:92:7A:F8:86:9C:2F:DB Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584C5666AE5A05E3E6A76B35CA50 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 202276 IP address blocks: 136.228.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ae:5a:05:e3:e6:a7:6b:35:ca:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=3ce74701-5c6d-4bcf-9498-f8b516a271ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:c5:a4:55:b5:7e:44:21:b1:54:ee:fd:38: ec:00:cc:e2:ea:25:1b:4b:51:47:cd:22:e9:16:fd: 95:eb:2c:3f:2c:fa:7a:f1:58:9e:1f:2c:b7:c7:c0: f9:cb:95:ab:1d:5f:cb:e9:cb:53:3e:05:36:20:a9: 9c:e3:16:23:c8:8a:0a:58:f8:7c:96:9a:1f:c9:76: 67:a4:dd:fc:29:fa:9d:51:10:00:c6:04:cf:77:45: 42:da:f9:79:ad:32:12:ae:f6:8e:c8:9e:7c:99:4c: 0a:e5:fd:75:90:df:7f:17:2c:65:6e:5a:58:be:81: f6:df:ce:06:e6:73:55:2a:c7:50:46:c6:99:20:0d: a9:7b:21:af:49:68:3d:54:ff:95:a1:52:df:7c:6a: f6:d7:a2:2c:d9:f5:1a:35:ba:27:f2:4e:95:07:cd: 81:c3:e7:cd:c1:83:8e:40:2d:3d:82:5b:8f:8f:7f: db:bc:28:75:9c:63:37:6a:79:95:c9:9d:ed:b8:bd: 18:1e:33:79:9e:2f:8f:60:43:7c:ba:93:c6:05:ef: 6e:f2:ce:3e:fd:5d:00:d4:94:98:ce:a7:32:49:ad: d8:81:7e:5a:7b:58:cb:c9:14:65:bb:4d:ac:8b:9a: 75:b0:36:b3:a8:38:a8:a5:5b:51:20:76:b4:96:97: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:12:45:8B:66:B9:22:31:C5:9B:FB:45:92:7A:F8:86:9C:2F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:34:aa:73:1b:56:6a:bc:42:1c:11:cf:3f:c8:4e:16:ac: 73:72:bc:aa:da:64:69:bc:95:61:59:58:e2:92:7b:9b:0f:0e: 7a:c1:64:28:17:5b:19:c8:49:b3:78:60:19:d8:c3:c5:9b:94: 1e:5c:54:95:a5:da:2b:9d:e9:bc:b1:6d:56:5b:5c:84:53:f5: 65:15:e7:41:df:04:81:c8:ae:43:73:a0:48:3b:c9:0c:82:27: e2:ba:7e:7f:e6:01:91:a2:cb:64:1b:42:ad:ba:de:d8:3e:94: 3d:38:d4:3b:6f:dd:bc:f4:26:3e:08:c0:21:29:7c:b3:cc:1a: a3:b9:6d:1d:db:8e:8b:9e:2a:58:2c:db:1d:29:ed:91:e4:25: bd:b3:d0:c5:34:34:e7:bc:69:5f:4b:a4:00:72:38:e0:d5:ba: a4:76:3e:58:26:05:dc:3e:8f:b9:72:4d:7b:86:27:f7:b6:5c: 9d:69:9c:e3:96:6c:78:7e:e3:e5:0a:72:c0:c4:18:94:f5:1f: a0:d8:26:b9:b0:fa:c4:d9:67:45:d4:98:03:33:f7:87:02:45: f0:ea:05:d1:c0:f7:a3:4e:5b:2c:c7:30:2c:d6:b3:7e:38:41: a9:dd:d4:53:64:d9:7f:96:5c:6d:82:3b:71:5e:48:f4:d5:aa: 41:4d:be:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZq5aBePmp2s1ylAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk M2NlNzQ3MDEtNWM2ZC00YmNmLTk0OTgtZjhiNTE2YTI3MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCXFpFW1fkQhsVTu/TjsAMzi6iUbS1FHzSLp Fv2V6yw/LPp68VieHyy3x8D5y5WrHV/L6ctTPgU2IKmc4xYjyIoKWPh8lpofyXZn pN38KfqdURAAxgTPd0VC2vl5rTISrvaOyJ58mUwK5f11kN9/FyxlblpYvoH2384G 5nNVKsdQRsaZIA2peyGvSWg9VP+VoVLffGr216Is2fUaNbon8k6VB82Bw+fNwYOO QC09gluPj3/bvCh1nGM3anmVyZ3tuL0YHjN5ni+PYEN8upPGBe9u8s4+/V0A1JSY zqcySa3YgX5ae1jLyRRlu02si5p1sDazqDiopVtRIHa0lpcHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO7EkWLZrkiMcWb+0WSeviGnC/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZWEzMTQ5M2UtZmI4Yi0z Yzc3LWEyMTItNmIyZTE3MDgxNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEaNKpzG1ZqvEIcEc8/yE4WrHNyvKraZGm8lWFZWOKSe5sPDnrBZCgX WxnISbN4YBnYw8WblB5cVJWl2iud6byxbVZbXIRT9WUV50HfBIHIrkNzoEg7yQyC J+K6fn/mAZGiy2QbQq263tg+lD041Dtv3bz0Jj4IwCEpfLPMGqO5bR3bjoueKlgs 2x0p7ZHkJb2z0MU0NOe8aV9LpAByOODVuqR2PlgmBdw+j7lyTXuGJ/e2XJ1pnOOW bHh+4+UKcsDEGJT1H6DYJrmw+sTZZ0XUmAMz94cCRfDqBdHA96NOWyzHMCzWs344 Qand1FNk2X+WXG2CO3FeSPTVqkFNvqM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:04 2026 by rpki-client